{"report_id":"4cc1e848-e5ba-4e60-acdf-e783605685aa","version":6,"status":"done","tags":[],"date":"2026-05-08T21:46:38Z","url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"title":"ONETAKE – сервера CS2 (КС2) PUBLIC, AWP, DM, MANIAC, FUN","dom":{"size":162712,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15428)","md5":"efe8ec2dad8029411cebaca801549113","sha1":"ef5f2cae60788d8d8db93dee6b4cb778d799b9b3","sha256":"bcef347975f64fb28d3fab801b39f174d76894f7dfcec810ca955f2ec0496e8b","sha512":"abf425539cc3478945e4b0b4e1e066a02a57dfda5723f4f4d75f4ca0456d822aeb6d96250a5432472c6b66a3be3c41ca56d96eefdd42f3b63c127ebd9dcae132","ssdeep":"1536:OZjhQal7DBZybgf2dQLpOkxSOU+sdvhRPRwaJSVBpcLGHongbLcRN5BaO:i1lZLfxokoOU+sZiXcLGHogQ","tlshash":"c2f3f67013f4447e0297a591fa70af6b2f91a577ea96065873fc0be94fc2dc2c84b918","dom_hash":"domhashcb4ea60012bdf5dc16b09c255448b449","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-12T21:46:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"onetake-cs2.com","ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":52,"received_data":4895391,"sent_data":28618,"comment":"","tags":null,"fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"onetake-cs2.ru","ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"domain_registered":"2024-06-09","domain_rank":466739,"first_seen":"2024-11-28T22:05:34.126994Z","last_seen":"2026-05-08T21:46:18.928984Z","alert_count":0,"request_count":18,"received_data":271590,"sent_data":8794,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"avatars.steamstatic.com","ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2013-11-07","domain_rank":84588,"first_seen":"2022-02-17T19:50:57Z","last_seen":"2026-05-03T18:06:20.919538Z","alert_count":0,"request_count":8,"received_data":86386,"sent_data":3856,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8a3fcb5c92ead1853bd877c7d554827","sha1":"f94da534b78cb23152d33a6ab62032e9151c6337","sha256":"5559611080624ffcfe0de2ea439e5cd281bf33599ed74c0fe2ee0e7985499e7f","sha512":"92efe87373d09798411c58bce678e2b37ba8d54003bfb68aa9412501a500fc41e1948f5af8e1f13010be40458be75635ee36b47d8ee54b6be0a5fa755b6825b6","ssdeep":"","tlshash":"d58000088a020a88380000088a28ea0082a0002303b0c000b80cac0c2f00882220c0c8","size":30,"data":"","first_seen":"2025-01-19T14:04:47.32339Z","last_seen":"2026-05-08T21:49:46.376541Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/clipboard.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15f52a1ee547f2bdd46e56747332ca2d","sha1":"9a7cb405f9beed005891587d41f76a0720893ffc","sha256":"e17a1d816e13c0826e0ed7febfabc3277f45571234bde0bf9120829a7169edc9","sha512":"ecee695e9734a0246bc64f1151f0d81609f49ced6dfa32ee20e41d38c469e003c1eee678bd28eca73a79cba603b43b385735124db5b304567f2ca2619f214e2b","ssdeep":"192:s6IMH3HEG9JVwkHg4LyAal318/NYusfkApXMdgmkpj:sy0G9J1zG3eFYP/XMmmkpj","tlshash":"77126399b291b0b15ae731a9412f920bf2766969708b90d0d239d4f0acbcdde4463f3d","size":9160,"data":"","first_seen":"2023-03-07T12:23:44Z","last_seen":"2026-05-13T19:12:51.597812Z","times_seen":30082,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_page_voucher/assets/js/voucher.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ac32f5573cea2a601c58a48d549b3a4","sha1":"a8bbb12ba8b2c2188d9f354797473dc7df9c0361","sha256":"a73470b5ef3446d884d12023e845e4c1cd3e18b980b2af29106b825e8a347fb3","sha512":"b32cb01b65ab4245319e5d34eee6b4a354e0facfe6f83449d4ee856923d3c0bed286a7735267ad83f91b11cc56f0dc98b83bbe6c48f17c25bdf5cbfaf2321801","ssdeep":"","tlshash":"f611ce9b20f51c944623679a8977e804ea66b51f250ead48780c0bf0ef0cb7c75a3528","size":1005,"data":"","first_seen":"2025-11-02T22:34:47.203386Z","last_seen":"2026-05-08T21:49:46.32571Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/search.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a08d0cfb47102b1c625eb03d76f38d4b","sha1":"4662cf194d2d386590a64c223d1a2d31c28ccd63","sha256":"e3a655fb86cc5b13e8453b47c0955100e2443eb4a7825eaba3220c8ab8336748","sha512":"4af5ae3bfcdb74f3b7eeed5a5e142847f08c1360be5590697dd54f14758380d3bd71aba8bd977c8110c14be734bdadd593e46e387127ca1fe3c1c1a800661da8","ssdeep":"96:YhlHzcjuhqDfoIlUCINdqBU26hb7NJbkQbNrC6CDorfyKAUCIN/0:YHcjiYJbr6YroyKj0","tlshash":"f7b1634897f7926853bf8276de777c342c6d407f5044490dbc3c96e82fa486c8989ea9","size":5135,"data":"","first_seen":"2025-04-19T09:59:05.002707Z","last_seen":"2026-05-08T21:49:46.35593Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/js/vendors/jquery/jquery-ui.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aab699fd9956e6944ec8c3688827ef42","sha1":"952aa4eda64d6d12487967bcb60d5438c0170269","sha256":"965ef84e73b91d89d62507740c0453594063fa126ad23d1a1b58bf22f5058fc2","sha512":"b5c71e42997ab26218c44ed2a24d58998a4bdfda1ed4282032372c7a33ce370894e367f1051150e088f8df9f5a9c085c88e1acb0a1dceb9dfa3e355c4e5d41bf","ssdeep":"3072:JKLTWRdEAyrhBdDv28FFKU99EQi7tfFK4i6tmVEUJCNGL:uEaAMNFKm7","tlshash":"7934e84d72403a3295dbd265103b2a0ba237965daa01805cb53ccedf9e7ce4471bbfb9","size":251804,"data":"","first_seen":"2025-04-19T09:59:05.012671Z","last_seen":"2026-05-08T21:49:46.34662Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_page_pay/assets/js/pay.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b1177d872e2df37ae628bc205d76588","sha1":"c639b90055aa7a197c3eefe97a224bfb8dd0db9e","sha256":"47feffed16cae46cbc451156164cf91f1062d7bc68574e74875aef94f8192e07","sha512":"3968538039c9de3195b2aaddbeb02f525afdbddf3ce0d5f531af6a9c1ebf84592296cb05f6ed4e9fa8814d386d8f9b06e325ee961144ce99d194d189534fcc02","ssdeep":"192:fJjd9i8kCPvd9q0MiGP4vCdlZA8sbRxFl2+9ZL68bsjMJQtfi5ZOGMIfBFssNbIe:fJn3MiFc8bRJs44K0EFbD","tlshash":"1722501c79f2093012b778b89edf8244b768905b910add543ecc56c09f88d3da6f6bad","size":10065,"data":"","first_seen":"2026-05-08T21:46:29.792978Z","last_seen":"2026-05-08T21:49:46.372714Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/iziToast.min.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"60fa362bf29459f2412c0ad458ce6973","sha1":"bb4b59060e147a395a42665c08c4a980b1bded41","sha256":"2b727ecda8837c85744a0ee0e183ff5027fbf36fc81d3fa03173e98579dabdb7","sha512":"1daef68eee0601edffe502e04b0e788b345ebeca2eb8e884c59344234fbd2981c289474f83f4f91fd844e0ff8f2c5e04a5f9cd003dd25469bdb3131122208cfe","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgOXnnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHOXnTxfGIYUP","tlshash":"4f82c8947220323b4aa329a960ff534a3772116ca9c641a4243fcdad5b34f4929f77f8","size":18398,"data":"","first_seen":"2025-11-02T22:34:47.205746Z","last_seen":"2026-05-08T21:49:46.311552Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/js/vendors/jquery/jquery-3.5.1.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-13T19:21:05.58547Z","times_seen":237768,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/swiper-bundle.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"008800482cb95459ab04f3c283c48eaf","sha1":"2e5fe4aa7ba72b68b0b5797bc5ae52c8be00f798","sha256":"6506d614d8bbc2d188ab0dc9e917f3626c76e4b3c9b42bc5326d3010ce116cfc","sha512":"376f36b7de22d8ab90d4dc22ba0c86eb52ce33fc8c24f6c9695b3ee2b97a87026fa7f87829f6a6b21887a7e7bb89080182b4e2708d38325040120091823bb619","ssdeep":"1536:FKJrfGm4FZE8N09mSl43Oa8BlxvHzEwkHG+jBNy/gCjPM/BnTElyXyMvzME3AbMN:AJRqZNjoNEwkHRVBnnXyMvD3KMRVfi8","tlshash":"9de3e889a220b57656e3169b93e4c221b3b54540b80ac4f470fd4c9f597ec9813feefa","size":149822,"data":"","first_seen":"2025-04-19T09:59:04.987094Z","last_seen":"2026-05-08T21:49:46.349892Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0105af54b79774a94d466b164bfb139e","sha1":"b1664939e1ba0dba3de9819d203531ce9dda3391","sha256":"6301435f1693b8f1b18dd7f7530040178d56834db56e3581f61085fe7bf4ffb4","sha512":"b1091bd71d418dd55e9e45c798bcddfc2e6d2b19c41452a29ae550fae49319c43f5accc8eb632e98e29be7766075d4f876a2ca55107c2683d4fe1de4417d4ebe","ssdeep":"","tlshash":"08f00e942cd940258373112927fb9258747a292f2c0aed18f54c88812f99da808bb94c","size":538,"data":"","first_seen":"2025-11-02T22:34:47.22618Z","last_seen":"2026-05-08T21:49:46.377139Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5afbaa38f023eaee240ec9cd881ce25b","sha1":"b7be7277878ac00a29ab4e04c179e007ca4cccbc","sha256":"26ae449908314f7942fc7e1c6453c4da4aaa10b60872561eebab9abc84ad2ecb","sha512":"28fa127df1460082fa49cc244cd50ffe77fcaa5a32e399529b4310e5ead1dc36bbcb5bf09ee7769efe15ec0a17f2beea06429d1c5fe53ccbbf7bb84888dd3981","ssdeep":"","tlshash":"77c0482c9716e2bcb52863aef3b3c4307d5022891a074899af0e4504f46095e06cb7e1","size":147,"data":"","first_seen":"2025-11-02T22:34:47.226945Z","last_seen":"2026-05-08T21:49:46.377983Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cf045425f4b25689aa493b15ac0db2b","sha1":"f5957cc0658c59d95a6b41acb5c8b204c9fef717","sha256":"c922fdd9920abac2a48c27d8404f7d6a63dc8056ad131cd706bd9c44facbb45a","sha512":"05915af6960f28581010a8f4ecec6197c8ec31fe7b54109f875cb58e0ac17eb2fdbb884e4d28a71b80123c9f9b5bdaccc9700dbe5f6760b026e6a4c8b8799bc1","ssdeep":"","tlshash":"fbc080244751019f43d43059d088741e574726773f3453d9254830fdf1e114e541a4c0","size":171,"data":"","first_seen":"2025-11-02T22:34:47.227791Z","last_seen":"2026-05-08T21:49:46.378704Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd5b23d3804089c48a3550da45688c41","sha1":"fbd713f6e91a79290eb80beb153989c63191b186","sha256":"b6d9b5c2e2b7e0b0412eaa0555dce125fef51682d2b57e538c2f551f381a7a4e","sha512":"32e49a3d8a8a0493897e30bf646d5d515bfdcd3a27c93345d7fda6fa3fd45da2e154b460a02833d939664af4befb082e47cee66f637b28ab6823ab47a8c85719","ssdeep":"384:yTEztk7cM2H20xqskAEWXnEoFLy/N9A51uR0VKVeXQabNyb8n8dfHthty:vLb","tlshash":"c562f49d11b80a3e678439b4ddffcaef179d5426e28ec39a0fd01847d04e689d1e8d26","size":14690,"data":"","first_seen":"2026-05-08T21:46:53.544547Z","last_seen":"2026-05-08T21:46:53.544547Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/popper.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95c079dd64dfa1581e21e019bb7ef095","sha1":"f08e95b9ffa605f59d839adde8aa15e746fc43c4","sha256":"8c3012bdba1adcc3474d0d5deed2c7333f8eae3c4c772ed2a6d7a74ae2a753af","sha512":"07e8438d6a3cca0e14f6bdadef29b389aba894cd392527a323bc90729bae0e478806456542fda9b4a9b76fdc7ef5227f8f35351e948f38d1846048f1abcb68ff","ssdeep":"1536:vVuptSN7JZ5ntVDFA7q42uC3pBAVYem5s/2PHFhpa2Xg7:VeOeUFhBXg7","tlshash":"1b33d898b2c17139075be1b6c06f891c73772a28228ec018a56ed1e91c74c7d9b7fdad","size":50211,"data":"","first_seen":"2025-04-19T09:59:04.982214Z","last_seen":"2026-05-08T21:49:46.310609Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/app.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4916c6205742578bc0c7b68df872e2b","sha1":"324c64453d599d539d95e1855089061f9623b6f5","sha256":"e62d53e299d76b93af845c7f536de02da015501da2bc6b9d2a91502e31bc2f9a","sha512":"748f6f761c05ef0463b0dbcc31806967e6cb712b4f7238c086b109641b2c5240caddf4cc4f36e98052a844e0b1a355033f0d7721991322f0556998628fce2755","ssdeep":"192:VQO1KkhEK9UxCO1Kk2EK9UxZlmp6DeTkfrC+/Je/SIcoK4K/K4yoo22XXFPeLdfq:Vf4kUX4k7FnebKCrJAFg","tlshash":"42220e5c79f1117040bf257e289f64083a7294539d0bad607aac5fc00f8ee7c92b2b9e","size":10004,"data":"","first_seen":"2025-11-02T22:34:47.195402Z","last_seen":"2026-05-08T21:49:46.354396Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru/app/modules/module_block_main_chat/assets/js/chat.js?v=1778276775","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d45cc3c39553a50bb34e119b3feb474d","sha1":"66f9336c5ec1c4fb1a050b1ba10723b45e34e550","sha256":"8e2ee1db76a9d452ec015542149836b9afe667a3b4d0eab88061c1cd32950817","sha512":"7a7720eea88e09bce4adc1269b519cc9d75e2caf830d4f136b4519681893ac0c70790a5c77f65a7e6a657faa6ff9fa7ebf5f53c59660bbc20d1064945eb46fa1","ssdeep":"192:5oW3XtMGF9gxaCvcfpkuKjCbGgDicDH99d1SMpyRkb9mq5cybWuioLLq/zgGJypt:5oW3dquBxSJJ0NhcTQ","tlshash":"f7722e6da6b7002442bba07f6b97a204363412472109ed39791c9ef85fd46f961e2fdc","size":16635,"data":"","first_seen":"2026-05-08T21:46:29.776513Z","last_seen":"2026-05-08T21:49:46.308915Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-13T19:27:30.929521Z","times_seen":336756,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/js/app.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"29801bd90a2a35110c4ce6619fdff837","sha1":"ea9c2838bf1c5781ef9b584a797bd43ee7ed71a0","sha256":"c8d8d004c84581ad63ffe6d3fc99e55d0c0026be98d5b191b6aadf7e56ae6b29","sha512":"33450e0d9c73426b80461f635659a6d057a3d560cc2295a715503db919015f0238cf6d8b3e7836d34d23c4075d35c356ea36a430c4712add6aa4038a064335b3","ssdeep":"96:ONr1itgMSK6q1PVolz804HooGMtCxSwharw/23T:jEK6qIlzueMtC8wha8e3T","tlshash":"ada1ad8e35a212555ee7707e9e0b90486473d44b6a1ecd007ace9a902f9c63da7b3b0d","size":4781,"data":"","first_seen":"2025-04-19T09:59:04.994869Z","last_seen":"2026-05-08T21:49:46.372177Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_servers/assets/js/1.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48e3966d30a78fd6299c0d9fcdc05645","sha1":"02bd02b3194e78d220e96a89df26eb43b72bbb4b","sha256":"e43fae14fe07b00194d4f8c2df55ac141fca0fe12e41c76403a3c0ffb299e681","sha512":"d0d4023cc8fde2218becd9d36eaaf8c1f719e7e07a9572e155bf6e0eeef110cf6f7645bf00e2a933956c48e3b2ae7849bec4ee6690666f3986debbed3afe39b0","ssdeep":"192:KWyi5/S3cVuuu7SO6CX+jtBD2XHzhIz+Bi:x5tSIqBi","tlshash":"dce1524635f7153b086b74fb2bab92443b3450033006ce01be1c6793af58a6cae67a9d","size":6959,"data":"","first_seen":"2026-05-08T21:46:29.71298Z","last_seen":"2026-05-08T21:49:46.350433Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_page_reports/assets/js/1_always.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c45026d1c4c3ed712c263a29fd76fd93","sha1":"2486def96a0bf62b08b1d36f4fcee17207cef98b","sha256":"a2d87efc917f3828ff1d8f9aa39b9f692105aadb1871bd58813b0be5e01a1851","sha512":"dbeaabe89f6088ecc1f4c57de3c07f5b59c715d86c3fc8c6ac7e182decc4cfa0b900967ce2b17dba6cd10d132f98bab2c29411daa4fa2c0eee2fcf776132fb8e","ssdeep":"","tlshash":"9431998c6e9c65fd1a6370ed0d2f20882992b40726095c247a4c53c07f69e7c6e75928","size":1794,"data":"","first_seen":"2025-04-19T09:59:04.981228Z","last_seen":"2026-05-08T21:49:46.316403Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7d578b03285d6a6aab4facc96ff80dd","sha1":"8ffd3498bf15169234b87b7e2dae87a39e5e99de","sha256":"bdbe2acbfdc8449e0c2c167fd84ec67ab774cd624aa1e7b7e48db277a33cdada","sha512":"598980bf0767fbc27862f3ffc5c13ade8c0ebf69c01edc488873e7da21746402c3fef7d3e374573971e8d75522b7a51cc0040d2c13824e61002ac4d4bfddc122","ssdeep":"","tlshash":"fa900265051140010c91c51ae6295040a810f55ba508c144b14c46101bc00b464e5655","size":47,"data":"","first_seen":"2025-11-02T22:34:47.229343Z","last_seen":"2026-05-08T21:49:46.381749Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-08T21:46:15.697Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 08 May 2026 21:46:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-powered-by: PHP/7.4.33\r\nset-cookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=db3NOb%2BasqmvYQgf5ihH0J3fpsfuzZWl%2BFoeuTsA%2BBXJ93rwXI79PmORNi3TZTGCj7y3WZzrfmfq4CbfklPcbzMEcjaKmXbnmbokPwf8Ay83v9It6RBrfFhxK5jqJUaw1e8%3D\"}]}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9f8ba7f84b140b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.5.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery UI","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Clipboard.js","description":"","website":"https://clipboardjs.com/","common_platform_enumeration":"","icon":"Clipboard.js.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124426,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15403)","md5":"d5240c7b78921728356b02fa0abfd5af","sha1":"8944bf29f82028c2c011f84c96c37a6b0563117b","sha256":"aafbfd6963cc0e110bb3a9cbdebcab9ca65cea21d188db4a6c2266ae313b1bf0","sha512":"ec7255455f1d405597b2d4be5b0a7fa237ab3cf1f8cd851375ab93a5f42036f32bb2664b7b987822e8cb5da051acab74bd234e3d2c6b6590953a28b14d3dc107","ssdeep":"1536:mDjhtal7DBZybZf2YnDpOkxiOU+sd/hGs4UswvVB+n+qLdmgciaf:x1lZ8fJwkQOU+sdrA+N","tlshash":"e0c36db003f8467e234a36b5feb4deaa3fa9a437e246414877fc0946df86c85d495c18","first_seen":"2026-05-08T21:46:53.378513Z","last_seen":"2026-05-08T21:46:53.378513Z","times_seen":1,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":27,"dns":1,"connect":1,"send":0,"wait":63,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_dark/rucard2g.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_dark/rucard2g.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=AlqMGwnkEK09CUk3; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=yoAOmclPp6VNoX9FBQJV; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 08 May 2026 15:22:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Mar 2026 17:44:43 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 4415\r\nddg-cache-status: HIT,MISS\r\netag: W/\"69a86f8b-2e51\"\r\nage: 23011\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":11857,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8dc3a7687d092bf75bdf05d592dc022a","sha1":"35797137a122e5be35057af850d583d5cf564912","sha256":"0c9aeb628a0b5fd79a448b2a846adba31a967562ee9eceafa79c6587d192fd74","sha512":"f0bb088d7ee477d2a31508fa8bca20da1fe56f895d559210f9284965a3c84ff981e5de642055ef6103511441e5c23f3539930234c7122670a17633011b5a27a8","ssdeep":"192:jYD3GoiaUsyF4KF4tN00Ejwc6SIovM6Owyx7/T4FfVzLfzoO9WvXSWpsqKg8sgNI:sD3305jwckoU6Ow0T45f8gWvCWaKuI","tlshash":"9532d6e067f5e3e0e005f3a4cb25e4716a5f20f93a92c95cc7b57dc9a12506e8d9acc4","first_seen":"2026-05-08T21:46:29.777918Z","last_seen":"2026-05-08T21:49:46.374119Z","times_seen":3,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":27,"dns":1,"connect":23,"send":0,"wait":56,"receive":3,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_color/streampay.