{"report_id":"4dd89597-234a-4e01-ad3d-9d441428644f","version":6,"status":"done","tags":[],"date":"2026-03-05T20:16:56Z","url":{"schema":"https","addr":"cases-batle.ru","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":0,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"cases-batle.ru/","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"title":"CASE BATTLE - Официальная проверенная Платформа КЕЙС БАТЛ для Опенкейсов в CS2, работаем с 2018 Года.","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"cases-batle.ru","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":0,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-09T20:16:56Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"cases-batle.ru","ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"domain_registered":"2025-04-05","domain_rank":0,"first_seen":"2026-03-05T20:16:57.834681Z","last_seen":"2026-03-05T20:16:57.834681Z","alert_count":476,"request_count":119,"received_data":2110715,"sent_data":57485,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-03-01T23:26:21.00081Z","alert_count":0,"request_count":2,"received_data":41984,"sent_data":851,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-01T22:15:00.771016Z","alert_count":0,"request_count":10,"received_data":369724,"sent_data":5562,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mc.yandex.ru","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":16498,"first_seen":"2012-05-21T09:38:30Z","last_seen":"2026-02-27T12:40:38.853626Z","alert_count":0,"request_count":1,"received_data":260228,"sent_data":414,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mc.yandex.com","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":45494,"first_seen":"2014-03-01T13:57:52Z","last_seen":"2026-03-05T04:03:09.733095Z","alert_count":0,"request_count":3,"received_data":5877,"sent_data":3539,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"oldwwweeeewee.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-03-29","domain_rank":0,"first_seen":"2025-06-17T11:08:49.74784Z","last_seen":"2025-12-31T19:30:19.108965Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":550,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":23862,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cases-batle.ru/","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1a3552d02674a0ae529f441271d1151","sha1":"1badc239cbd69fea443928d602e76519a2b48b74","sha256":"b1387196f3f163b5ebf7e1247c9133d50a3de824223f5ab865edfc2e625f334f","sha512":"4a0f7b745023f0c306687e2bf60bf8534276def61d41de875d6374307cd66732dd61304dbfc06052a1a54f6b7170d52cf4eaa6af5aa90113fc06068eaa7b757a","ssdeep":"","tlshash":"40f005953cec44248377116527fba148743965292c0afd15f54c84412f5deac18bb54c","size":538,"data":"","first_seen":"2025-09-24T06:54:00.365622Z","last_seen":"2026-03-05T20:25:51.028103Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-07-26T06:19:28.116405Z","times_seen":21770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/js/common.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bc52296e6d4e5eead9711eff2ccce42","sha1":"e788c13fd41ed1743f76141ba91418daa1089525","sha256":"302f3a1f2c87877874c0ba6378e0ee7291d924528f9acc645451ca986e6123fe","sha512":"e2c56ade3c344fb7c0da370a4e6e50b6223bc434d6a5587b9f74bb62f8e4c52bc27a842614e5265981be8746f94629e9f60a25243658ce361f6eb6c461c55d6d","ssdeep":"1536:+NkeeewAzJ9mEriwnC4lyPc/fqnW19lp2DT:m3kaqnW14v","tlshash":"a2b3604b6ae23434a627b17a8e2fd5093a35500f1e8afd043d4c92954f1c93c66f9fe9","size":112763,"data":"","first_seen":"2025-09-24T06:54:00.354154Z","last_seen":"2026-07-12T14:30:59.900998Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/api-88f676dd.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"6589d07dbd72d0ff535e9687f43b995b","sha1":"04f5b47e3e822cee8a316a67cf232affff9ae40c","sha256":"47fecaa248668cf50dfa9ab19f2e44d364d7e6aca5a491dcd61b27772603fff5","sha512":"e014e166e2935e546f251e51b4f68b3b69594726f720b9bdc130bd0b9b6d140c20bef106e55fe180c5a6a347ea25acee7a0665d7a633ec4a26b6e208ad93ee6a","ssdeep":"768:CqpuEERfGEuqJz+z2AFmxq//DzAWZro0KIWdcVZYeHWVv3hDWyyHo:CsrY5kcqDzzAdclWV/CHo","tlshash":"2a434e8669e320304223b0bc4f4fd91ab224950f6c89ed583e5c52a65f5d53da7f2fe8","size":58588,"data":"","first_seen":"2025-09-24T06:54:00.24023Z","last_seen":"2026-07-12T14:30:59.817605Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/isbot.min.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"936628f48ed2e266a67d09a7ca68b234","sha1":"76f3a2deda0106e8131080fab43679a5beebc4de","sha256":"6faa3faf7c21646a25508cf79521e317246b428433641ad6faeff27c1c8511bb","sha512":"d7822d3955afb58d6e50d8ca669e9ff8559715954279d0891d4bc80d1ca3130d5376a48102b515b110e9fca478f99df887459f78b184d4e33be2fac82d6cce3a","ssdeep":"","tlshash":"e3511b7f25d8e405325e2c4d22b792867b7e9610c046f014fa74c95d70588efc267f47","size":2845,"data":"","first_seen":"2025-09-24T06:54:00.330155Z","last_seen":"2026-07-12T14:30:59.834446Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/SVG-19e7f4d4.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"0fa1f568daad1008a4fd3e9ad48c1708","sha1":"757d3ed4a1e66c920af51cc11f5060c6116436b5","sha256":"469470f3ee516b88125f2b540f1b605dd980a2abe227e117a01cda008e93650a","sha512":"31a964591009fbebe2a4b6ab9ffab972a01e8093e76f83f003904d013c62c2ae1bd24e0850164f1da3abfcf7c067e814d551337ce5eb20c06364518c60f8d589","ssdeep":"","tlshash":"e921325ee4b773be986960846165b10053034827db709eb181b558b224fc34863bfedd","size":1270,"data":"","first_