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_color/streampay.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=zxQJSya1enru8KBp; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=YVilZRbIkw7ri1qaw8HR; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 05 May 2026 19:58:08 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 06:58:31 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"699fef17-1a2a\"\r\nage: 265688\r\ncontent-length: 3007\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6698,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"091c099dcf9db647e841a890642e26dd","sha1":"2603f7ff36736c3010d2fc6a6c44f83cd4654780","sha256":"05e6f5e88eda8e00f6482e6163439db27656d773d27785d800499319936e3064","sha512":"93dc8a0ae071035d455512710cfcccb535805c7a71b449b7dcb5d46f83bf853aa73b9c873691bbe760486b648de179b29b9c5e541843f3807c0b5cbc3204d922","ssdeep":"96:4MbiLYE+Kq+756575rQ41MzcbQqmYTsOEAUZCkTZopEZS4rGtzgwFEi3Et9:0zg+7565FB1ycbvmKCAnA7S4m3M","tlshash":"94d1a5e953e9b3e8f006fbf0d92194797e1b34fd2b12d62987b94c55a12103cd898cc4","first_seen":"2026-05-08T21:46:29.77452Z","last_seen":"2026-05-08T21:49:46.341175Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/clipboard.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/js/clipboard.min.js HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 01 May 2025 05:44:36 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"68130a44-23c8\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ko5xg63csE10L3uzXcrqvZuBJzmNoMgOelc1lItFxTrquXjo6zuFM8m5wLjIBw4n8G0onsjrCKcaGyKNtVLvTJ8DgHyVPQx0h0fZftV%2B37e7AZGTsCPnqgiBIREY74GsZlM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7faab3356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9160,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (9067)","md5":"15f52a1ee547f2bdd46e56747332ca2d","sha1":"9a7cb405f9beed005891587d41f76a0720893ffc","sha256":"e17a1d816e13c0826e0ed7febfabc3277f45571234bde0bf9120829a7169edc9","sha512":"ecee695e9734a0246bc64f1151f0d81609f49ced6dfa32ee20e41d38c469e003c1eee678bd28eca73a79cba603b43b385735124db5b304567f2ca2619f214e2b","ssdeep":"192:s6IMH3HEG9JVwkHg4LyAal318/NYusfkApXMdgmkpj:sy0G9J1zG3eFYP/XMmmkpj","tlshash":"77126399b291b0b15ae731a9412f920bf2766969708b90d0d239d4f0acbcdde4463f3d","first_seen":"2023-03-07T12:23:44Z","last_seen":"2026-05-13T19:12:51.597812Z","times_seen":30082,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Regular.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Regular.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 89452\r\nlast-modified: Thu, 01 May 2025 06:08:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe3-15d6c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hNXoajovtVIyik0f3YIz7z9QU5oTa2rB8vGxsUCjUzK4HUE2hM7CmiB5%2BK0c9QkmTGp6ePRu%2BNPMLgwzhhT%2Bzv5m9cRzHju0Bz4I6nUfEWoUBVpNrcR3CGc%2BR%2FCnZjaNXBc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe7b8956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 89452, version 1.0","md5":"abe60269bd99b7f36cd026bd02af92a6","sha1":"03aa29fb8840641ff1dd17d5041299c629cc9b13","sha256":"5bc1142d5fc993d2ec21a8fa93a17718818e8172dffc649b7d8a3ab459cfbf9c","sha512":"a8ccd8968e255a1831d897b957c3f05afb088c1819ea999ae1d170832778a9e55e6579ac5a0b96bd483440d2a732eba270be8757aacf0ba492124c251913efed","ssdeep":"1536:hWVsTWa+3/TR4Wp2oNGNiCD3J5nIDKYOdA8HeKWzFSmjHHie:6sTxqTR4ANTCVumYUA9nzF7","tlshash":"b293128e9c8674f1eb6225584da0886d3d78799b85c227d8a64fd12a17482f1df93f03","first_seen":"2023-05-01T16:33:36Z","last_seen":"2026-05-13T15:18:02.868473Z","times_seen":606,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/124c3e0fafd98abad8064339aaab0bb6cd72d5e3_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 14:28:09 GMT","end":"Thu, 23 Jul 2026 14:28:08 GMT"},"fingerprint":{"sha1":"90:CE:4B:02:05:A7:51:24:0E:97:09:CD:3C:58:B6:28:2C:67:82:46","sha256":"A6:4A:C3:DE:02:39:5E:B4:A4:AD:CB:EF:31:E8:7B:D2:E5:4F:9B:05:4A:19:8D:25:52:ED:26:E6:9D:EE:DA:F8"}}},"request":{"raw":"GET /124c3e0fafd98abad8064339aaab0bb6cd72d5e3_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: 5QsL7khH6gafpcoksP2fBw==\r\nlast-modified: Thu, 07 May 2026 06:54:21 GMT\r\netag: \"0x8DEAC0577A7DD70\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\nvia: 1.1 varnish\r\nage: 12908\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 1\r\nx-timer: S1778276777.084873,VS0,VE1\r\ncontent-length: 10752\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":10752,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"e50b0bee4847ea069fa5ca24b0fd9f07","sha1":"72ed6e138d38967b3677e741a9fc53df99ac6b4f","sha256":"77cd6df58fe962884b96b913111fefdfecff8aca36dd78e9cf3faa6db8dd0885","sha512":"d006b89deceb5ee870186ee1261ec4bb605fdc300177ebd58de799585c34dc82225312c7b12b34abfcb99f79d2b45a4cf9d20276bbce09f612598584a942a8da","ssdeep":"192:IfCjf1VJxu4ILuSqBNV89qtqJ9uUQJRPkWSfsIEYk+1UJ:/f1TxZIL8R89qti9d6m9Ed+KJ","tlshash":"85229ec4955722caf5dd4896148b4f62cae74b16c1c729792cccb84950072ab863fd70","first_seen":"2026-05-08T21:46:29.734421Z","last_seen":"2026-05-08T21:49:46.313879Z","times_seen":3,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":36,"dns":1,"connect":13,"send":0,"wait":14,"receive":1,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Bold.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Bold.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98712\r\nlast-modified: Thu, 01 May 2025 06:08:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe3-18198\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 26\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uFQa%2FgYZck8i5Gj8lA4bXIcL8uGV3sFCadAtcw06KjR%2FjbzsuLiAAvUI6ggNNu3oKYgutkKXj7i1KoBe0mBKwBID9lj0WkfJUykkLsqERJlzyvxSp4u%2B3CPmi5%2B53pKpqmY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba8035be656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98712,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98712, version 1.0","md5":"33802914271ef3d489d31399a5c8c3af","sha1":"cfb1f5ce8dff071fb09c9545a4b72b9465da3fbe","sha256":"32b6db04338d853de4148e775afcacadfb2d0bd3e8f10192916f6688f34c6005","sha512":"86b187b9fc8aa6a0321f27f1ab1799827eea5ac418ba306fc507b1a0320b18178767b098c217b918153a19172b9b8c05c8516dc545dceda6da40c96a42f8956f","ssdeep":"3072:NIv7wwT2fN4GzDRJiVMSjqlmQDbrBfxk/eLwxZ+:m7w8Q4GzL/DPBJk8mA","tlshash":"f5a3120c61d22dd3b89e942fa265f6817a1380cc1e6bf25c0b9fd4c1b0a07924ff0a97","first_seen":"2023-04-11T09:18:30Z","last_seen":"2026-05-10T08:12:10.960671Z","times_seen":468,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Black.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Black.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 92456\r\nlast-modified: Thu, 01 May 2025 06:08:33 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe1-16928\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 26\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D9gwQ3WEOaPh%2FFX3wRJkSX%2B4Dktw1U%2BZB1oLvF4oxPJyBphPSN%2FvdFfLCP6naGX5cA3gipgsSp8OxvtL4QowqQRos99GaeI6Kk%2BHbldW7O6%2B6OWvGo%2FSuhMz1qKrVTzOoJ0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba8038bed56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92456,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 92456, version 1.0","md5":"051e4d91dc88d10f19090107193629b8","sha1":"831e631c08be521c262d0dddb9557a9b84aaaaa1","sha256":"7c60d03415a0dafaba510d4fe6a06ff74a049450351dc9ed1a305d0f9bff90e3","sha512":"c091fa57da13add9a4b6fee31495163c4736ac9fc5d071389a3d348ffac855f41f1e1e964279c15b7d5dec95eb51cff2a1501fcfbf795b1cf18a66da3d3c73ff","ssdeep":"1536:vMLzQ7Yva4VjQqgmSOa+KhGma0B3z5ud2lYNlV0oqYUFTuz2QPQ9nbGFd2JXYUnY:vIzh5Vj3K+Pma6kLNPuKTQ9bEd2JIUAz","tlshash":"0793127092d5a7331738be896d31bba2384af507cc25778f7e7dc89835d9d512200baa","first_seen":"2023-04-12T00:10:38Z","last_seen":"2026-05-10T01:09:36.018004Z","times_seen":57,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_servers/assets/img/public.png","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.729Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_block_main_servers/assets/img/public.png HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Jun 2025 08:48:23 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"684d3757-7d11c\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vBFnN7TMAWv5EofHKPcVS0R7sTVVFY01wqB7NWwqGahgOLNRhTxp2pjtw1borM8scA%2F%2FKcr74csELjelXjXDqtFcvoY%2B7e6uoRPU7E5q1Mir5jYQIFOhGLRkTh0ZbtXwflY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe8b8f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":512284,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2410 x 1396, 8-bit colormap, non-interlaced","md5":"ae8be962dc43e81eae999a0a18d9b219","sha1":"57f06192d5ca07c7d6860742344c9179b3d3fb8e","sha256":"03020aed4cdd44aaa40440af05a73ffcb91b74daa429f70f7b8193e98bcdf113","sha512":"b9b944a346cd51ba659d729540ba313a09b64aa58ebc67631c12cb81d8d0968ef2a78042d5b72c45cb3e3c43593a6444f8f34e37e4474b84e44c80e107e2f3f2","ssdeep":"12288:Ho/QusDfypwo4afhGk1ObGsQBrZ0Cme2vcATK4Lro8OhnI:HoYusZT0GquGxB906luK4L8VhnI","tlshash":"5fb42394e94f847ee0cf42be4ca821344ed41a6e56ccf3e666e9935b270117a4ce837d","first_seen":"2025-11-02T22:34:47.214059Z","last_seen":"2026-05-08T21:49:46.376021Z","times_seen":10,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/css/search.css?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/css/search.css?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 05:44:36 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68130a44-1121\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5eeusIzbV5O1s2uNPnPQQrEm2KZeXFFMKsZp9Q2Rhn%2FhIu5ndPuekj%2BRBlKDz9qcmDlJvhaApbJn6YH9TLyvHjDBrfv3s%2FFtaRjMRJ8pP%2B2NyHOVl7RyZJQnpaSaPYBscWo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa4b1956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4385,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"5136715f067381b74cc2450d6aba54cb","sha1":"eb8a628519dba89f09778a795939f450c0ce34f8","sha256":"c20c81b7e67dd032a61559daa00260822a589d67ab25cd8244eaeed8e9ea2002","sha512":"e08c26538a3500d50fc6c873391cf54685af5004d2e630dde369f34edc85c305c12d40b4d503894257f21aed9282ffa31412775bbb34d0e007dd9a2471fa7930","ssdeep":"96:tg0E6c6fwrRaymwNHVUYhpr95T2/FZQDgMqdWn05x7TjA8IVkVWzFu:y0E6c6fwrRay5NHGYhpr95T2/Fu0MqdZ","tlshash":"609104421d3b1454acef822d2ffeaf1e112cd053aa1ae85d7bf1120d8fc0bad6151b95","first_seen":"2025-11-02T22:34:47.191978Z","last_seen":"2026-05-08T21:49:46.31876Z","times_seen":10,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/unb/Unbounded-Bold.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/unb/Unbounded-Bold.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 126568\r\nlast-modified: Thu, 01 May 2025 06:08:37 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe5-1ee68\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fgEUf0S%2FbwuMqI0bsiAUUDKuigzyk%2F85dzzFtTTdjAoWYlCYQIbDsAkd44ZrUu4n5bkbLDdlKhGmNd5SSz0BK%2BPrE2b1tEQDp4XWKXqahiVkpr8%2BBR14xMy%2F9E8%2B9AojW5Y%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe7b8b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126568,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 126568, version 1.0","md5":"a2ff4e0dec4239d3443f451b183e40d2","sha1":"ef9452a3257ab15eacdcf893d1d8346669f2f390","sha256":"287d23b18454b4897e8cd2c2c4bf4fe61845e898cfce4f79cb8a2763e3bcd7bc","sha512":"49ffefc17acb8d9ee3e0a3bef9aee05e9cc28969373c7c7e765c479c5d8956fe698b491caa8e36a300a9a345bbc1d059d9609377441195d2c7fc73a47962c129","ssdeep":"3072:rT+g1wLsIpFHkfws+Nee88NjeMvcrixO/hqDQmEZOa2TAh:rTeLBpxkfwGkCMcuUlZLh","tlshash":"adc3120acb5b9a045074aba404c23c46b8fad2d7d4fc3ad18cde58eb25fa95c875f358","first_seen":"2025-04-19T09:59:04.984193Z","last_seen":"2026-05-10T06:34:23.929617Z","times_seen":28,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 14:28:09 GMT","end":"Thu, 23 Jul 2026 14:28:08 GMT"},"fingerprint":{"sha1":"90:CE:4B:02:05:A7:51:24:0E:97:09:CD:3C:58:B6:28:2C:67:82:46","sha256":"A6:4A:C3:DE:02:39:5E:B4:A4:AD:CB:EF:31:E8:7B:D2:E5:4F:9B:05:4A:19:8D:25:52:ED:26:E6:9D:EE:DA:F8"}}},"request":{"raw":"GET /fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: +vo0AgK38WAVmEyQBi97Kg==\r\nlast-modified: Wed, 23 Mar 2022 00:48:05 GMT\r\netag: \"0x8DA0C66CAC7BD24\"\r\nx-ms-access-tier: Cold\r\nx-ms-access-tier-change-time: Sat, 13 Sep 2025 09:44:43 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\nvia: 1.1 varnish\r\nage: 757617\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 25994\r\nx-timer: S1778276777.137530,VS0,VE0\r\ncontent-length: 3409\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3409,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 184x184, components 3","md5":"fafa340202b7f16015984c90062f7b2a","sha1":"1408fed0c29ecac789028f2e12ca81d15a4bfe92","sha256":"58f08592a940bcd85a9620b52c262b6ce1cd7a4b6cb6a3b6494028614794d2b2","sha512":"e1fdde11fa7f03690655acde81d9d621e1ee3e08c4af7527057caef04b38dbcc60f9acec47161d6c6127faceca49b59bb9bd51fb3801a1545c80de59e318df53","ssdeep":"","tlshash":"f961a3137cc1ceb50d36c7397c07172ebb8828294e14e79e54222da9b8f8ae08d4cd0e","first_seen":"2023-05-07T16:59:55Z","last_seen":"2026-05-11T11:16:00.664174Z","times_seen":708,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":83,"dns":1,"connect":26,"send":0,"wait":16,"receive":2,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/inter/Inter-Medium.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/inter/Inter-Medium.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106108\r\nlast-modified: Thu, 19 Feb 2026 06:35:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6996af4c-19e7c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eBtwRy4Qvbvr%2FVmrDymwREI7WAUWFQliufFbBI02UkfytXiWINxeg44VffiPDAu4qScX2M5EbGsY0QfnXe1ZCPQeLkCNIhiLuPFrwcuMRCOt4hK8lAkikaxZSr9CvPCaj7I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba8038bef56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106108, version 1.0","md5":"eea97ded621cd8a18067c7243b19ceea","sha1":"d88b0b7a77cbb6ea033f692c05d5855a7be7d0ea","sha256":"d6e2531976fa618cede5863027366e4011760b0610d7136a8f7d7ed149c26348","sha512":"3ae400bb27c8db14d060ff83506d70b90de06612bf40ede0c7fbe1d4b302fabeeecee8d85c886b37b7aca06d4b7daeae473c8b542faa98083036de7fd3506c72","ssdeep":"3072:goH303tZuta/VoRorlduZwOLYGhLDSCWTXUP:gcAnsCVoRGlGwwPxx","tlshash":"8fa3123cb10d4bb3cdd99b3aba1735b5a0891a04774f24f6c14ca73662ad9e0b40bd5e","first_seen":"2023-04-10T16:29:48Z","last_seen":"2026-05-13T03:19:42.838708Z","times_seen":378,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/popper.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/js/popper.min.js HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 01 May 2025 05:44:37 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"68130a45-c423\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lwOAmDmMd3v9bf4XKNiZb%2BA2qaipYWnA8FRkZioaGWFeOLTPtRTgf0cCFOqUbFtoTPoK7KGefHT%2B8AoyEwiz9JoRwVfZvUUoeYl%2FpICnp0HNOLzCLtGE6jGyTxXuonYvKGQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa9b2b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50211,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (25667)","md5":"95c079dd64dfa1581e21e019bb7ef095","sha1":"f08e95b9ffa605f59d839adde8aa15e746fc43c4","sha256":"8c3012bdba1adcc3474d0d5deed2c7333f8eae3c4c772ed2a6d7a74ae2a753af","sha512":"07e8438d6a3cca0e14f6bdadef29b389aba894cd392527a323bc90729bae0e478806456542fda9b4a9b76fdc7ef5227f8f35351e948f38d1846048f1abcb68ff","ssdeep":"1536:vVuptSN7JZ5ntVDFA7q42uC3pBAVYem5s/2PHFhpa2Xg7:VeOeUFhBXg7","tlshash":"1b33d898b2c17139075be1b6c06f891c73772a28228ec018a56ed1e91c74c7d9b7fdad","first_seen":"2025-04-19T09:59:04.982214Z","last_seen":"2026-05-08T21:49:46.310609Z","times_seen":13,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_servers/includes/js_controller.php","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.771Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"POST /app/modules/module_block_main_servers/includes/js_controller.php HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 21498\r\nOrigin: https://onetake-cs2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":21498,"data":"data%5B0%5D%5Bip%5D=45.93.200.183%3A27015\u0026data%5B0%5D%5Bfakeip%5D=45.93.200.183%3A27015\u0026data%5B0%5D%5Bname_custom%5D=MIRAGE+%231\u0026data%5B0%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B0%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B0%5D%5Bserver_country%5D=RU\u0026data%5B0%5D%5Bserver_bage%5D=\u0026data%5B1%5D%5Bip%5D=45.93.200.183%3A27016\u0026data%5B1%5D%5Bfakeip%5D=45.93.200.183%3A27016\u0026data%5B1%5D%5Bname_custom%5D=MIRAGE+FPS+%232\u0026data%5B1%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B1%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B1%5D%5Bserver_country%5D=RU\u0026data%5B1%5D%5Bserver_bage%5D=\u0026data%5B2%5D%5Bip%5D=45.93.200.96%3A27015\u0026data%5B2%5D%5Bfakeip%5D=45.93.200.96%3A27015\u0026data%5B2%5D%5Bname_custom%5D=AWP+LEGO+%231\u0026data%5B2%5D%5Bserver_mod%5D=AWP\u0026data%5B2%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B2%5D%5Bserver_country%5D=RU\u0026data%5B2%5D%5Bserver_bage%5D=\u0026data%5B3%5D%5Bip%5D=45.93.200.96%3A27016\u0026data%5B3%5D%5Bfakeip%5D=45.93.200.96%3A27016\u0026data%5B3%5D%5Bname_custom%5D=SANDSTONE+%233\u0026data%5B3%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B3%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B3%5D%5Bserver_country%5D=RU\u0026data%5B3%5D%5Bserver_bage%5D=\u0026data%5B4%5D%5Bip%5D=45.93.200.86%3A27015\u0026data%5B4%5D%5Bfakeip%5D=45.93.200.86%3A27015\u0026data%5B4%5D%5Bname_custom%5D=ALL+MAPS+%234\u0026data%5B4%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B4%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B4%5D%5Bserver_country%5D=RU\u0026data%5B4%5D%5Bserver_bage%5D=\u0026data%5B5%5D%5Bip%5D=45.93.200.86%3A27016\u0026data%5B5%5D%5Bfakeip%5D=45.93.200.86%3A27016\u0026data%5B5%5D%5Bname_custom%5D=MIRAGE+FPS+%235\u0026data%5B5%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B5%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B5%5D%5Bserver_country%5D=RU\u0026data%5B5%5D%5Bserver_bage%5D=\u0026data%5B6%5D%5Bip%5D=45.93.200.95%3A27015\u0026data%5B6%5D%5Bfakeip%5D=45.93.200.95%3A27015\u0026data%5B6%5D%5Bname_custom%5D=MANIAC+%231\u0026data%5B6%5D%5Bserver_mod%5D=MANIAC\u0026data%5B6%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B6%5D%5Bserver_country%5D=RU\u0026data%5B6%5D%5Bserver_bage%5D=\u0026data%5B7%5D%5Bip%5D=45.93.200.95%3A27016\u0026data%5B7%5D%5Bfakeip%5D=45.93.200.95%3A27016\u0026data%5B7%5D%5Bname_custom%5D=MIRAGE+%236\u0026data%5B7%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B7%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B7%5D%5Bserver_country%5D=RU\u0026data%5B7%5D%5Bserver_bage%5D=\u0026data%5B8%5D%5Bip%5D=45.93.200.238%3A27015\u0026data%5B8%5D%5Bfakeip%5D=45.93.200.238%3A27015\u0026data%5B8%5D%5Bname_custom%5D=DUST+%237\u0026data%5B8%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B8%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B8%5D%5Bserver_country%5D=RU\u0026data%5B8%5D%5Bserver_bage%5D=\u0026data%5B9%5D%5Bip%5D=45.93.200.254%3A27015\u0026data%5B9%5D%5Bfakeip%5D=45.93.200.254%3A27015\u0026data%5B9%5D%5Bname_custom%5D=MIRAGE+CSGO+%238\u0026data%5B9%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B9%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B9%5D%5Bserver_country%5D=RU\u0026data%5B9%5D%5Bserver_bage%5D=\u0026data%5B10%5D%5Bip%5D=45.93.200.254%3A27016\u0026data%5B10%5D%5Bfakeip%5D=45.93.200.254%3A27016\u0026data%5B10%5D%5Bname_custom%5D=MIRAGE+NIGHT+%239\u0026data%5B10%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B10%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B10%5D%5Bserver_country%5D=RU\u0026data%5B10%5D%5Bserver_bage%5D=\u0026data%5B11%5D%5Bip%5D=45.93.200.254%3A27017\u0026data%5B11%5D%5Bfakeip%5D=45.93.200.254%3A27017\u0026data%5B11%5D%5Bname_custom%5D=MIRAGE+FPS+%2310\u0026data%5B11%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B11%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B11%5D%5Bserver_country%5D=RU\u0026data%5B11%5D%5Bserver_bage%5D=\u0026data%5B12%5D%5Bip%5D=92.255.63.82%3A27215\u0026data%5B12%5D%5Bfakeip%5D=92.255.63.82%3A27215\u0026data%5B12%5D%5Bname_custom%5D=MIRAGE+%2311\u0026data%5B12%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B12%5D%5Bserver_city%5D=%D0%9D%D0%BE%D0%B2%D0%BE%D1%81%D0%B8%D0%B1%D0%B8%D1%80%D1%81%D0%BA\u0026data%5B12%5D%5Bserver_country%5D=RU\u0026data%5B12%5D%5Bserver_bage%5D=\u0026data%5B13%5D%5Bip%5D=45.93.200.223%3A27015\u0026data%5B13%5D%5Bfakeip%5D=45.93.200.223%3A27015\u0026data%5B13%5D%5Bname_custom%5D=SANDSTONE+%2312\u0026data%5B13%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B13%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B13%5D%5Bserver_country%5D=RU\u0026data%5B13%5D%5Bserver_bage%5D=\u0026data%5B14%5D%5Bip%5D=45.93.200.223%3A27016\u0026data%5B14%5D%5Bfakeip%5D=45.93.200.223%3A27016\u0026data%5B14%5D%5Bname_custom%5D=MIRAGE+%2313\u0026data%5B14%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B14%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B14%5D%5Bserver_country%5D=RU\u0026data%5B14%5D%5Bserver_bage%5D=\u0026data%5B15%5D%5Bip%5D=185.194.107.196%3A27215\u0026data%5B15%5D%5Bfakeip%5D=185.194.107.196%3A27215\u0026data%5B15%5D%5Bname_custom%5D=MIRAGE+%2314\u0026data%5B15%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B15%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B15%5D%5Bserver_country%5D=RU\u0026data%5B15%5D%5Bserver_bage%5D=\u0026data%5B16%5D%5Bip%5D=185.194.107.196%3A27315\u0026data%5B16%5D%5Bfakeip%5D=185.194.107.196%3A27315\u0026data%5B16%5D%5Bname_custom%5D=MIRAGE+FPS+%2315\u0026data%5B16%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B16%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B16%5D%5Bserver_country%5D=RU\u0026data%5B16%5D%5Bserver_bage%5D=\u0026data%5B17%5D%5Bip%5D=92.255.63.83%3A27315\u0026data%5B17%5D%5Bfakeip%5D=92.255.63.83%3A27315\u0026data%5B17%5D%5Bname_custom%5D=AWP+LEGO+%232\u0026data%5B17%5D%5Bserver_mod%5D=AWP\u0026data%5B17%5D%5Bserver_city%5D=%D0%9D%D0%BE%D0%B2%D0%BE%D1%81%D0%B8%D0%B1%D0%B8%D1%80%D1%81%D0%BA\u0026data%5B17%5D%5Bserver_country%5D=RU\u0026data%5B17%5D%5Bserver_bage%5D=\u0026data%5B18%5D%5Bip%5D=45.93.200.244%3A27015\u0026data%5B18%5D%5Bfakeip%5D=45.93.200.244%3A27015\u0026data%5B18%5D%5Bname_custom%5D=MIRAGE+FPS+%2316\u0026data%5B18%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B18%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B18%5D%5Bserver_country%5D=RU\u0026data%5B18%5D%5Bserver_bage%5D=\u0026data%5B19%5D%5Bip%5D=45.93.200.244%3A27016\u0026data%5B19%5D%5Bfakeip%5D=45.93.200.244%3A27016\u0026data%5B19%5D%5Bname_custom%5D=SANDSTONE+%2317\u0026data%5B19%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B19%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B19%5D%5Bserver_country%5D=RU\u0026data%5B19%5D%5Bserver_bage%5D=\u0026data%5B20%5D%5Bip%5D=45.93.200.244%3A27017\u0026data%5B20%5D%5Bfakeip%5D=45.93.200.244%3A27017\u0026data%5B20%5D%5Bname_custom%5D=AWP+LEGO+%233\u0026data%5B20%5D%5Bserver_mod%5D=AWP\u0026data%5B20%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B20%5D%5Bserver_country%5D=RU\u0026data%5B20%5D%5Bserver_bage%5D=\u0026data%5B21%5D%5Bip%5D=45.93.200.198%3A27015\u0026data%5B21%5D%5Bfakeip%5D=45.93.200.198%3A27015\u0026data%5B21%5D%5Bname_custom%5D=SANDSTONE+%2318\u0026data%5B21%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B21%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B21%5D%5Bserver_country%5D=RU\u0026data%5B21%5D%5Bserver_bage%5D=\u0026data%5B22%5D%5Bip%5D=45.93.200.198%3A27016\u0026data%5B22%5D%5Bfakeip%5D=45.93.200.198%3A27016\u0026data%5B22%5D%5Bname_custom%5D=CACHE+%2319\u0026data%5B22%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B22%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B22%5D%5Bserver_country%5D=RU\u0026data%5B22%5D%5Bserver_bage%5D=\u0026data%5B23%5D%5Bip%5D=185.194.107.194%3A28015\u0026data%5B23%5D%5Bfakeip%5D=185.194.107.194%3A28015\u0026data%5B23%5D%5Bname_custom%5D=AWP+CANNONS+%234\u0026data%5B23%5D%5Bserver_mod%5D=AWP\u0026data%5B23%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B23%5D%5Bserver_country%5D=RU\u0026data%5B23%5D%5Bserver_bage%5D=\u0026data%5B24%5D%5Bip%5D=37.48.252.11%3A27315\u0026data%5B24%5D%5Bfakeip%5D=37.48.252.11%3A27315\u0026data%5B24%5D%5Bname_custom%5D=SANDSTONE+%2320\u0026data%5B24%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B24%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B24%5D%5Bserver_country%5D=RU\u0026data%5B24%5D%5Bserver_bage%5D=\u0026data%5B25%5D%5Bip%5D=185.194.107.201%3A27016\u0026data%5B25%5D%5Bfakeip%5D=185.194.107.201%3A27016\u0026data%5B25%5D%5Bname_custom%5D=MANIAC+%232\u0026data%5B25%5D%5Bserver_mod%5D=MANIAC\u0026data%5B25%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B25%5D%5Bserver_country%5D=RU\u0026data%5B25%5D%5Bserver_bage%5D=\u0026data%5B26%5D%5Bip%5D=185.194.107.201%3A27017\u0026data%5B26%5D%5Bfakeip%5D=185.194.107.201%3A27017\u0026data%5B26%5D%5Bname_custom%5D=DUST+FPS+%2321\u0026data%5B26%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B26%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B26%5D%5Bserver_country%5D=RU\u0026data%5B26%5D%5Bserver_bage%5D=\u0026data%5B27%5D%5Bip%5D=95.213.255.76%3A27115\u0026data%5B27%5D%5Bfakeip%5D=95.213.255.76%3A27115\u0026data%5B27%5D%5Bname_custom%5D=RANDOM+MODELS+%231\u0026data%5B27%5D%5Bserver_mod%5D=FUN\u0026data%5B27%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B27%5D%5Bserver_country%5D=RU\u0026data%5B27%5D%5Bserver_bage%5D=\u0026data%5B28%5D%5Bip%5D=85.119.149.215%3A27915\u0026data%5B28%5D%5Bfakeip%5D=85.119.149.215%3A27915\u0026data%5B28%5D%5Bname_custom%5D=RANDOM+MODELS+%232\u0026data%5B28%5D%5Bserver_mod%5D=FUN\u0026data%5B28%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B28%5D%5Bserver_country%5D=RU\u0026data%5B28%5D%5Bserver_bage%5D=\u0026data%5B29%5D%5Bip%5D=185.194.107.201%3A27015\u0026data%5B29%5D%5Bfakeip%5D=185.194.107.201%3A27015\u0026data%5B29%5D%5Bname_custom%5D=RANDOM+MODELS+%233\u0026data%5B29%5D%5Bserver_mod%5D=FUN\u0026data%5B29%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B29%5D%5Bserver_country%5D=RU\u0026data%5B29%5D%5Bserver_bage%5D=\u0026data%5B30%5D%5Bip%5D=45.93.200.198%3A27017\u0026data%5B30%5D%5Bfakeip%5D=45.93.200.198%3A27017\u0026data%5B30%5D%5Bname_custom%5D=RANDOM+MODELS+%234\u0026data%5B30%5D%5Bserver_mod%5D=FUN\u0026data%5B30%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B30%5D%5Bserver_country%5D=RU\u0026data%5B30%5D%5Bserver_bage%5D=\u0026data%5B31%5D%5Bip%5D=62.182.159.104%3A27115\u0026data%5B31%5D%5Bfakeip%5D=62.182.159.104%3A27115\u0026data%5B31%5D%5Bname_custom%5D=RANDOM+MODELS+%235\u0026data%5B31%5D%5Bserver_mod%5D=FUN\u0026data%5B31%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B31%5D%5Bserver_country%5D=RU\u0026data%5B31%5D%5Bserver_bage%5D=\u0026data%5B32%5D%5Bip%5D=62.182.159.105%3A27315\u0026data%5B32%5D%5Bfakeip%5D=62.182.159.105%3A27315\u0026data%5B32%5D%5Bname_custom%5D=RANDOM+MODELS+%236\u0026data%5B32%5D%5Bserver_mod%5D=FUN\u0026data%5B32%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B32%5D%5Bserver_country%5D=RU\u0026data%5B32%5D%5Bserver_bage%5D=\u0026data%5B33%5D%5Bip%5D=45.93.200.164%3A27016\u0026data%5B33%5D%5Bfakeip%5D=45.93.200.164%3A27016\u0026data%5B33%5D%5Bname_custom%5D=RANDOM+EVENTS+%237\u0026data%5B33%5D%5Bserver_mod%5D=FUN\u0026data%5B33%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B33%5D%5Bserver_country%5D=RU\u0026data%5B33%5D%5Bserver_bage%5D=\u0026data%5B34%5D%5Bip%5D=185.137.235.124%3A27215\u0026data%5B34%5D%5Bfakeip%5D=185.137.235.124%3A27215\u0026data%5B34%5D%5Bname_custom%5D=RANDOM+EVENTS+%238\u0026data%5B34%5D%5Bserver_mod%5D=FUN\u0026data%5B34%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B34%5D%5Bserver_country%5D=RU\u0026data%5B34%5D%5Bserver_bage%5D=\u0026data%5B35%5D%5Bip%5D=185.194.107.194%3A27315\u0026data%5B35%5D%5Bfakeip%5D=185.194.107.194%3A27315\u0026data%5B35%5D%5Bname_custom%5D=RANDOM+EVENTS+%239\u0026data%5B35%5D%5Bserver_mod%5D=FUN\u0026data%5B35%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B35%5D%5Bserver_country%5D=RU\u0026data%5B35%5D%5Bserver_bage%5D=\u0026data%5B36%5D%5Bip%5D=45.93.200.164%3A27015\u0026data%5B36%5D%5Bfakeip%5D=45.93.200.164%3A27015\u0026data%5B36%5D%5Bname_custom%5D=MIRAGE+%2322\u0026data%5B36%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B36%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B36%5D%5Bserver_country%5D=RU\u0026data%5B36%5D%5Bserver_bage%5D=\u0026data%5B37%5D%5Bip%5D=92.63.189.130%3A27015\u0026data%5B37%5D%5Bfakeip%5D=92.63.189.130%3A27015\u0026data%5B37%5D%5Bname_custom%5D=DUST+%2323\u0026data%5B37%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B37%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B37%5D%5Bserver_country%5D=RU\u0026data%5B37%5D%5Bserver_bage%5D=\u0026data%5B38%5D%5Bip%5D=92.63.189.130%3A27016\u0026data%5B38%5D%5Bfakeip%5D=92.63.189.130%3A27016\u0026data%5B38%5D%5Bname_custom%5D=CACHE+%2324\u0026data%5B38%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B38%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B38%5D%5Bserver_country%5D=RU\u0026data%5B38%5D%5Bserver_bage%5D=\u0026data%5B39%5D%5Bip%5D=92.63.189.130%3A27017\u0026data%5B39%5D%5Bfakeip%5D=92.63.189.130%3A27017\u0026data%5B39%5D%5Bname_custom%5D=MIRAGE+%2325\u0026data%5B39%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B39%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B39%5D%5Bserver_country%5D=RU\u0026data%5B39%5D%5Bserver_bage%5D=\u0026data%5B40%5D%5Bip%5D=92.63.189.130%3A27018\u0026data%5B40%5D%5Bfakeip%5D=92.63.189.130%3A27018\u0026data%5B40%5D%5Bname_custom%5D=MIRAGE+FREE+%2326\u0026data%5B40%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B40%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B40%5D%5Bserver_country%5D=RU\u0026data%5B40%5D%5Bserver_bage%5D=\u0026data%5B41%5D%5Bip%5D=92.63.189.130%3A27019\u0026data%5B41%5D%5Bfakeip%5D=92.63.189.130%3A27019\u0026data%5B41%5D%5Bname_custom%5D=MIRAGE+CSGO+%2327\u0026data%5B41%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B41%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B41%5D%5Bserver_country%5D=RU\u0026data%5B41%5D%5Bserver_bage%5D=\u0026data%5B42%5D%5Bip%5D=92.63.189.130%3A27023\u0026data%5B42%5D%5Bfakeip%5D=92.63.189.130%3A27023\u0026data%5B42%5D%5Bname_custom%5D=MIRAGE+%2328\u0026data%5B42%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B42%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B42%5D%5Bserver_country%5D=RU\u0026data%5B42%5D%5Bserver_bage%5D=\u0026data%5B43%5D%5Bip%5D=92.63.189.130%3A27022\u0026data%5B43%5D%5Bfakeip%5D=92.63.189.130%3A27022\u0026data%5B43%5D%5Bname_custom%5D=MIRAGE+%2329\u0026data%5B43%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B43%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B43%5D%5Bserver_country%5D=RU\u0026data%5B43%5D%5Bserver_bage%5D=\u0026data%5B44%5D%5Bip%5D=92.63.189.130%3A27024\u0026data%5B44%5D%5Bfakeip%5D=92.63.189.130%3A27024\u0026data%5B44%5D%5Bname_custom%5D=CACHE+%2330\u0026data%5B44%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B44%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B44%5D%5Bserver_country%5D=RU\u0026data%5B44%5D%5Bserver_bage%5D=\u0026data%5B45%5D%5Bip%5D=92.63.189.130%3A27025\u0026data%5B45%5D%5Bfakeip%5D=92.63.189.130%3A27025\u0026data%5B45%5D%5Bname_custom%5D=RANDOM+MODELS+%2310\u0026data%5B45%5D%5Bserver_mod%5D=FUN\u0026data%5B45%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B45%5D%5Bserver_country%5D=RU\u0026data%5B45%5D%5Bserver_bage%5D=\u0026data%5B46%5D%5Bip%5D=92.63.189.130%3A27020\u0026data%5B46%5D%5Bfakeip%5D=92.63.189.130%3A27020\u0026data%5B46%5D%5Bname_custom%5D=MANIAC+BHOP+%233\u0026data%5B46%5D%5Bserver_mod%5D=MANIAC\u0026data%5B46%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B46%5D%5Bserver_country%5D=RU\u0026data%5B46%5D%5Bserver_bage%5D=\u0026data%5B47%5D%5Bip%5D=45.93.200.209%3A27015\u0026data%5B47%5D%5Bfakeip%5D=45.93.200.209%3A27015\u0026data%5B47%5D%5Bname_custom%5D=SANDSTONE+%2334\u0026data%5B47%5D%5Bserver_mod%5D=PUBLIC\u0026data%5B47%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B47%5D%5Bserver_country%5D=RU\u0026data%5B47%5D%5Bserver_bage%5D=\u0026data%5B48%5D%5Bip%5D=45.93.200.209%3A27016\u0026data%5B48%5D%5Bfakeip%5D=45.93.200.209%3A27016\u0026data%5B48%5D%5Bname_custom%5D=RANDOM+MODELS+%2311\u0026data%5B48%5D%5Bserver_mod%5D=FUN\u0026data%5B48%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B48%5D%5Bserver_country%5D=RU\u0026data%5B48%5D%5Bserver_bage%5D=\u0026data%5B49%5D%5Bip%5D=92.63.189.130%3A27028\u0026data%5B49%5D%5Bfakeip%5D=92.63.189.130%3A27028\u0026data%5B49%5D%5Bname_custom%5D=AWP+LEGO+%235\u0026data%5B49%5D%5Bserver_mod%5D=AWP\u0026data%5B49%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B49%5D%5Bserver_country%5D=RU\u0026data%5B49%5D%5Bserver_bage%5D=\u0026data%5B50%5D%5Bip%5D=87.228.59.101%3A27015\u0026data%5B50%5D%5Bfakeip%5D=87.228.59.101%3A27015\u0026data%5B50%5D%5Bname_custom%5D=AWP+LEGO+%236\u0026data%5B50%5D%5Bserver_mod%5D=AWP\u0026data%5B50%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B50%5D%5Bserver_country%5D=RU\u0026data%5B50%5D%5Bserver_bage%5D=\u0026data%5B51%5D%5Bip%5D=45.95.31.170%3A27015\u0026data%5B51%5D%5Bfakeip%5D=45.95.31.170%3A27015\u0026data%5B51%5D%5Bname_custom%5D=AWP+LEGO+%237\u0026data%5B51%5D%5Bserver_mod%5D=AWP\u0026data%5B51%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B51%5D%5Bserver_country%5D=RU\u0026data%5B51%5D%5Bserver_bage%5D=\u0026data%5B52%5D%5Bip%5D=87.228.59.101%3A27016\u0026data%5B52%5D%5Bfakeip%5D=87.228.59.101%3A27016\u0026data%5B52%5D%5Bname_custom%5D=RANDOM+EVENTS+%2312\u0026data%5B52%5D%5Bserver_mod%5D=FUN\u0026data%5B52%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B52%5D%5Bserver_country%5D=RU\u0026data%5B52%5D%5Bserver_bage%5D=\u0026data%5B53%5D%5Bip%5D=45.95.31.170%3A27016\u0026data%5B53%5D%5Bfakeip%5D=45.95.31.170%3A27016\u0026data%5B53%5D%5Bname_custom%5D=RANDOM+EVENTS+%2313\u0026data%5B53%5D%5Bserver_mod%5D=FUN\u0026data%5B53%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B53%5D%5Bserver_country%5D=RU\u0026data%5B53%5D%5Bserver_bage%5D=\u0026data%5B54%5D%5Bip%5D=87.228.59.101%3A27017\u0026data%5B54%5D%5Bfakeip%5D=87.228.59.101%3A27017\u0026data%5B54%5D%5Bname_custom%5D=RANDOM+EVENTS+%2314\u0026data%5B54%5D%5Bserver_mod%5D=FUN\u0026data%5B54%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B54%5D%5Bserver_country%5D=RU\u0026data%5B54%5D%5Bserver_bage%5D=\u0026data%5B55%5D%5Bip%5D=37.48.252.9%3A27315\u0026data%5B55%5D%5Bfakeip%5D=37.48.252.9%3A27315\u0026data%5B55%5D%5Bname_custom%5D=RANDOM+MODELS+%2315\u0026data%5B55%5D%5Bserver_mod%5D=FUN\u0026data%5B55%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B55%5D%5Bserver_country%5D=RU\u0026data%5B55%5D%5Bserver_bage%5D=\u0026data%5B56%5D%5Bip%5D=37.48.252.9%3A27415\u0026data%5B56%5D%5Bfakeip%5D=37.48.252.9%3A27415\u0026data%5B56%5D%5Bname_custom%5D=RANDOM+EVENTS+%2316\u0026data%5B56%5D%5Bserver_mod%5D=FUN\u0026data%5B56%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B56%5D%5Bserver_country%5D=RU\u0026data%5B56%5D%5Bserver_bage%5D=\u0026data%5B57%5D%5Bip%5D=45.95.31.168%3A27015\u0026data%5B57%5D%5Bfakeip%5D=45.95.31.168%3A27015\u0026data%5B57%5D%5Bname_custom%5D=RANDOM+EVENTS+%2317\u0026data%5B57%5D%5Bserver_mod%5D=FUN\u0026data%5B57%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B57%5D%5Bserver_country%5D=RU\u0026data%5B57%5D%5Bserver_bage%5D=\u0026data%5B58%5D%5Bip%5D=45.95.31.168%3A27016\u0026data%5B58%5D%5Bfakeip%5D=45.95.31.168%3A27016\u0026data%5B58%5D%5Bname_custom%5D=RANDOM+EVENTS+%2318\u0026data%5B58%5D%5Bserver_mod%5D=FUN\u0026data%5B58%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B58%5D%5Bserver_country%5D=RU\u0026data%5B58%5D%5Bserver_bage%5D=\u0026data%5B59%5D%5Bip%5D=87.228.59.106%3A27015\u0026data%5B59%5D%5Bfakeip%5D=87.228.59.106%3A27015\u0026data%5B59%5D%5Bname_custom%5D=AWP+LEGO+%238\u0026data%5B59%5D%5Bserver_mod%5D=AWP\u0026data%5B59%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B59%5D%5Bserver_country%5D=RU\u0026data%5B59%5D%5Bserver_bage%5D=\u0026data%5B60%5D%5Bip%5D=45.95.31.168%3A27017\u0026data%5B60%5D%5Bfakeip%5D=45.95.31.168%3A27017\u0026data%5B60%5D%5Bname_custom%5D=AWP+LEGO+%239\u0026data%5B60%5D%5Bserver_mod%5D=AWP\u0026data%5B60%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B60%5D%5Bserver_country%5D=RU\u0026data%5B60%5D%5Bserver_bage%5D=\u0026data%5B61%5D%5Bip%5D=92.63.189.130%3A27026\u0026data%5B61%5D%5Bfakeip%5D=92.63.189.130%3A27026\u0026data%5B61%5D%5Bname_custom%5D=RANDOM+EVENTS+%2319\u0026data%5B61%5D%5Bserver_mod%5D=FUN\u0026data%5B61%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B61%5D%5Bserver_country%5D=RU\u0026data%5B61%5D%5Bserver_bage%5D=\u0026data%5B62%5D%5Bip%5D=87.228.59.106%3A27016\u0026data%5B62%5D%5Bfakeip%5D=87.228.59.106%3A27016\u0026data%5B62%5D%5Bname_custom%5D=RANDOM+EVENTS+%2320\u0026data%5B62%5D%5Bserver_mod%5D=FUN\u0026data%5B62%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B62%5D%5Bserver_country%5D=RU\u0026data%5B62%5D%5Bserver_bage%5D=\u0026data%5B63%5D%5Bip%5D=45.95.31.198%3A27015\u0026data%5B63%5D%5Bfakeip%5D=45.95.31.198%3A27015\u0026data%5B63%5D%5Bname_custom%5D=RANDOM+EVENTS+%2321\u0026data%5B63%5D%5Bserver_mod%5D=FUN\u0026data%5B63%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B63%5D%5Bserver_country%5D=RU\u0026data%5B63%5D%5Bserver_bage%5D=\u0026data%5B64%5D%5Bip%5D=87.228.59.106%3A27017\u0026data%5B64%5D%5Bfakeip%5D=87.228.59.106%3A27017\u0026data%5B64%5D%5Bname_custom%5D=RANDOM+EVENTS+%2322\u0026data%5B64%5D%5Bserver_mod%5D=FUN\u0026data%5B64%5D%5Bserver_city%5D=%D0%A1%D0%B0%D0%BD%D0%BA%D1%82-%D0%9F%D0%B5%D1%82%D0%B5%D1%80%D0%B1%D1%83%D1%80%D0%B3\u0026data%5B64%5D%5Bserver_country%5D=RU\u0026data%5B64%5D%5Bserver_bage%5D=\u0026data%5B65%5D%5Bip%5D=45.95.31.198%3A27016\u0026data%5B65%5D%5Bfakeip%5D=45.95.31.198%3A27016\u0026data%5B65%5D%5Bname_custom%5D=RANDOM+EVENTS+%2323\u0026data%5B65%5D%5Bserver_mod%5D=FUN\u0026data%5B65%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B65%5D%5Bserver_country%5D=RU\u0026data%5B65%5D%5Bserver_bage%5D=\u0026data%5B66%5D%5Bip%5D=45.95.31.198%3A27017\u0026data%5B66%5D%5Bfakeip%5D=45.95.31.198%3A27017\u0026data%5B66%5D%5Bname_custom%5D=RANDOM+EVENTS+%2324\u0026data%5B66%5D%5Bserver_mod%5D=FUN\u0026data%5B66%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B66%5D%5Bserver_country%5D=RU\u0026data%5B66%5D%5Bserver_bage%5D=\u0026data%5B67%5D%5Bip%5D=92.63.189.130%3A27029\u0026data%5B67%5D%5Bfakeip%5D=92.63.189.130%3A27029\u0026data%5B67%5D%5Bname_custom%5D=MANIAC+BHOP+%234\u0026data%5B67%5D%5Bserver_mod%5D=MANIAC\u0026data%5B67%5D%5Bserver_city%5D=%D0%9C%D0%BE%D1%81%D0%BA%D0%B2%D0%B0\u0026data%5B67%5D%5Bserver_country%5D=RU\u0026data%5B67%5D%5Bserver_bage%5D="}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/7.4.33\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=asqXitUlZTTMZF9HLHddXAhLKo7qMmTFoVrtQvdlFcmGUugMNZMn0c9tURWVL%2FIPZd%2BVAfOwY7A8h%2BxBb4Lvk94cyn78H18KSJ4%2BNyR0m8kh59QnHWH0%2F8tJdf9RGN5p89o%3D\"}]}\r\ncf-ray: 9f8ba7feab9656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":94,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"0af8678c46bb544f492e81157dfa0456","sha1":"832575c8284cddbc734bab4dcb6b754f4377a0d9","sha256":"dc79a62eeb4147940433bb4de1566f466dbee5a0a7dc6e5f92aaeb5adfdf2d6e","sha512":"2311a699450c6f24e78b896577985551f11ea29572db7fcf025b933760f922e0458a3d08df6129814bb7ac2be819f75d4e9d7d41edeb7edb590350d17dbb7789","ssdeep":"","tlshash":"eab01238c6f12e4451254090537bb9c1c3dd0c27165008346420ff1020d92b88391420","first_seen":"2026-05-08T21:46:53.423606Z","last_seen":"2026-05-08T21:46:53.423606Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Regular.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Regular.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 89452\r\nlast-modified: Thu, 01 May 2025 06:08:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe3-15d6c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 26\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qxdZS%2BFHhK9Kg3GgWJRmAR0RhqjsUQPXSO9ndzvY8rINXa4gzACyuZuZ5Ik13VqvVv4c%2Fr%2Bty41reDlXSWkSad8hqdzJE7x5%2B3zUygzjlfZU2FivjPKzbCW70j54E01aMT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba8035be756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 89452, version 1.0","md5":"abe60269bd99b7f36cd026bd02af92a6","sha1":"03aa29fb8840641ff1dd17d5041299c629cc9b13","sha256":"5bc1142d5fc993d2ec21a8fa93a17718818e8172dffc649b7d8a3ab459cfbf9c","sha512":"a8ccd8968e255a1831d897b957c3f05afb088c1819ea999ae1d170832778a9e55e6579ac5a0b96bd483440d2a732eba270be8757aacf0ba492124c251913efed","ssdeep":"1536:hWVsTWa+3/TR4Wp2oNGNiCD3J5nIDKYOdA8HeKWzFSmjHHie:6sTxqTR4ANTCVumYUA9nzF7","tlshash":"b293128e9c8674f1eb6225584da0886d3d78799b85c227d8a64fd12a17482f1df93f03","first_seen":"2023-05-01T16:33:36Z","last_seen":"2026-05-13T15:18:02.868473Z","times_seen":606,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Medium.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Medium.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 99572\r\nlast-modified: Thu, 01 May 2025 06:08:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe2-184f4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 26\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=olSdrNElqqGUjCWGtZtxsNzBvEtvx02WFODoHInCjTgjo0XTOTNzwp8rWH0k8m39Ylq1xuUwtU%2BbQKk%2FyuQqeu5x4NY3BWL1qMhbDMPH%2FVlHRrXnETEKzAXXpAQFE3VMSb0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba8036be956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 99572, version 1.0","md5":"52ea0d7008516c101595f81d37225889","sha1":"6730d0f88794957b23d45148e162773485744235","sha256":"b8da67821e588e3ee5516083d99f1d9907c23a24fcb52dfb3c57cd38924dcef7","sha512":"6afcd29bfa0a5bf0ac5af15986656c6c86549813e8cc9405384741cb49ad5981865a513537fc0759a4367fd5edec6a0920940b1e57caa49de75d2725e0b26e60","ssdeep":"1536:vXn1yEO/O2lwhraBU5XN55y9yx08oGL2jAhJRSx9QOfYd5eF/cwpkm27snpuAlK9:P1yz/ORAU5Xk87jrRyW5eF3pkN7oKn9","tlshash":"e9a302c0d6928b03e654561cf3b67c62716317476610e86c945e9701afee2efc24f8b9","first_seen":"2023-04-11T09:18:30Z","last_seen":"2026-05-10T08:12:10.966993Z","times_seen":388,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/css/iziToast.min.css?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/css/iziToast.min.css?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 05:44:36 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68130a44-d098\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HGmsVzqd5G4qLN7Tcx3Ks86T5D1M8bh2t%2B3tWE%2BmQ4f8Xjul0MaixnY1wpCv%2BgWljxQbw1mKb9y6%2FSp1EoKECCoKKrAYezwPBopn8h%2BvjEOez58B4D%2FA43r3SEfWvb%2Fs%2Bs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa4b1856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53400,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1940)","md5":"e93db29793a347fdc11778d5fb8e5817","sha1":"59a012ea7ea292333c336ca0277eb8c1c99f5e68","sha256":"5bd20d86bda939fc151a308a8b3624833cf019b8b37749b66c8c98e0c2d88295","sha512":"5c44645ec3fdcd4dba43497348fe7f046e30e24952ab9445dac3dea06121bd41cf01ed51b0d4a6e1c857e7fe6494e68427012d848d4dce0d9d5e3a6c65c4e699","ssdeep":"384:ohFUs2ahj3Ibqf4kYip7pHMmWlO/1oOEvlRCPoG5/y+p9usmDIn0GNhSSB8bGvBn:qFbthM2wgppsS1oNOQE","tlshash":"e33320bc29f210406997a76843ef6a642e39d863549e8caf76cd3197cf86b4c5bc0317","first_seen":"2025-11-02T22:34:47.173912Z","last_seen":"2026-05-08T21:49:46.345402Z","times_seen":10,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_color/uacard.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_color/uacard.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=jK4szXbMa7TpASXc; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=xIw5059Rqf6dD2SJAeO8; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 May 2026 14:36:41 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:12 GMT\r\netag: W/\"699ff918-2316\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 112175\r\ncontent-length: 3553\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8982,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8318722608ab798983b867b27d5ccd4e","sha1":"3c8dbda0f8362e9035edaa8fda97f5ad0c7acdff","sha256":"1b7f65ef43247d8ca9d0b77c724603edad1daccff31436d8abe6536e6acc5a6c","sha512":"861110510aab659be3a2fd5652198b25e49e55a1a3c0d02e2fcfa3bc59882be9131df2a4a946a4e6bb52306d768db6bb5cb696e7cce391ecd7804b5eac083d16","ssdeep":"192:CeD8GoiaUsk7dd7M2PGlBUOYpl5l/7cndmcUVzF4K:3D8E7PTPG4hpH4WV3","tlshash":"e602a6e063aae3e0f108fbbd8255b4b5af2f38f97b46d558c7b51c95c16202e89858c4","first_seen":"2026-05-08T21:46:29.739148Z","last_seen":"2026-05-08T21:49:46.375382Z","times_seen":3,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_color/skinsback.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_color/skinsback.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=OGF73fIR3jOhFaeU; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=SqaAOWhYYko0dAtLP2IW; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 05 May 2026 19:54:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:11 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2991\r\nddg-cache-status: HIT,HIT\r\netag: \"699ff917-1be7\"\r\nage: 265887\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7143,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"73472fc39635cc78175ecbe461abb1fa","sha1":"c853a80efb6690fe05b4db11d5e19c0b1c0ded72","sha256":"bf7f6cb649b0f7d81e3845d47658633ea38c83f79d833a0505402c7883e3366e","sha512":"104fbd94ffc63d873b5273ba78c17e422d306b52dbdc53466df63b96f467c868f8aee574e570c00f3350bf882d544087e8b2fafdf3b90112fa76368d2fd043ee","ssdeep":"192:WG7CpoZNRwSvrOQchUxujszCmccvOW98a:0poZsgshUxzCyD","tlshash":"41e161deb7f96bf0e015e3e17350683c321b59be6c61cfacc76c6da1aa8145c9425881","first_seen":"2025-11-02T22:34:47.193851Z","last_seen":"2026-05-08T21:49:46.353335Z","times_seen":10,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":66,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/search.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/js/search.js HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 01 May 2025 05:44:37 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"68130a45-140f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5wKxQHgulrYlqaAnwwsOPZXb3Y32t9L1WjNyFkgxRve%2BBzw7d3uYZ07c9oq80xlv3R3ThN7drXtSDflackx0dKudAVxtlbUKcoCmFUSGmqr1x3yMK0%2BSIwj9EVMNwMwdStA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7faab3456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5135,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (865)","md5":"a08d0cfb47102b1c625eb03d76f38d4b","sha1":"4662cf194d2d386590a64c223d1a2d31c28ccd63","sha256":"e3a655fb86cc5b13e8453b47c0955100e2443eb4a7825eaba3220c8ab8336748","sha512":"4af5ae3bfcdb74f3b7eeed5a5e142847f08c1360be5590697dd54f14758380d3bd71aba8bd977c8110c14be734bdadd593e46e387127ca1fe3c1c1a800661da8","ssdeep":"96:YhlHzcjuhqDfoIlUCINdqBU26hb7NJbkQbNrC6CDorfyKAUCIN/0:YHcjiYJbr6YroyKj0","tlshash":"f7b1634897f7926853bf8276de777c342c6d407f5044490dbc3c96e82fa486c8989ea9","first_seen":"2025-04-19T09:59:05.002707Z","last_seen":"2026-05-08T21:49:46.35593Z","times_seen":6,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Medium.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Medium.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 99572\r\nlast-modified: Thu, 01 May 2025 06:08:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe2-184f4\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iI%2FS62vIz4u9AwXtxReNPTwv5GBi2yn4WLhks4H3YtVOHWYOHWularE3K1Mi6P9sFTFZ99lTyn9fMtCzVLA6PsTKavR5jv%2BsT%2FZDi1Qqj2CgJjRmD8Zani9UuwiGkVny5lM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe7b8a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99572,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 99572, version 1.0","md5":"52ea0d7008516c101595f81d37225889","sha1":"6730d0f88794957b23d45148e162773485744235","sha256":"b8da67821e588e3ee5516083d99f1d9907c23a24fcb52dfb3c57cd38924dcef7","sha512":"6afcd29bfa0a5bf0ac5af15986656c6c86549813e8cc9405384741cb49ad5981865a513537fc0759a4367fd5edec6a0920940b1e57caa49de75d2725e0b26e60","ssdeep":"1536:vXn1yEO/O2lwhraBU5XN55y9yx08oGL2jAhJRSx9QOfYd5eF/cwpkm27snpuAlK9:P1yz/ORAU5Xk87jrRyW5eF3pkN7oKn9","tlshash":"e9a302c0d6928b03e654561cf3b67c62716317476610e86c945e9701afee2efc24f8b9","first_seen":"2023-04-11T09:18:30Z","last_seen":"2026-05-10T08:12:10.966993Z","times_seen":388,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 43\r\nOrigin: https://onetake-cs2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":43,"data":"get_messages=1\u0026num_messages=0\u0026new_message=0"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMrJ8eOmIZQlo2q8BQZC9LzmNSqo7BFQ0%2BcqMJU%2B%2FiuoeIR6WDZQizlwNhP4hNAEzh3%2BOQIZqWqh3iGLTpsHhwkytF%2Fmkhu1a12gZ26nvJcB3D7p8jP%2FPFKHn2MpHmNcym4%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7febb9856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":48129,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"JSON text data","md5":"13a9008714bf77c891aab3ba77f60fde","sha1":"6eeaa00d5c68b321cac3e9941e4d3bbeaa992c3e","sha256":"8cfca80c79a4a12c5ae2795022ebc54357c0c65d8da2e03dfceb76298185f281","sha512":"dae7f14040a5a9230f99c0c17d6885e9d652ba95b2054f518b3fb2b25255a9735e3d394e9900806db7d924335acfa1c6628ea12a79d63f7c54aabad3a2142b75","ssdeep":"384:ptQwSprILLHZLNJMwvsZ+0kVHb8AwP0O+RC+N0al0+/sf7/kMgEFntrDo/WqrmOJ:bJfakbhl","tlshash":"8c235aa292e9447e0597d8c9f6363e6e3e41b440cd66c32bbead16bbd301990df87704","first_seen":"2026-05-08T21:46:29.760235Z","last_seen":"2026-05-08T21:49:46.356691Z","times_seen":3,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/219ce2023dce084b58cb9c18e40c56b76d589f43_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 14:28:09 GMT","end":"Thu, 23 Jul 2026 14:28:08 GMT"},"fingerprint":{"sha1":"90:CE:4B:02:05:A7:51:24:0E:97:09:CD:3C:58:B6:28:2C:67:82:46","sha256":"A6:4A:C3:DE:02:39:5E:B4:A4:AD:CB:EF:31:E8:7B:D2:E5:4F:9B:05:4A:19:8D:25:52:ED:26:E6:9D:EE:DA:F8"}}},"request":{"raw":"GET /219ce2023dce084b58cb9c18e40c56b76d589f43_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: rPnIAf5cdli5teOdbWyOdQ==\r\nlast-modified: Sun, 21 Dec 2025 11:55:57 GMT\r\netag: \"0x8DE4087E72ECBA3\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\nvia: 1.1 varnish\r\nage: 488329\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1778276777.088088,VS0,VE1\r\ncontent-length: 8388\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8388,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"acf9c801fe5c7658b9b5e39d6d6c8e75","sha1":"adcbb6c8c5bdce1171290852cd6620437021dc2e","sha256":"2f05f13c45b301f61c24da2392214467cd1d59307165a9fc76e414fccee96592","sha512":"ab270ff6ec1146bc6512f7cdb77d96a693d84896060e75229cf5469066562a3cc4da00ad00d1b158411425cbdba939a1b51cbbbc1124ad983eec3a93f51834bd","ssdeep":"192:rppVM7uPZDHX9tcPhnbneiQrdts5dm4abVxYpRe/8R6xiTm:rZlP939tY9bnGG6bM/e0R6UTm","tlshash":"ee028dce480183caf59d12e8a9e61e3b37dbf07918454b29a1b6679072875ac7203934","first_seen":"2026-05-08T21:46:29.724421Z","last_seen":"2026-05-08T21:49:46.314573Z","times_seen":3,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":34,"dns":1,"connect":16,"send":0,"wait":44,"receive":4,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/unb/Unbounded-Bold.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/unb/Unbounded-Bold.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 126568\r\nlast-modified: Thu, 01 May 2025 06:08:37 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe5-1ee68\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 26\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1odxfpf3dhKSXLe8VtNwy4l%2BWMz64GAi7YJ6JepW7Ug8ZRyQOv1uJWjTeIdFXIQOXtemBZg%2FmKcbLZpSnTNlMOwZ8I4f3IOYKfU%2BTPmZOevwSq4TZtMz0yWUI4LxkuNfvQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba8036be856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126568,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 126568, version 1.0","md5":"a2ff4e0dec4239d3443f451b183e40d2","sha1":"ef9452a3257ab15eacdcf893d1d8346669f2f390","sha256":"287d23b18454b4897e8cd2c2c4bf4fe61845e898cfce4f79cb8a2763e3bcd7bc","sha512":"49ffefc17acb8d9ee3e0a3bef9aee05e9cc28969373c7c7e765c479c5d8956fe698b491caa8e36a300a9a345bbc1d059d9609377441195d2c7fc73a47962c129","ssdeep":"3072:rT+g1wLsIpFHkfws+Nee88NjeMvcrixO/hqDQmEZOa2TAh:rTeLBpxkfwGkCMcuUlZLh","tlshash":"adc3120acb5b9a045074aba404c23c46b8fad2d7d4fc3ad18cde58eb25fa95c875f358","first_seen":"2025-04-19T09:59:04.984193Z","last_seen":"2026-05-10T06:34:23.929617Z","times_seen":28,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":7,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_dark/sbp.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_dark/sbp.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VfQssLp9AG1WLpcF; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=RQleikeFi8GIcSV9vyt0; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 05 May 2026 20:14:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:16 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"699ff91c-131e\"\r\nage: 264681\r\ncontent-length: 1413\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9e5f3de65237d04e5f1b857327036a83","sha1":"0ade3f0c6d44e090b2ba6133caac71369383d524","sha256":"6b264e3c097787fe34f5150a0a2736da32d66c393ecd3b88da80b2abe84f024d","sha512":"1e25bbb30bccc7980fb9fe1de3a10dd893afb9c8f3f545c3305fd87c2bcd1ce1457431ed95312b9c3cd920dd59f34689f92928a7cbcaa7b02fcb7f4fd030c359","ssdeep":"48:FEu+LvVYV5j9mKkSLte+AAdUTO3zMLbrisL2TL/ZhLWowkqLLxL1+sML4tSLf5LY:fAeZJkUn7MriH7wg42kNa6MxYYUolymO","tlshash":"58a13125e69edc63e31ad2aece05843512ad45e78281c160c2e0ff5f68f14db3d0e6e1","first_seen":"2025-11-02T22:34:47.177694Z","last_seen":"2026-05-08T21:49:46.32079Z","times_seen":10,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":14,"dns":1,"connect":22,"send":0,"wait":26,"receive":1,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_color/rucard2w.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.105Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_color/rucard2w.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=oxWuIR8mWYQb7CnK; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=csJhzLeD4uWP41Uf5yqt; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 05 May 2026 04:29:32 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Mar 2026 17:44:41 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4057\r\nddg-cache-status: HIT,MISS\r\netag: \"69a86f89-2b91\"\r\nage: 321404\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":11153,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e792387c1b4039099633e6f15bb9691","sha1":"7b54da5cf4674279616de9955ae0abb60735ff1e","sha256":"314a57408c50c44d3347a0443985219182e34233da3fd55fa4c5ecfebdf3f1ce","sha512":"f1953976d5115509788076a68c560e8daaf51f6b8ce99f9cbe376a93cfa703ea64c85e6b936f780ec7d6cb0e66ac141b1ddb08d732850ad7aa4e9657655f7d14","ssdeep":"192:hWDYGoiaUsMF4KF4tN00Ejwc6SIovM6Owyx7/T4FfVzLfzoO9WvXSWpsqKg8sgNB:MDYB05jwckoU6Ow0T45f8gWvCWaKuB","tlshash":"fd32b3d057b9e3e4e005f3a48b25e471aa5f30f83f96c96cc7b52dcaa12502e8d998c4","first_seen":"2026-05-08T21:46:29.785548Z","last_seen":"2026-05-08T21:49:46.339712Z","times_seen":3,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":83,"dns":1,"connect":23,"send":0,"wait":22,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/swiper-bundle.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/js/swiper-bundle.min.js HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 01 May 2025 05:44:37 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"68130a45-2493e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gEMQlEicr3zUEbbYCmnHieZos%2BKf3%2FM%2BF6dh%2BSPlEPD4So1k6jFQol0AVaQNZxEwflT2m0ZE%2BIVwuzipkrPrHIUdSaMTXBq6M5%2B5EZ%2Fhly3Gf%2BEpOzUHttnVG7kV0uhO%2FcU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa8b2a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":149822,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"008800482cb95459ab04f3c283c48eaf","sha1":"2e5fe4aa7ba72b68b0b5797bc5ae52c8be00f798","sha256":"6506d614d8bbc2d188ab0dc9e917f3626c76e4b3c9b42bc5326d3010ce116cfc","sha512":"376f36b7de22d8ab90d4dc22ba0c86eb52ce33fc8c24f6c9695b3ee2b97a87026fa7f87829f6a6b21887a7e7bb89080182b4e2708d38325040120091823bb619","ssdeep":"1536:FKJrfGm4FZE8N09mSl43Oa8BlxvHzEwkHG+jBNy/gCjPM/BnTElyXyMvzME3AbMN:AJRqZNjoNEwkHRVBnnXyMvD3KMRVfi8","tlshash":"9de3e889a220b57656e3169b93e4c221b3b54540b80ac4f470fd4c9f597ec9813feefa","first_seen":"2025-04-19T09:59:04.987094Z","last_seen":"2026-05-08T21:49:46.349892Z","times_seen":12,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/eec2408e425228df0985c6579c37468b6e415dc3_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 14:28:09 GMT","end":"Thu, 23 Jul 2026 14:28:08 GMT"},"fingerprint":{"sha1":"90:CE:4B:02:05:A7:51:24:0E:97:09:CD:3C:58:B6:28:2C:67:82:46","sha256":"A6:4A:C3:DE:02:39:5E:B4:A4:AD:CB:EF:31:E8:7B:D2:E5:4F:9B:05:4A:19:8D:25:52:ED:26:E6:9D:EE:DA:F8"}}},"request":{"raw":"GET /eec2408e425228df0985c6579c37468b6e415dc3_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AAVLpEggLSTngOcpNICzLYhgZS4RlApQQaQur4KSlky9mic5XeP_i9M0iuKqw3PCEat2IEsy\r\nlast-modified: Thu, 02 Apr 2026 10:56:54 GMT\r\netag: \"a6eaa52498b0fd6472863016b6c8088e\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\nvia: 1.1 varnish\r\nage: 192667\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 2\r\nx-timer: S1778276777.086421,VS0,VE0\r\ncontent-length: 10552\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":10552,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"a6eaa52498b0fd6472863016b6c8088e","sha1":"2141b21dc028eb4e0d602509797e70270f761266","sha256":"b7700df43ec400aadfacf5e58957cc087c15c29e9d589b50fa3c34241a38fc7f","sha512":"7b12f3d9e80ada0dec459c8b4c3abd0968b676e7691780ec4f9d12ae41c5a0906c146bd063704b3f0b81b5880e01d9715a50eeefb190ac1f89af2b440cebbe97","ssdeep":"192:rMW+aCDD06RsGnmWS4u7Zb4O5fhqeQhQWqRlO0FVs2umanFC9k:AW+aCD4mnQ11b32Nh1aO0QJmav","tlshash":"a522bfeaa6182ff8fa70a43b44314f8655d73fa7e94e18e91de0103c373729472652a8","first_seen":"2026-05-08T21:46:29.72002Z","last_seen":"2026-05-08T21:49:46.369283Z","times_seen":3,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:26.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 23\r\nOrigin: https://onetake-cs2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":23,"data":"update_check=1778274569"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SaZ6lJzBvWF%2B2bXTdGSV%2FaAlLxNuYihMBi9dmqGGr4f4drJjJx8LttuHwuFk%2F1EfWEPb3l6eNpSQyyU2abNfzyC31TzfO5Ux8Jyl9cdIKNSSKpob7iWxcXoJJJcuZkGv7Ac%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba83ccf6256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"68934a3e9455fa72420237eb05902327","sha1":"7cb6efb98ba5972a9b5090dc2e517fe14d12cb04","sha256":"fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa","sha512":"719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d","ssdeep":"","tlshash":"aa3000000000000c000000000000000000000000000000000000000030000000000000","first_seen":"2023-03-07T01:02:06Z","last_seen":"2026-05-13T19:21:05.654606Z","times_seen":72683,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_color/card.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_color/card.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Yn2fCfKWChxDI6Id; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=qIkQxZER6S1VCncJWKCF; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Sat, 02 May 2026 18:39:33 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:09 GMT\r\netag: W/\"699ff915-11809\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 529603\r\ncontent-length: 25725\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":71689,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dd3ff555f6ed5e04fc52811aec65f3a9","sha1":"2ded212a6b7056a38f5cd7df275ab39d73837373","sha256":"f5352c5145a76695303f0170bdc9723309a81f7e46bf16646ebcb512daad3f6a","sha512":"0b230e257d596a7752a8502cbe0e3665dc96617ed33a51ea736ca24fe4a785cc68bf62952dab6e0fb2c3ad278b636dfabf1e81f28f425ef7af0e81778b021a6e","ssdeep":"768:EFAi5r9Av08d5jT2KSgB16KgVVvAlLTrWOyN+xjRQQcN4DN0padcLMU5JlnK1cu+:uAvh2angIY+6eNDvUPmoHePy","tlshash":"ff6388a5a3daf3e0e009f7f057299575773b25fb2d32ca6c4bfa2da4fa1101d4199880","first_seen":"2026-05-08T21:46:29.763644Z","last_seen":"2026-05-08T21:49:46.348895Z","times_seen":3,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/js/vendors/jquery/jquery-3.5.1.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/js/vendors/jquery/jquery-3.5.1.min.js HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 01 May 2025 06:08:37 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"68130fe5-15d84\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eSEAcJvdj9V%2F18YXAmY7pnV831X8Vh2jny8Edx0AUrVhbjbCw9YHnW3TP%2FbSRcAz2xXo4xqTR4PxlY2LFbxJVH2Xd9xIBbaJxWXvVtG47%2F5H%2FgTDiU4Y6uTZ9LfGUFQamyc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa7b2856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-05-13T19:21:05.58547Z","times_seen":237768,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/iziToast.min.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/js/iziToast.min.js?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 01 May 2025 05:44:38 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"68130a46-47de\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vlcO96PQl6NKJ7z2cmR9vC52FY8BXmXUz8NLYssBPLwzr8tmd%2Bq58KuxYoLkf8x1trZD0FYRTLsWTxSv%2BBR7ODMk3i%2Fd2CuOLbDI3rc04%2Fk6ONzl6HahZovWqgWiko5yN9o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa9b2c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18398,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (18315)","md5":"60fa362bf29459f2412c0ad458ce6973","sha1":"bb4b59060e147a395a42665c08c4a980b1bded41","sha256":"2b727ecda8837c85744a0ee0e183ff5027fbf36fc81d3fa03173e98579dabdb7","sha512":"1daef68eee0601edffe502e04b0e788b345ebeca2eb8e884c59344234fbd2981c289474f83f4f91fd844e0ff8f2c5e04a5f9cd003dd25469bdb3131122208cfe","ssdeep":"384:ShKmhCPzlc5gVCPBpcG/0CEvXArKKpQi8VREgOXnnHzxJBkHI4505P:+K5PzlcN8DXArhpQzRHOXnTxfGIYUP","tlshash":"4f82c8947220323b4aa329a960ff534a3772116ca9c641a4243fcdad5b34f4929f77f8","first_seen":"2025-11-02T22:34:47.205746Z","last_seen":"2026-05-08T21:49:46.311552Z","times_seen":4,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/js/app.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/js/app.js?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 18 Mar 2026 09:09:39 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69ba6bd3-12ad\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Hyq0VdewcP%2F46RnM0QCmomtNi%2Bxm9tTK%2BNKp7ouoVRYH%2FaHEwskLEFhE6iqtL9ou9v0MpY8ARF4W4JoNnXFcIBwIyc0L3bAKzEL4joQkBGCPgtI%2FBpFsJ%2B%2BBiDpGY7AJNA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7faab3556ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4781,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"29801bd90a2a35110c4ce6619fdff837","sha1":"ea9c2838bf1c5781ef9b584a797bd43ee7ed71a0","sha256":"c8d8d004c84581ad63ffe6d3fc99e55d0c0026be98d5b191b6aadf7e56ae6b29","sha512":"33450e0d9c73426b80461f635659a6d057a3d560cc2295a715503db919015f0238cf6d8b3e7836d34d23c4075d35c356ea36a430c4712add6aa4038a064335b3","ssdeep":"96:ONr1itgMSK6q1PVolz804HooGMtCxSwharw/23T:jEK6qIlzueMtC8wha8e3T","tlshash":"ada1ad8e35a212555ee7707e9e0b90486473d44b6a1ecd007ace9a902f9c63da7b3b0d","first_seen":"2025-04-19T09:59:04.994869Z","last_seen":"2026-05-08T21:49:46.372177Z","times_seen":6,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_servers/assets/js/1.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_block_main_servers/assets/js/1.js?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 19 Mar 2026 11:19:37 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69bbdbc9-1b2f\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCbw1kP0722odVGoP6arHoRKNqxyGK7j%2Fnghg1d%2FJU7gQcat%2FK6%2FYFy4aC%2BC6uP6y9h%2BFgXiA1Wyki5zp1YqfLFtn0vbm1bdEwqkP1SQa%2FnRTaAKMigsW5jauJLoQCtiNMI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7faab3656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6959,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"48e3966d30a78fd6299c0d9fcdc05645","sha1":"02bd02b3194e78d220e96a89df26eb43b72bbb4b","sha256":"e43fae14fe07b00194d4f8c2df55ac141fca0fe12e41c76403a3c0ffb299e681","sha512":"d0d4023cc8fde2218becd9d36eaaf8c1f719e7e07a9572e155bf6e0eeef110cf6f7645bf00e2a933956c48e3b2ae7849bec4ee6690666f3986debbed3afe39b0","ssdeep":"192:KWyi5/S3cVuuu7SO6CX+jtBD2XHzhIz+Bi:x5tSIqBi","tlshash":"dce1524635f7153b086b74fb2bab92443b3450033006ce01be1c6793af58a6cae67a9d","first_seen":"2026-05-08T21:46:29.71298Z","last_seen":"2026-05-08T21:49:46.350433Z","times_seen":3,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_servers/assets/img/awp.png","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.731Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_block_main_servers/assets/img/awp.png HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Jun 2025 08:48:23 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"684d3757-66ea8\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWtcEfloTFKfZUQ%2Fvllgt3PABkPuyomvTALpX8QnktGpt9%2Ff%2FYlQzxbMb33kFDieXqLhNq%2FwjVeaE0f12S7vLcACQ4M4%2F8Ap30ydU04MWnK1WA7m71plpwh06MYF3TK9p7w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe8b8e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":421544,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2410 x 1396, 8-bit colormap, non-interlaced","md5":"18ceecfa668cd293c3be5a944641b3e4","sha1":"a370cc03ccf7481dcdd36171af3ee338024847ce","sha256":"a0fe3c778a67c481f47dfd287a348a81d5d3ee4db481229f3aca3d1f8ed9f418","sha512":"797238ba5751cbe5e66fc033c4999e88db1e47a4dba39db461465fab32d6bd38ca87c77f68b5d7e55aa274314f1423ecc8304245d3c9f1dca8c26aa2880047ed","ssdeep":"12288:4BhPITYmVkuEF3ceUzZ2eUDrHmAcHexPo:WhPIEmWxcf4lmAPQ","tlshash":"549423d9f1366f75d1254336e238719a09222c8b9da89b40e941b10faf7fd63cfc2265","first_seen":"2025-11-02T22:34:47.197907Z","last_seen":"2026-05-08T21:49:46.316984Z","times_seen":10,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Semibold.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Semibold.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 100384\r\nlast-modified: Thu, 01 May 2025 06:08:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe2-18820\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1vlfCgsKD5s0EiNbVk615xISWKUw4RP1uMwCouR%2Fi3XnSUefCJRmBZHu6On9bs%2BHaXMb%2F6eQZdqKLxoMb5wkreqI%2F2cVI2sP5dLFodLYoYlgBv6kOmt%2F6UqbIcw320GNgQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba8038bee56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":100384,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 100384, version 1.0","md5":"af64ab08547cc18daa32439d1f6c9c05","sha1":"53abb89948948eceaedb4cd118dc9e0c6d93ed9c","sha256":"e80a61b2cbc6d6b3b3ed8b50bcd8f6a89f8f5b69460e03f47defe0554c3220d2","sha512":"6149c99c2be0580f4437879f232a48de4f83c898eb180f007c55e9520c7c7e8970fac9014f47dfd4cae9f9d4f03784cb7382c286da83f71a51f1bd7a6920b460","ssdeep":"1536:TWAkJQmpjmFjllC0602QaaV42foBpYInpeSDjQh06C5VY0U9bcM9nYXr8hm77V7:TVH6t/avoDngjh06KVY0ojnweiJ","tlshash":"dca3126d87110447293a3b2005633eda898c1e6f6475edffdd67420febda2a903e5a42","first_seen":"2023-04-11T09:18:30Z","last_seen":"2026-05-13T15:18:02.864566Z","times_seen":413,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_chat/assets/css/all.css?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_block_main_chat/assets/css/all.css?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Mar 2026 13:18:59 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69bbf7c3-3f76\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zsijwyGtEd0%2BbRLFkHnCMpXJJk4oitHxXEhbxSiZbEQ078LaLKTtlOqx3ZLal2jUtoUk6yf9yv8on3jY8y3%2FmJG5jHK8Diu%2BjSVv8%2Bwsg5aNTERHcUdd9ZNA6n0eaqbP%2BjA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa4b1b56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16246,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"94ff9da4991967df0bb448bff4a4f644","sha1":"26068f9462fb8ae2d6ab8e6b29c2b67a89f2ad09","sha256":"61fb6d0b5c31eb2bf4b934701de393b738608b49a632b3dbf734846676d332d2","sha512":"385e713323625ced68dabb316239d1173d93db26d90a21fdf7d488cf82f46f77f7ba3871097edcc70d2f1526c66fa181af4c3abd8335c0ea3eb13a5882c0fd89","ssdeep":"192:QpU/FDv2AdRllRi7CLUTHWSq+KEMBNgQ8uZtQgQB0Sr/EPLKcrRwI3wLnlTFHVnD:jFnbeM90dHFhFu+F29FTFwFIUR","tlshash":"d772ff86577319657d2be6543fae574a23398003950ae87c7bc8626c4fc62f8a463fcc","first_seen":"2026-05-08T21:46:29.787351Z","last_seen":"2026-05-08T21:49:46.321295Z","times_seen":3,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/css/swiper-bundle.min.css","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/css/swiper-bundle.min.css HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 05:44:36 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68130a44-4702\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQ1pFWSEc8joCFtTK%2B0ktt3hKOxQ%2FkJuSRkPCtWgFvNUpPJL%2F%2BM8AW8%2FInVqk89KB7TLFvEGGQo167ZFRZG4yiGG1dzVDuTqZnhDOF%2BLemF7JhoPRG1hsWfqytbdAsWmdgo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa4b1d56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18178,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18178), with no line terminators","md5":"729705c64e834fc7dd3ca0cf18319c02","sha1":"7f4e6eea0a88a77aebbb5a666d30ce31d78204a3","sha256":"72c7191b8bfc97a56f4072a9dbce66ec8fe4171934bb2823ef831151e13a1636","sha512":"8c9f4fa550e36b9aa7b0e8f552b4a52d436e1db346f6344fcc91157fbbf10f7527fac5cdd57e5730d4d0886df99170b534068f54e1bc90237a4b3b73c1a08b68","ssdeep":"192:0mUJbiKne5JTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxX/P4:1Ube5JndKW+Sa0ni24tnWfz4cfQ","tlshash":"838256a45350182753270f364bb1cbb9e97444d24fd389ae91c0ee58d7facb9132f2a9","first_seen":"2024-12-30T23:47:44.648039Z","last_seen":"2026-05-10T18:29:50.199304Z","times_seen":81,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_page_voucher/assets/css/voucher.css?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_page_voucher/assets/css/voucher.css?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 01 May 2025 05:44:33 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"68130a41-41e\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zrQ1%2BBL1GfuDCy6J7mBjIoDCpfKBYU4CwW2RTI1cWlwFutklZWBwOtu0ktyk8h21OgfdyLtBdWni6Sqom%2Fp%2BSN6AXQzdJNOD1lEu1f6mNq4IvoU0aQHLYRDxgJN9vFJm%2F9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa5b2356ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1054,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1eb164fa41a50d19bc5ce4bcaa279b00","sha1":"f689a617a0260e1a059cfd11236a400337b07433","sha256":"e99c2de4925562687ca329fec54c78f2ee3faeb34ef6681541d86892bc6744d4","sha512":"bc59ecb4907b25e6e73a77cbd7f20f2c9ae537076deed85b3e788027a7dbfecb307d01a5edc7c4960eb69dec2774b13c6ba79f43b6723c978aa73f4d656152ff","ssdeep":"","tlshash":"f9113843e13345fa6526d7a51bad832072b51c83a64fe9ac3b4c71544f86674b2627c8","first_seen":"2025-11-02T22:34:47.188281Z","last_seen":"2026-05-08T21:49:46.315915Z","times_seen":4,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_dark/streampay.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_dark/streampay.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=xtNk3SaHVJyfKYLW; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=nRgVwHziYd7WsS2GlPoN; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 05 May 2026 19:58:08 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 06:58:21 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"699fef0d-1c00\"\r\nage: 265688\r\ncontent-length: 3199\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7168,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4276221ddd4b9ab10e8c9d07e346952c","sha1":"7a63f964e28bb25b1f2e775847a5958fcf0d043d","sha256":"a7e695a84e53ed0e7395626f2a6363f4e54e3f3c0f68b148b448d23c5d47c5cf","sha512":"c1ede19e9b5c174a32947635b565d3eda2ff4bbe0c558521752fc89641033724024b18b39dd3e8edbc671fe77e7fc4a701fabbd889ffb9a56062833edeac74a4","ssdeep":"96:1biLYE+Kq+756575rQ41MzcbQqmYTsOxAUZCkTZopEZS4rGtzgwFEi3E23s:szg+7565FB1ycbvmKPAnA7S4m3s","tlshash":"6ae1c6e993e9b3e8f006f7f0d92594797a1f24fe2b12c62987b99d55a12106cd88ccc4","first_seen":"2026-05-08T21:46:29.778986Z","last_seen":"2026-05-08T21:49:46.37467Z","times_seen":3,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":24,"dns":0,"connect":30,"send":0,"wait":55,"receive":13,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_dark/erip.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.110Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_dark/erip.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=mktjvuNl3fYA3BcY; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=kUp1cqUolnC7MnTbCcAy; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 06 May 2026 20:47:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:14 GMT\r\netag: W/\"699ff91a-1815\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 176344\r\ncontent-length: 1761\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6165,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f99f11b51e25eef4e3d1a22e1434470","sha1":"d6275dddf0e484df39de749dcdc63d8a532788de","sha256":"bd2d78414d8d5100030f04659fcd84a5ce35cb17d868630d039f750db15c8829","sha512":"8e959da2e35e830c2680107660db1a57e9e53cc73226dec578d04e75244ef8b255c1f97443f6d024327537ec594fcc63a9776c5dc6233e98b6aa0bd21f8fe7f2","ssdeep":"192:8gWkPWr7Tljvxd/LInGaWRHUlo6BWa+CkW7vHGPNw:tWOWrFDxd/8ndWFYWNbWjHMG","tlshash":"5bd18479e56eec53e119d3ecce09c426207653fbaac18260a290ff1f79606d51d0e9dc","first_seen":"2026-05-08T21:46:29.756604Z","last_seen":"2026-05-08T21:49:46.327668Z","times_seen":3,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/js/app.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/js/app.js?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 18 Mar 2026 09:09:38 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"69ba6bd2-2714\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8NDm%2B4ybVeBbBmb6Ep8k%2BuHRIObLQGu63rMOVuAHitMJ2uY1XyK4dpVByjrUxBBwPdKwVgUmjMNGcDG9biaqEuO%2Bb%2FuSJsJKPTfbbfGcU5P0FqV00yeS3h9aGuYQjnelIv4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7faab3856ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10004,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"d4916c6205742578bc0c7b68df872e2b","sha1":"324c64453d599d539d95e1855089061f9623b6f5","sha256":"e62d53e299d76b93af845c7f536de02da015501da2bc6b9d2a91502e31bc2f9a","sha512":"748f6f761c05ef0463b0dbcc31806967e6cb712b4f7238c086b109641b2c5240caddf4cc4f36e98052a844e0b1a355033f0d7721991322f0556998628fce2755","ssdeep":"192:VQO1KkhEK9UxCO1Kk2EK9UxZlmp6DeTkfrC+/Je/SIcoK4K/K4yoo22XXFPeLdfq:Vf4kUX4k7FnebKCrJAFg","tlshash":"42220e5c79f1117040bf257e289f64083a7294539d0bad607aac5fc00f8ee7c92b2b9e","first_seen":"2025-11-02T22:34:47.195402Z","last_seen":"2026-05-08T21:49:46.354396Z","times_seen":4,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_page_pay/assets/js/pay.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_page_pay/assets/js/pay.js?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 07:41:25 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"699ff925-2751\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3KOINSoLK3Nqto17wlBSxlmDcXoQpkqbJJEjSS9GO80bmLU9U1vjVphnd494IkWiS4dW%2FQ8ctHHdiRJpXu2bUHlGUg5aEZvhW%2B70sfOCkYTAA2huXun722usSdk5txz8Ic%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7faab3756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10065,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7b1177d872e2df37ae628bc205d76588","sha1":"c639b90055aa7a197c3eefe97a224bfb8dd0db9e","sha256":"47feffed16cae46cbc451156164cf91f1062d7bc68574e74875aef94f8192e07","sha512":"3968538039c9de3195b2aaddbeb02f525afdbddf3ce0d5f531af6a9c1ebf84592296cb05f6ed4e9fa8814d386d8f9b06e325ee961144ce99d194d189534fcc02","ssdeep":"192:fJjd9i8kCPvd9q0MiGP4vCdlZA8sbRxFl2+9ZL68bsjMJQtfi5ZOGMIfBFssNbIe:fJn3MiFc8bRJs44K0EFbD","tlshash":"1722501c79f2093012b778b89edf8244b768905b910add543ecc56c09f88d3da6f6bad","first_seen":"2026-05-08T21:46:29.792978Z","last_seen":"2026-05-08T21:49:46.372714Z","times_seen":3,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/resources/img/sprite.svg","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /resources/img/sprite.svg HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VVdecCGIM8XfCE46nR9TF4AnJrZmYqtU0O5rrG9kxnFeMtlDGsanCswiXAR%2BYqAAQztVGZmU8nrZ%2FhEksWCWRVUNcfkFuIWeqQsA74T3pILAThlHoEf%2B8lt1352hrcrbmSQ%3D\"}]}\r\nlast-modified: Tue, 12 Aug 2025 16:26:46 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"689b6b46-14d0c\"\r\ncf-ray: 9f8ba7fe6b8656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85260,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b27a816041085004da84ccf6615e7a93","sha1":"0cf038ac3656e4e8f3931beb96fb47569ce90cb5","sha256":"b14cf03d0b3dd630adf64a0dd57b8950a4dc2cb876dc9955997b3bf28411a78b","sha512":"8c38886c43a948a8acf66715373c05030f40a7a87f60ee1a3bab2fa7534486c496e27ccd7e1ac872943def3cf08b9157ef879f79453cfe41e0c31eb3a642b0fe","ssdeep":"1536:xz9hAVgU6haClORw7SnQACuo53ABipAgRTKcADLqkBTagvYlYtw7pSTO8M:xPSlQgpi+gIbFwtSqv","tlshash":"0083a4b897fc92bc198b87aadf3660a42b1f40fe71a14278b57d8bb05b434d8d547c90","first_seen":"2025-11-20T22:22:58.967855Z","last_seen":"2026-05-08T21:49:46.354922Z","times_seen":12,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_page_voucher/assets/js/voucher.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_page_voucher/assets/js/voucher.js?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ifjUaqg%2Bza6BRWxULy7dF6JxIcK3cesrGfU8%2Bkml6Vq2UkqThv2cZO52d4Y7TolNKCnuApDIJfWd1Sk0B9t6LBukPr7byU19y1G%2FfRSuBeYAiNtczGADND%2BGxyWisrkv3Mw%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 05:44:33 GMT\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"68130a41-3ed\"\r\ncf-ray: 9f8ba7fa5b2256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1005,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4ac32f5573cea2a601c58a48d549b3a4","sha1":"a8bbb12ba8b2c2188d9f354797473dc7df9c0361","sha256":"a73470b5ef3446d884d12023e845e4c1cd3e18b980b2af29106b825e8a347fb3","sha512":"b32cb01b65ab4245319e5d34eee6b4a354e0facfe6f83449d4ee856923d3c0bed286a7735267ad83f91b11cc56f0dc98b83bbe6c48f17c25bdf5cbfaf2321801","ssdeep":"","tlshash":"f611ce9b20f51c944623679a8977e804ea66b51f250ead48780c0bf0ef0cb7c75a3528","first_seen":"2025-11-02T22:34:47.203386Z","last_seen":"2026-05-08T21:49:46.32571Z","times_seen":4,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_servers/assets/img/dm.png","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_block_main_servers/assets/img/dm.png HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Jun 2025 08:48:23 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"684d3757-608e5\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P20gorL3a2PnfcMe%2Bb%2B7AQsZfdILpiw%2FCe2y4XP72gV3vYYx6uHO6S1yKf9vHmfPL2LoMUb7QAhU7DBcIblOAX8ytKSxgXC80GdLsGDmidsvx8A%2Bfj7eIX20zhebdxpO%2Bcs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe8b9056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":395493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2410 x 1396, 8-bit colormap, non-interlaced","md5":"d0ce891084dcf0d8be57ed6e2196b8b6","sha1":"a226f1e7ecbf3da1c9f092914d32fe1b0fa06e95","sha256":"b7175e3f396cb987ef654fdef0eb899dfd6d67c67d12164a1d8ddab90526303b","sha512":"069a66924ac3f91b82f489cf70456717ca9c8f35e5301e801b7e79da5125031fe500e5a4339bd88f76b15f498d614e02e910ab9f6c50c878201158880a610e88","ssdeep":"6144:P/RDeELEhjv6NTAoYnsVpDq7DE7ppsX5Q9VEqoX7r3CutnxdIHYeAM4:hDCjv6x1r8X+9VdmGu9xG4","tlshash":"d08423bfcbecbda3909c2a6552bd552b7a390781a0bc1ed1445e69ff433b1dc009b522","first_seen":"2025-11-02T22:34:47.181572Z","last_seen":"2026-05-08T21:49:46.334842Z","times_seen":10,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/f7052974f5a34f1c3514f66fc3bf01d8f9328701_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 14:28:09 GMT","end":"Thu, 23 Jul 2026 14:28:08 GMT"},"fingerprint":{"sha1":"90:CE:4B:02:05:A7:51:24:0E:97:09:CD:3C:58:B6:28:2C:67:82:46","sha256":"A6:4A:C3:DE:02:39:5E:B4:A4:AD:CB:EF:31:E8:7B:D2:E5:4F:9B:05:4A:19:8D:25:52:ED:26:E6:9D:EE:DA:F8"}}},"request":{"raw":"GET /f7052974f5a34f1c3514f66fc3bf01d8f9328701_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: 5r/jHdREpSL3wK5+1XOtWg==\r\nlast-modified: Wed, 07 Jan 2026 14:28:28 GMT\r\netag: \"0x8DE4DF9065F9887\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\nvia: 1.1 varnish\r\nage: 12852\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1778276777.087767,VS0,VE1\r\ncontent-length: 11546\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11546,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"e6bfe31dd444a522f7c0ae7ed573ad5a","sha1":"363393c1f6cef029aa7d86717e240d96380ef89b","sha256":"5de5db11c99e0a06c808a0c727ab44795f4d5230a5daba83567085938a154234","sha512":"f06a539c94d745dd95290a2a299cd0cb4f40fab604a66c9029ee86a55752442a075bf1d8ed1555e9bc8b969598dd9ee1dda0c529534d54fb28e08d74c187d4b2","ssdeep":"192:Ln/3rH6M4PyLwoMcNa2ft8G3VAeavN59sRpuyKQAK/sDnnGPm039WtVD+eLqXUmW:TvrH6PPIMHIaGlAeavN59sbu+AK/GnGq","tlshash":"f032cf54024a7ac1f0b00ff7cdd4ed51ee6ab6ea7c6b6d44c7c740a75f11914520292c","first_seen":"2026-05-08T21:46:29.766986Z","last_seen":"2026-05-08T21:49:46.308262Z","times_seen":3,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":37,"dns":0,"connect":16,"send":0,"wait":40,"receive":2,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/0305a4911c34cc4b6bbdedb6300fa863271f09a4_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 14:28:09 GMT","end":"Thu, 23 Jul 2026 14:28:08 GMT"},"fingerprint":{"sha1":"90:CE:4B:02:05:A7:51:24:0E:97:09:CD:3C:58:B6:28:2C:67:82:46","sha256":"A6:4A:C3:DE:02:39:5E:B4:A4:AD:CB:EF:31:E8:7B:D2:E5:4F:9B:05:4A:19:8D:25:52:ED:26:E6:9D:EE:DA:F8"}}},"request":{"raw":"GET /0305a4911c34cc4b6bbdedb6300fa863271f09a4_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AAVLpEgmf8OYe-c13yIUApt9h4BgYxvgfQ8UllA5VGpM3iAwOSBsPbiZxhNRu3-F6E_8CZQZ\r\nlast-modified: Sun, 30 Mar 2025 16:19:25 GMT\r\netag: \"119d6e1a7d7ba140895e45e8a0403760\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 187541\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 0\r\nx-timer: S1778276777.165300,VS0,VE1\r\ncontent-length: 12762\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":12762,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"119d6e1a7d7ba140895e45e8a0403760","sha1":"0d0a3ff6a79919dbecf179f6b42be1e060a72fdf","sha256":"376959fc3e7089f5d94db60b5cf2632932161a934ca096617870237623df88a3","sha512":"31e583b499ee7cdf9702c23dac4b270bd30c82b311ebe9d91c14eb1c22be2fdb14ac94d84b0b4b81e16f12af71d4e90a86091e79bf4381d21efc8eb1268036b4","ssdeep":"192:kKHhI/MyS9w9Wg1CfUuqiAnfcw6SddZ5vEISIe9++uot8/0fDzNXnahm4ZnUY:/XyHN1hOEcw6Udr++tz8fDz1q1L","tlshash":"8a42bf7d16848dc2fa14c9b8e006bcb079e579092b896f5652d050990ccbfe9afe6e0d","first_seen":"2026-05-08T21:46:29.736046Z","last_seen":"2026-05-08T21:49:46.357237Z","times_seen":3,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":112,"dns":1,"connect":26,"send":0,"wait":18,"receive":5,"ssl":90},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/2a6b8481d641a3263a7d2acbe4978cb5871ff422_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.050Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 14:28:09 GMT","end":"Thu, 23 Jul 2026 14:28:08 GMT"},"fingerprint":{"sha1":"90:CE:4B:02:05:A7:51:24:0E:97:09:CD:3C:58:B6:28:2C:67:82:46","sha256":"A6:4A:C3:DE:02:39:5E:B4:A4:AD:CB:EF:31:E8:7B:D2:E5:4F:9B:05:4A:19:8D:25:52:ED:26:E6:9D:EE:DA:F8"}}},"request":{"raw":"GET /2a6b8481d641a3263a7d2acbe4978cb5871ff422_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\nx-guploader-uploadid: AAVLpEgG6RxAY6OxahM3uQESIJI44TPhIU-Eo-FT_JRFShyzfTG3fScg5uUo_mho5cEwHqME\r\nlast-modified: Wed, 04 Mar 2026 18:42:53 GMT\r\netag: \"f5e56fbb341f438ad2e17d5217b404e2\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\nvia: 1.1 varnish\r\nage: 27407\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1778276777.085406,VS0,VE1\r\ncontent-length: 12502\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":12502,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"f5e56fbb341f438ad2e17d5217b404e2","sha1":"b3f739e88c36997e683a046bff148bc5adab5d08","sha256":"466cb39d941b44c20ef92144cb66c9972a6c18df31b4a8278b306e7875869d01","sha512":"fc53d57a983e069e150299fe777c162746b60b7c492e1a414b18d8b557b8bb784538c0231b347526b8d3026d0f5519b4c5e96c07a260d485b6beaeb28ca2f3b3","ssdeep":"192:+MVxAZPK0gTQsQAn0BSD0cNlO4DNmEW0OxibT+07KuE6+bQU4bchZgXon8:H+ZPK/Qs8Bkl/lpbvWuEWncrn8","tlshash":"dc42c06ffbc158c8b8ef85518c014fcefbf99e3a525218e860c3b486f58578354626b5","first_seen":"2026-05-08T21:46:29.725751Z","last_seen":"2026-05-08T21:49:46.337666Z","times_seen":3,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":16,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:31.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 13\r\nOrigin: https://onetake-cs2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":13,"data":"get_onlines=1"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DWpE2NBobNgdudLxIUqeQ9wvOqZbdsQKbotMm1A%2FFAyw0THE4PyfijePZpXunH0%2FN2DyO1s1vP7T4CiGXE7YdUaj8kUoyWhsVBWv0VqAmxclIcB4xNspOdMbzd5%2BEEwvN%2Bc%3D\"}]}\r\npriority: u=3,i=?0\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba85c0ab256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"ec8dcda5bb68f9b1f1ce6a9a2de2de36","sha1":"5ab90ae420d1aa7ae295991667a8e6d734906224","sha256":"cf900aa28c6c77245ec0962e749f69814e229f269f606f2ef813dab3fd6e9033","sha512":"f9f3c72737ffb1dab17d49a38dac2b047a5bd14449fec74152a568e6215994435b69d4dec7582b1185ed61871755465ebcc664cccc5b819946ec9d68a37752e8","ssdeep":"","tlshash":"cf9002018c7d10994812d844217069b11982325282da18715b9157819216555253c002","first_seen":"2026-05-08T21:46:53.478619Z","last_seen":"2026-05-08T21:46:53.478619Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/logo.png","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.090Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/logo.png HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 03 Nov 2025 17:28:58 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"6908e65a-3dbd\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZgqfmDMO%2FjhUrE3A7Md93%2B2FJxWzfqocYJq9AGzdj7pSZP%2BRDUBHgQ9h0cZ2V7hJhX4N1PowOOsF8KmtFiB5TGoG1yKXhhR02hxJKaL8LE3IJABtTBw1iHoWA7R1ZfMDbJA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa5b2156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 438, 8-bit/color RGBA, non-interlaced","md5":"d257bce4457dbe8dce9ad55b14008de7","sha1":"1be9e131aa88cc6ba1d12a63f3b860f91373665e","sha256":"52f6006ecba9ae61d31373c583bb77060873cec0f6f8fd177aa493d3662da9c7","sha512":"d0f971501c9bfd8752dac1ea2f5d754e36b392639dc07ee601484c2e833f25c27059a528e8b664f7615b0337c17b727538f97256a73ef64477c0cafebf67efa2","ssdeep":"384:qHn94wfEORVncWON+rfHs3Zny3J1fsmGInhtf:irE4ZxfityZWm9f","tlshash":"b562b00ead189a00e99f934854e41bcf3f3b9e4dc95240675c8ddcf72d562b3964da83","first_seen":"2025-11-02T22:34:47.221416Z","last_seen":"2026-05-08T21:49:46.310004Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_dark/skinsback.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.119Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_dark/skinsback.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=iO0OK7mT9tCEEmqw; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=GhtCxdqREWW3qo6FI3vA; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 08 May 2026 19:28:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:17 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 3030\r\nddg-cache-status: HIT,HIT\r\netag: W/\"699ff91d-1b93\"\r\nage: 8252\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":7059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f0c2b4c3a485702abe1d8b479c8cee22","sha1":"057b1a396ebe0ad8c7dfd7388391ca35ed3ad307","sha256":"f6cf83e1fc93cdb6b474bd5c843b7f58b542fa8e5ac844a57ed47be7248c674e","sha512":"a539430f1a188831341a78c20f6bf2ac0e31e0d42615359d45c067d0b91a4ba5e6d487431df421130511886b89d310c6d65fb1e5d16ab4d3c7ffbb865b65d74e","ssdeep":"192:gG7CpoZyRwSvrOQchUxujszCmccvOW98l:6poZPgshUxzCyu","tlshash":"92e172debbf95bf0e015e3e177506838322b59be2c71cfacc76c6da0aa8145c9465881","first_seen":"2025-11-02T22:34:47.211322Z","last_seen":"2026-05-08T21:49:46.3717Z","times_seen":10,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":66,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/logodef.png","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.124Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/logodef.png HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 19:06:53 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"68fe714d-3dbd\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q4NqTws9GTeGVs%2BYja%2BKDhJiGibZfXd6xxIaPM5KHXYE2rwI84bwi6MJrO93CKPZsalu%2BNwYOC2B4hpxvuxEH13uYfN1ooS%2BXD9Ky%2FLSFXWo7YQSr3rSf2sWidod0lFzy1w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa7b2656ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15805,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 438, 8-bit/color RGBA, non-interlaced","md5":"d257bce4457dbe8dce9ad55b14008de7","sha1":"1be9e131aa88cc6ba1d12a63f3b860f91373665e","sha256":"52f6006ecba9ae61d31373c583bb77060873cec0f6f8fd177aa493d3662da9c7","sha512":"d0f971501c9bfd8752dac1ea2f5d754e36b392639dc07ee601484c2e833f25c27059a528e8b664f7615b0337c17b727538f97256a73ef64477c0cafebf67efa2","ssdeep":"384:qHn94wfEORVncWON+rfHs3Zny3J1fsmGInhtf:irE4ZxfityZWm9f","tlshash":"b562b00ead189a00e99f934854e41bcf3f3b9e4dc95240675c8ddcf72d562b3964da83","first_seen":"2025-11-02T22:34:47.221416Z","last_seen":"2026-05-08T21:49:46.310004Z","times_seen":10,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Semibold.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Semibold.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 100384\r\nlast-modified: Thu, 01 May 2025 06:08:34 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe2-18820\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p4heO2Q%2BcQcprqRfxYZovP2VwHCLqfIAOXKBW7alzeyCsDQ5gP62R9ICliwt62kxY9pbQCql72wFiN%2BSn8%2F%2F5WrsGFQ0vfo33%2FMZojYuJ%2BU2%2B8N7%2FSW9yTiTCAYuCdimkkw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7ffcbaa56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100384,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 100384, version 1.0","md5":"af64ab08547cc18daa32439d1f6c9c05","sha1":"53abb89948948eceaedb4cd118dc9e0c6d93ed9c","sha256":"e80a61b2cbc6d6b3b3ed8b50bcd8f6a89f8f5b69460e03f47defe0554c3220d2","sha512":"6149c99c2be0580f4437879f232a48de4f83c898eb180f007c55e9520c7c7e8970fac9014f47dfd4cae9f9d4f03784cb7382c286da83f71a51f1bd7a6920b460","ssdeep":"1536:TWAkJQmpjmFjllC0602QaaV42foBpYInpeSDjQh06C5VY0U9bcM9nYXr8hm77V7:TVH6t/avoDngjh06KVY0ojnweiJ","tlshash":"dca3126d87110447293a3b2005633eda898c1e6f6475edffdd67420febda2a903e5a42","first_seen":"2023-04-11T09:18:30Z","last_seen":"2026-05-13T15:18:02.864566Z","times_seen":413,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/css/style.css?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/css/style.css?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 19 Feb 2026 06:38:50 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6996affa-11c95\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r7NVU9cIM0i3P4WxFU%2FWUs1lGqwGoZxLZ00v3CFpsYl3oLIaiV%2Bc61kAnnsCSTTTXBpYc9BVlZ2kJxH3USAlMZGFrekh%2Flz6wfWuGZlVX44cQ9ByfMPdkS5fBi316QPGveY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa5b1e56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72853,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"13de5a12966d632026b2c513b35d8328","sha1":"8c6b1c143e5d00787605cf42cda48b8ecfee93bc","sha256":"630ecca20d61f856ae0f92406ae7d32487f0ac4283beac3d9a372847a22bc302","sha512":"5a5ad922b90dbdee8ce1ead2ecbc41711b9ba9d37676e738f4f6569b3f9f84e24a2ca567803f04c59ed7d9ea92b934eda33543e43f0e3178f17ff892408b4cbd","ssdeep":"768:UCe+SoJ0ryhlrin8/+in8/bwFudiozwCz5bjdLYyYIAy+JLot7g6yY5AyrJL3BKm:Plrin8/+in8/bw8mkR","tlshash":"cc630e708ab336041d12240d33de5e55172e5407320ffe6b3bfd69689f9bb9482627ae","first_seen":"2026-05-08T21:46:29.784643Z","last_seen":"2026-05-08T21:49:46.346081Z","times_seen":3,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_dark/uacard.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_dark/uacard.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=G0ueAkgc0xx8rLXD; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=dDnKHV5rAucI2gMtY9ly; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 05 May 2026 20:14:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:18 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\netag: \"699ff91e-2567\"\r\nage: 264681\r\ncontent-length: 3923\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9575,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bdfca89a5c9e5eaca6d2a785d2a942ef","sha1":"b3bdea9cfeb75b989fdf32935a77b8881ce587cc","sha256":"b14e2504635fe5578ca6ba2ce9c9e57ee8c022002ba5e97b53c6528191261d78","sha512":"d7513d97abb2959f388034b6a83d95f1669fa124a064ea58e7a6861cf6639178b3fad90941ae5ab48f8e6f170d4c59463bf293a18ef8685a6c5ff0c5347fdaee","ssdeep":"192:CvDKGoiaUslN00Ejwc6SIovM6cM+7f/njSXVu4U3F4Q:2DKP05jwckoU6cM+7f/+lupN","tlshash":"e11295e057a9e3f4e104f7ec8a15e871bb5e10f9ba85c528c7f06cd6902606e8e98dc4","first_seen":"2026-05-08T21:46:29.762482Z","last_seen":"2026-05-08T21:49:46.355396Z","times_seen":3,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/wallpaper.png","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.718Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/wallpaper.png HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 01 May 2025 05:43:33 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"68130a05-6ba9a\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O748jLP07vwQMRqkIL%2BUFBX%2BdSHoyQG0lSszkDeR5AaJ1PTysy7uezoKFhaj0NwMLE9%2FS8E%2B%2BG8HJ7wDoBiPtvHuYMCoLZmAxx6GVUrLi06l%2FtYh2ic8Km42NRUTaHxI4H0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe6b8456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":440986,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"13fd4ae8e9710df0fbbea604a0fd1968","sha1":"9e2c88597867e7383d2cbc93d48223c4200e01d5","sha256":"0322f6e633cb9d772ccb078a269a82605579bba1d2ff756105dd4e7e528166e1","sha512":"1151a17f8673f1256b4dc16adc5567296a34f942c5f872ec8cd03b8ccd146a64f366e64f7131a2a54ee8ceb7d43be8ccb7a16f8751869ea373a1aec939bbb216","ssdeep":"12288:jLlm0d8TJmgaV6TX0Le0ze3GttI53PnZlQsk4WC49kf4UhZ:jBm0d8T8ATQzyvnZlQFCRX","tlshash":"739423376a227007f426ef3a9465997018af693e060e565fe541390ffc721b367f2a38","first_seen":"2025-11-02T22:34:47.199467Z","last_seen":"2026-05-08T21:49:46.344067Z","times_seen":10,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_page_pay/assets/css/pay.css?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_page_pay/assets/css/pay.css?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 23 Mar 2026 19:38:09 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69c196a1-4425\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vRUxa5eydeS2p%2BmxCZraKUmPtxv1HO%2BkwFqZ6d7%2Bcr3D1vUjA97Rh5kqAOXcgsMg9yJijw6nuiyImDpafhbI%2Ba7Rjxpp8DfxuM9MhLOboH7vgbOtgs56VMZkFBut4hnB0aY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa4b1c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17445,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"266870161cc25a720b29682ce3c51471","sha1":"f96342c8c9fb31936c561dc076a6247038034f11","sha256":"173390619c0f6d669c9d85c2c6b761e4929b27c012ca542b8ef57b9cd9d70ab0","sha512":"ef3cdebbf42f17fd4f7eaeecfa73494686e0d44370744e8edac58179b44c5cf142df3ea7f4dc4daedb07225011924a7d008a9cab5f4e6a103d0c0b6aaa38a17b","ssdeep":"384:qgxic5ucXsZa3BtCPzOOchRfVDczJIhVfGF9:qgxicgcXsZa3rc1chRNczJIbfGF9","tlshash":"627251a516756504782be6586ae6470a2338d002fb0fdd787fd1244c8fca2ed95b3bec","first_seen":"2026-05-08T21:46:29.740587Z","last_seen":"2026-05-08T21:49:46.319925Z","times_seen":3,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_color/sbp.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_color/sbp.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=FjvMQDANta4s2Rq3; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=cNdvrWjVFtg6RWNn4ZV5; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 05 May 2026 19:54:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:11 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 966\r\nddg-cache-status: HIT,HIT\r\netag: \"699ff917-93d\"\r\nage: 265887\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2365,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"01d3e9d9f42f8aeb8362ced187b173ca","sha1":"ef9fd203b6c073581df3fc90e95293ac9f3c3421","sha256":"39460cf7281adec4e8cc70f64e421e6d06149d1ff1ca8bcfb5997aa2c42c73b3","sha512":"a04b0d88e1b17d786e8c483e36d73b1ee78c0eab1b4e25a71e89200ed20b5d68df654c685685cc9a93f4b52ab6141557277139c5964bcda1da575d738ffa6eca","ssdeep":"","tlshash":"ff4162c06389c3e0da02b37a4b3b64b5256315ed51d0c458dbc02e92bed269f4ca9ad3","first_seen":"2025-11-02T22:34:47.21284Z","last_seen":"2026-05-08T21:49:46.371087Z","times_seen":10,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":87,"dns":1,"connect":24,"send":0,"wait":22,"receive":1,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_color/erip.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.111Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_color/erip.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=7YcVKJ7Pq6LpgtYD; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=P9Z3Vlwf55vKfPrGuwmr; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Wed, 06 May 2026 20:47:12 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:09 GMT\r\netag: W/\"699ff915-1482\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nage: 176344\r\ncontent-length: 1714\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":5250,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fbf5060a201013b3ad44e2434872653","sha1":"02089435430e7194374bc694fbbac0a179e88217","sha256":"58479321fb7471699e6800ad3a9fd5bc1d98179e83bb3b15dfa99faf5e16c6c2","sha512":"007bd6fccc5de590009e291bf3aa1149f0f849b26415737c4854a866075f1368473629540dffba89f79696c27f097e56f8714eb8856b7ad61f605221ce6fc1e7","ssdeep":"96:dpQta2LUb/lJ07k2UhqEyI5omRCpXieoxfljD4XAlw7/RfoVlxlJR0qJcfy4rtM6:dpQtLcCIzLNfMXZYfR0XAClgVxJ+Fr0g","tlshash":"65b188a5d26de867d52ce3fcc615f877227223efbd9182a08190bf5e25210cd2d9cad4","first_seen":"2026-05-08T21:46:29.727893Z","last_seen":"2026-05-08T21:49:46.347815Z","times_seen":3,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_dark/heleket.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_dark/heleket.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=Xe6ZCdq0RfSJSUq9; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=lsF1USDbf9q5rEnbcAdW; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 05 May 2026 19:53:53 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:15 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\netag: \"699ff91b-f9b\"\r\nage: 265943\r\ncontent-length: 1597\r\nddg-cache-status: HIT,HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3995,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81f0f304458f98300ebc7f09cbaf0b6f","sha1":"2a4d2028e8b7b9fd1d2eb9e06c4c9d7572fd927b","sha256":"74311b5fb3eccc60d522aa98f47107f50272c88b2f61183276d20c2f91a7026b","sha512":"2aabf46ae325c0371cb4b7a9a9e8afb346d31a4a9334e06ebc83b2ba7f4ca5fade1f313b5f8e37017e296c53aa74ec4e96143dcb1837e4b985a941b0c07565ab","ssdeep":"","tlshash":"da8132f577e572e8f106d7e0cb12957caa4fccf92621ca744bf86e20652584ea1818c3","first_seen":"2025-11-02T22:34:47.224192Z","last_seen":"2026-05-08T21:49:46.342544Z","times_seen":10,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_color/heleket.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_color/heleket.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=VmmtzC7yZZuwbLbZ; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=jcPJwTpMotk7hL03MVl6; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Tue, 05 May 2026 19:59:00 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:10 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nddg-cache-status: HIT,HIT\r\netag: W/\"699ff916-ea1\"\r\nage: 265636\r\ncontent-length: 1439\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":3745,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c8bd40d5d73a992ceba00b2619c6bc8","sha1":"02b0bff32e1c3e44c78f69ec1e782692e322436c","sha256":"ee79da7dca727f9b35c2daa824d0113d3f4ae17743f163bf2f70f123e5219e01","sha512":"60dd942907b2df8d8889042a94b241f0e443b20aec89f5637dc9c9eec957074ff8bf7fce8f00ce654e0d9b3abcbd895eba092cd1a869cf0d0691ed21fc5d3cad","ssdeep":"","tlshash":"54711fe477a972e8b106e7e0d722a57cea4bccf92721ce740bf85e20756544ea1918c3","first_seen":"2025-11-02T22:34:47.189146Z","last_seen":"2026-05-08T21:49:46.343272Z","times_seen":10,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru/app/modules/module_block_main_chat/assets/js/chat.js?v=1778276775","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET /app/modules/module_block_main_chat/assets/js/chat.js?v=1778276775 HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=4eJvMd86GtQ12hvb; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=LzizUYhMuCmaKJPVoSNW; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 19 Mar 2026 13:15:07 GMT\r\netag: W/\"69bbf6db-40fb\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 0\r\nddg-cache-status: MISS,MISS\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]}],"data":{"size":16635,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (366)","md5":"d45cc3c39553a50bb34e119b3feb474d","sha1":"66f9336c5ec1c4fb1a050b1ba10723b45e34e550","sha256":"8e2ee1db76a9d452ec015542149836b9afe667a3b4d0eab88061c1cd32950817","sha512":"7a7720eea88e09bce4adc1269b519cc9d75e2caf830d4f136b4519681893ac0c70790a5c77f65a7e6a657faa6ff9fa7ebf5f53c59660bbc20d1064945eb46fa1","ssdeep":"192:5oW3XtMGF9gxaCvcfpkuKjCbGgDicDH99d1SMpyRkb9mq5cybWuioLLq/zgGJypt:5oW3dquBxSJJ0NhcTQ","tlshash":"f7722e6da6b7002442bba07f6b97a204363412472109ed39791c9ef85fd46f961e2fdc","first_seen":"2026-05-08T21:46:29.776513Z","last_seen":"2026-05-08T21:49:46.308915Z","times_seen":3,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":15,"dns":1,"connect":18,"send":54,"wait":46,"receive":-1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/js/vendors/jquery/jquery-ui.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/js/vendors/jquery/jquery-ui.min.js HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 01 May 2025 06:08:38 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"68130fe6-3d79c\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9vXv%2BWF4hD%2BQ5BOYLKBXyCi7BQ4GzV0VPbeWy33zFfSQRLu8aQ7xocYMdlfhYInkBG344AVaMpR7T7dnsihc5ApYuff2Nwo5%2FpWhI7p3U6OywC0b2iGBbRLEz3BzuL1aCBE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa8b2956ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":251804,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64403)","md5":"aab699fd9956e6944ec8c3688827ef42","sha1":"952aa4eda64d6d12487967bcb60d5438c0170269","sha256":"965ef84e73b91d89d62507740c0453594063fa126ad23d1a1b58bf22f5058fc2","sha512":"b5c71e42997ab26218c44ed2a24d58998a4bdfda1ed4282032372c7a33ce370894e367f1051150e088f8df9f5a9c085c88e1acb0a1dceb9dfa3e355c4e5d41bf","ssdeep":"3072:JKLTWRdEAyrhBdDv28FFKU99EQi7tfFK4i6tmVEUJCNGL:uEaAMNFKm7","tlshash":"7934e84d72403a3295dbd265103b2a0ba237965daa01805cb53ccedf9e7ce4471bbfb9","first_seen":"2025-04-19T09:59:05.012671Z","last_seen":"2026-05-08T21:49:46.34662Z","times_seen":10,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/inter/Inter-Medium.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/inter/Inter-Medium.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 106108\r\nlast-modified: Thu, 19 Feb 2026 06:35:56 GMT\r\npriority: u=4,i=?0\r\netag: \"6996af4c-19e7c\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lYuHfgPclqjQY3qlKTfL94GLn7CYS%2BsD5grskYmct9fUiu%2FrV%2FCgn18H0dqG91pDiSt%2FGqlAWXNLO5ddM8t6wWfr7OQ7MbWBb1qG7HK3xo0Y5%2FlT03QkQ5BxBlUcwBSA5UU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7ffcbab56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 106108, version 1.0","md5":"eea97ded621cd8a18067c7243b19ceea","sha1":"d88b0b7a77cbb6ea033f692c05d5855a7be7d0ea","sha256":"d6e2531976fa618cede5863027366e4011760b0610d7136a8f7d7ed149c26348","sha512":"3ae400bb27c8db14d060ff83506d70b90de06612bf40ede0c7fbe1d4b302fabeeecee8d85c886b37b7aca06d4b7daeae473c8b542faa98083036de7fd3506c72","ssdeep":"3072:goH303tZuta/VoRorlduZwOLYGhLDSCWTXUP:gcAnsCVoRGlGwwPxx","tlshash":"8fa3123cb10d4bb3cdd99b3aba1735b5a0891a04774f24f6c14ca73662ad9e0b40bd5e","first_seen":"2023-04-10T16:29:48Z","last_seen":"2026-05-13T03:19:42.838708Z","times_seen":378,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/css/shift-away.css","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/css/shift-away.css HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZkyBsZbBbOYwcidwImtUXRu0G1rAGO%2F85vGKPvmJylajshUpiSlIV2vNJ40E3EH2SzyHis8WjsxI%2B8Kyc17eVRZJQkRumMhQOahM0XI9Y2fqQ0Yq%2FPEVSnEKFfnojXoIMSo%3D\"}]}\r\nlast-modified: Thu, 01 May 2025 05:44:36 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68130a44-1ef\"\r\ncf-ray: 9f8ba7fa4b1a56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":495,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (495), with no line terminators","md5":"8e572cc507dcc80255dbcbe78ccb2c01","sha1":"d774da397bbfdd1d9a216f9bee3c45d94cc3e21e","sha256":"d5b69b157b09be191a6863a9d35736876fe343479a8ce4088c0f61a422d9309b","sha512":"edb815cdbe90723bad1309a6c0c652107b3a98f125be4d224c1ff2c303aa19c84bb8f6a4caeaf36dba8d6e2c3c7a5b14ac8c24fa55644cf1c4db771b2e05b697","ssdeep":"","tlshash":"16f082873c0c0658614f8b039acd6e3c113979b5240a5cbc733b008d99b0a8573df163","first_seen":"2023-07-21T22:20:55Z","last_seen":"2026-05-10T06:34:23.776233Z","times_seen":187,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/templates/neo/assets/css/style.css?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/templates/neo/assets/css/style.css?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Feb 2026 21:04:16 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"69a0b550-13873\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FQo8T6BkRy1tRfPJwNVb6iLFdUzl0n10Cimt%2BVSXwR2jehW85CQoGDMkr9ce8yEJ3dyCKnZv7OL77NV2GR0FkvVv4tRYgDmLe7qwAyUqoTE6N%2BcbZulC4DcLOMg83YFb1k4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa5b1f56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79987,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a5147e62de709df58fd8e2e98c7f3201","sha1":"3ec3323744c03ae2a741d165b7ea70579d8c5349","sha256":"925c3883a4799049df9dca46196e93a49c73e5bbe2277e2a03ad748104ecb34b","sha512":"e6ad35f3ccea2636f5c7d007a2a884ae2da38c57035c12b6309e39c0574c30de1f8008c02074aa73e2c31f0b1a1b06c1f804ee46cbf800d4cb89e2a198daa582","ssdeep":"1536:4gju3tJ3SeRvzeNxLb6b5AcZiEcz2ME/okS0CVTbnfSC69c0SfxMag2d3Y2jvGTy:4PRmxLb6b5AcZiE22HTL6ptFdSlo","tlshash":"8e73419526761154782be6682feb574a333ad043da0fce687bd1211c4fc23fd65a2bc8","first_seen":"2026-05-08T21:46:29.742877Z","last_seen":"2026-05-08T21:49:46.370599Z","times_seen":3,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_servers/assets/css/1.css?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.088Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_block_main_servers/assets/css/1.css?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 20 Feb 2026 02:50:59 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: W/\"6997cc13-50ac\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HU8h61YLA7vD2m2Y9tPJcrOZTgWJGlcG5ooXAKlAjjiWZAbFkBIZFDeJ%2BD%2Byn7qv2sVQsKcEP5L%2FosJyJcdl6j6zOdDVkEQrU43ixW4xPFApIsdXZEkl3Vc%2BAyYuy3DuL%2FA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa5b2056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20652,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"d67b614483b3294226d40f3ebc505e6e","sha1":"3c207d9727db02c5face1f3c13e75091fc1f27bc","sha256":"3b7726524f2589a1a2425a190b59c85cfeb7aabcc79fcc4e7b3526e6cb27b340","sha512":"b1f138abfc893056177fc4d45ea719f6577ae9af8b9ad774ba16fc8fec2e0a3561ee934f35d24f0a8d95596bf9a483cf34d0442d9e33a5961592d8fa6a3fa29d","ssdeep":"384:OFSL5FoFZFoFTcFXBjxFrBe01SXF0BpFUZLHFFF05F3EFUFXgzf:OFSL5FoFZFoFTcFXBjxFrBe01S5ZLHFF","tlshash":"e69285c69a79110e7d2be1542ee75b4a233cd043960fc968b7d0305d5fca2eea5637c8","first_seen":"2026-05-08T21:46:29.704559Z","last_seen":"2026-05-08T21:49:46.347236Z","times_seen":3,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_page_reports/assets/js/1_always.js?1778276775","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_page_reports/assets/js/1_always.js?1778276775 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Thu, 26 Feb 2026 07:53:57 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"699ffc15-702\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2F2e2v7QmClIE1PBHYwYumHyd8Bcv%2FRMV32VqYcAQPP%2BawCDNKNirkN62F5HExNGdRzvQNSpNEt9yu2J2cEmuVaF%2FU50ytubWHBhaH8DI3w%2FpiiGD6m4ofpP%2FcVv95xYu4I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fa5b2456ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1794,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"c45026d1c4c3ed712c263a29fd76fd93","sha1":"2486def96a0bf62b08b1d36f4fcee17207cef98b","sha256":"a2d87efc917f3828ff1d8f9aa39b9f692105aadb1871bd58813b0be5e01a1851","sha512":"dbeaabe89f6088ecc1f4c57de3c07f5b59c715d86c3fc8c6ac7e182decc4cfa0b900967ce2b17dba6cd10d132f98bab2c29411daa4fa2c0eee2fcf776132fb8e","ssdeep":"","tlshash":"9431998c6e9c65fd1a6370ed0d2f20882992b40726095c247a4c53c07f69e7c6e75928","first_seen":"2025-04-19T09:59:04.981228Z","last_seen":"2026-05-08T21:49:46.316403Z","times_seen":5,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sun, 10 May 2026 21:46:16 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PIZyldhLGW0epWWfrrYZPNFMaBuQMTrllF4IuHjp4Ef30dcFg2jm%2F7pa1uHsLKGS2BmJ3duNkfU2ZtqgSm9JHbxc14dwcn1ZvrygIj0PMwZQjAz6b9Pc4S7yaKXC0L5D4hE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncf-ray: 9f8ba7fa7b2756ba-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-05-13T19:27:30.929521Z","times_seen":336756,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Black.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.728Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Black.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 92456\r\nlast-modified: Thu, 01 May 2025 06:08:33 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe1-16928\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F9%2BpjyXqhchyoXVnh2lzdKJRAdWOhMGgd7y7uFdasiMNyQ2sPZC02nDkIGSVHg5yzFLDpY0UqQVpap%2FWO8G2%2BCaspmsI3L8ypk4PzZ64prQlnAXlGARS%2B7dCWM9SFzqngg8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe7b8c56ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":92456,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 92456, version 1.0","md5":"051e4d91dc88d10f19090107193629b8","sha1":"831e631c08be521c262d0dddb9557a9b84aaaaa1","sha256":"7c60d03415a0dafaba510d4fe6a06ff74a049450351dc9ed1a305d0f9bff90e3","sha512":"c091fa57da13add9a4b6fee31495163c4736ac9fc5d071389a3d348ffac855f41f1e1e964279c15b7d5dec95eb51cff2a1501fcfbf795b1cf18a66da3d3c73ff","ssdeep":"1536:vMLzQ7Yva4VjQqgmSOa+KhGma0B3z5ud2lYNlV0oqYUFTuz2QPQ9nbGFd2JXYUnY:vIzh5Vj3K+Pma6kLNPuKTQ9bEd2JIUAz","tlshash":"0793127092d5a7331738be896d31bba2384af507cc25778f7e7dc89835d9d512200baa","first_seen":"2023-04-12T00:10:38Z","last_seen":"2026-05-10T01:09:36.018004Z","times_seen":57,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_servers/assets/img/fun.png","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.736Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_block_main_servers/assets/img/fun.png HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Jun 2025 08:48:23 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"684d3757-1ef69\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjBojNMsqc2BxXHRkdxkPpu1fGmZrxbnxZsObQcF9ZwIbSwwUOchUDxlSSW2blsI8jl3anrsH27fcovdioi%2BZs1%2FIxf3KxToClD2RC0D8kZsECq7%2Fu6UYBrvnaAVZmI7KB4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe8b9256ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126825,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1080 x 1011, 8-bit colormap, non-interlaced","md5":"a08efd6b03e280733be7e86500226449","sha1":"b73fd27e6d91bd33623e795c6629f2002c9c3ab2","sha256":"2f3c101151ad62a1ff5df670040d7ffd2ce23dc3b027788f3ffcc8c1bf736516","sha512":"c8f797679d023654be77ab518227c387357506b55ed017365d8e944e359c6bf92967f49acce517579591f7bf1ec4830a00cefc1d6f666b558f2f5bde7916ef2b","ssdeep":"3072:FI6bQPBLiQNzES1mqLo5GKUnmEmdMBHcIbTY:FIc0BeQZh1haqBH0","tlshash":"e1c31229e2be4788c6a7e1018cb1069ad57b1dc48a4f5d221394ff47937dea81f658cc","first_seen":"2025-11-02T22:34:47.22487Z","last_seen":"2026-05-08T21:49:46.312828Z","times_seen":10,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/app/modules/module_block_main_servers/assets/img/maniac.png","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /app/modules/module_block_main_servers/assets/img/maniac.png HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 14 Jun 2025 08:48:23 GMT\r\nvary: accept-encoding\r\npriority: u=4,i=?0\r\netag: W/\"684d3757-55079\"\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s62RqVpu2SCCCrOWhHHxITQ6R%2FsNqAzH5IlNJ4m1IfG8a0UdYjU%2ByMJn3s7NVaTelIdL8D9HYpYMEMrjP66wvETbWZW%2BAAOel86ecG0X1wxnU7PR5ia6gPifO8r5EzfVq7M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe8b9156ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":348281,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2410 x 1396, 8-bit colormap, non-interlaced","md5":"b80347b63ff28f20d9adc60f18d00187","sha1":"17e66f2c50394b76661917a0e25a3e4ec47b51c1","sha256":"b9f2cccfa36b6a5a89a4c64883a85a25b5fcff405c265b1e0a7f154a4eba69cd","sha512":"fa2baadda841b8e3ff1bec8d831657db36bb1ac423ce0075cc4b6ae65bd79c8c9ad85dcb64e0e5426aa34fdacdacdb423b5acfa16ed176f0d948969d56e036bb","ssdeep":"6144:C2bAJxfcGwxTpXhLWbPEkYs87DA37Pe5kOUsA+8VK/gYP9EwrKqXIgetqSgK9sW5:CQAJxfc9x1XhoBr427PSkOUsA+tP9Ewo","tlshash":"4c74234c00a164a9ead688779ce2f76e8216342713c68f6eef531dd6dc70abc64405bf","first_seen":"2025-11-02T22:34:47.206503Z","last_seen":"2026-05-08T21:49:46.31216Z","times_seen":10,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru/reports/","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"POST /reports/ HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/javascript, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nContent-Length: 18\r\nOrigin: https://onetake-cs2.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"reload_admins=true"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=H0nym4ZGhEbzgWWP; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=9PZYqQpMB97YTD54Yyhk; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\nPHPSESSID=547f81f98b705c13b5c76866455c7b5a; path=/\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nx-powered-by: PHP/7.4.33\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":4,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"37a6259cc0c1dae299a7866489dff0bd","sha1":"2be88ca4242c76e8253ac62474851065032d6833","sha256":"74234e98afe7498fb5daf1f36ac2d78acc339464f950703b8c019892f982b90b","sha512":"04f8ff2682604862e405bf88de102ed7710ac45c1205957625e4ee3e5f5a2241e453614acc451345b91bafc88f38804019c7492444595674e94e8cf4be53817f","ssdeep":"","tlshash":"b9300000000000000000000000000000000300000000000000000000000c0000000000","first_seen":"2023-03-07T01:02:14Z","last_seen":"2026-05-13T19:22:34.037822Z","times_seen":240407,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"avatars.steamstatic.com/247dfaaaa6d730f6dea8057c98b5fa68a10fec44_full.jpg","fqdn":"avatars.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"199.232.215.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:17.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"avatars.steamstatic.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Apr 2026 14:28:09 GMT","end":"Thu, 23 Jul 2026 14:28:08 GMT"},"fingerprint":{"sha1":"90:CE:4B:02:05:A7:51:24:0E:97:09:CD:3C:58:B6:28:2C:67:82:46","sha256":"A6:4A:C3:DE:02:39:5E:B4:A4:AD:CB:EF:31:E8:7B:D2:E5:4F:9B:05:4A:19:8D:25:52:ED:26:E6:9D:EE:DA:F8"}}},"request":{"raw":"GET /247dfaaaa6d730f6dea8057c98b5fa68a10fec44_full.jpg HTTP/1.1\r\nHost: avatars.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: image/jpeg\r\ncontent-md5: Bbtv1RHR98DzzGhdNRdvEw==\r\nlast-modified: Mon, 19 Jan 2026 23:08:51 GMT\r\netag: \"0x8DE57AFB5D1DACD\"\r\nx-ms-access-tier: Hot\r\nx-ms-access-tier-inferred: true\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Fri, 08 May 2026 21:46:17 GMT\r\nvia: 1.1 varnish\r\nage: 127489\r\nx-served-by: cache-hel1410031-HEL\r\nx-cache: MISS, HIT\r\nx-cache-hits: 1\r\nx-timer: S1778276777.193957,VS0,VE1\r\ncontent-length: 11745\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":11745,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"05bb6fd511d1f7c0f3cc685d35176f13","sha1":"2236ba9fec049b16707f82674c14473c4e1bdc35","sha256":"cdeff3953ea34609f5c766c14cc967cfc39b789efb9acae8fb599019a94902ac","sha512":"e998c6659c36b32c899c32149b9f71d9c9a0324441f91ee7a5624f78fa95e6265fe6526b576d456beed2532ee0b9c905448577ecdb62e4383e36ef1a220087a3","ssdeep":"192:TeRmpoWWYy8pq+WETDYYO2Fp+Fg/kGEfVJP6qFZAq7ysb14220K6auow9T:KmpQ8prW4vFpB/kGEfvP6qFWRsbct65V","tlshash":"0132af0b360599c0b439e1f94cd48f1152c72b98ff114cbbc9964e96a10f39eaf1b92c","first_seen":"2026-05-08T21:46:29.782043Z","last_seen":"2026-05-08T21:49:46.351549Z","times_seen":3,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":135,"dns":0,"connect":29,"send":0,"wait":16,"receive":4,"ssl":109},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.ru//app/modules/module_page_pay/assets/gateways_dark/incard.svg","fqdn":"onetake-cs2.ru","domain":"onetake-cs2.ru","tld":"ru"},"ip":{"addr":"185.178.208.150","port":443,"asn":57724,"as":"Ddos-guard Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 15:18:12 GMT","end":"Sun, 31 May 2026 15:18:11 GMT"},"fingerprint":{"sha1":"F3:10:51:C5:0D:08:1C:AD:0F:7F:5E:DF:5A:E5:B3:1C:9D:6C:7A:33","sha256":"4A:77:65:11:DD:3F:6E:59:42:2D:F8:86:6C:3F:63:CA:E9:62:A2:D4:97:ED:46:CE:8E:11:AB:2D:1C:42:9D:B3"}}},"request":{"raw":"GET //app/modules/module_page_pay/assets/gateways_dark/incard.svg HTTP/1.1\r\nHost: onetake-cs2.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: ddos-guard\r\nset-cookie: __ddg8_=t5uezZpNc9rah1RN; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg10_=1778276776; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg9_=91.90.42.154; Domain=.onetake-cs2.ru; Path=/; Expires=Fri, 08-May-2026 22:06:16 GMT\n__ddg1_=oyi9zGLNF92LaNPDt1vV; Domain=.onetake-cs2.ru; HttpOnly; Path=/; Expires=Sat, 08-May-2027 21:46:16 GMT\r\ncontent-security-policy: upgrade-insecure-requests;\r\ndate: Thu, 07 May 2026 03:16:16 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 26 Feb 2026 07:41:15 GMT\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\ncontent-length: 26911\r\nddg-cache-status: HIT,HIT\r\netag: \"699ff91b-11ad7\"\r\nage: 153000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"DDoS-Guard","description":"DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection, content delivery network services, and web hosting services.","website":"https://ddos-guard.net","common_platform_enumeration":"","icon":"DDoS-Guard.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":72407,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5a16d6dcc207fd8ed54d9fe526e24fa","sha1":"0e766da27c33a05af5365d6b39f048d40027d3d1","sha256":"f692cb3ec049bba2a2831298405d1bd68d40c3c8202baf18aeaf493f6a0cd7ae","sha512":"671ec2e5c16884616df2bf041fe5e7910fed3e225562751b3c8682a1397aedc15c740f70ddce385e79e36dd8a4c9f940a3de3e9249c9af744c1313b17036891d","ssdeep":"768:56Ai5r9Ac08d5jT2KSgB16KgVVvAlLTrWOyN+xjRQQcN4DN0padcLMU5JlnK1cuW:MAch2angIY+6eNDvUPmoHePy","tlshash":"486388a9b3daf3e0e009f7f057259575773b25fb2d32ca6c4bfa2da4ea1101d4199880","first_seen":"2026-05-08T21:46:29.705849Z","last_seen":"2026-05-08T21:49:46.348341Z","times_seen":3,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"onetake-cs2.com/storage/assets/fonts/vendors/sfpro/SFProDisplay-Bold.woff2","fqdn":"onetake-cs2.com","domain":"onetake-cs2.com","tld":"com"},"ip":{"addr":"104.21.44.253","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://onetake-cs2.com/","date":"2026-05-08T21:46:16.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"onetake-cs2.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Apr 2026 08:45:13 GMT","end":"Mon, 27 Jul 2026 09:43:41 GMT"},"fingerprint":{"sha1":"AF:2D:0B:7C:69:BF:15:CA:23:2D:0D:15:01:9E:5D:3C:46:EE:8D:F9","sha256":"1A:CD:06:0B:02:48:E3:D7:2F:6C:14:86:4C:EE:8E:AE:FE:CC:FB:25:AF:6E:B9:17:C1:28:C2:F8:1B:3F:0E:40"}}},"request":{"raw":"GET /storage/assets/fonts/vendors/sfpro/SFProDisplay-Bold.woff2 HTTP/1.1\r\nHost: onetake-cs2.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://onetake-cs2.com/storage/assets/css/style.css?1778276775\r\nCookie: PHPSESSID=c99d0b2befdf6a5c17f687f0f39ea061\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 08 May 2026 21:46:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 98712\r\nlast-modified: Thu, 01 May 2025 06:08:35 GMT\r\npriority: u=4,i=?0\r\netag: \"68130fe3-18198\"\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\nage: 25\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H03nCPZ0JeFzu1ZTEVlAJ5EyX1HhM1ca%2BGDPO6BOQuPqQG4xstNE%2BGsk3avUKFu%2BZnKholEN7tVS8PRCtcF3EVLUqWumzvabd99oVy2%2BXhiCTN08Cay0p62gdi3NP5kMqaI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f8ba7fe6b8756ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98712,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 98712, version 1.0","md5":"33802914271ef3d489d31399a5c8c3af","sha1":"cfb1f5ce8dff071fb09c9545a4b72b9465da3fbe","sha256":"32b6db04338d853de4148e775afcacadfb2d0bd3e8f10192916f6688f34c6005","sha512":"86b187b9fc8aa6a0321f27f1ab1799827eea5ac418ba306fc507b1a0320b18178767b098c217b918153a19172b9b8c05c8516dc545dceda6da40c96a42f8956f","ssdeep":"3072:NIv7wwT2fN4GzDRJiVMSjqlmQDbrBfxk/eLwxZ+:m7w8Q4GzL/DPBJk8mA","tlshash":"f5a3120c61d22dd3b89e942fa265f6817a1380cc1e6bf25c0b9fd4c1b0a07924ff0a97","first_seen":"2023-04-11T09:18:30Z","last_seen":"2026-05-10T08:12:10.960671Z","times_seen":468,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}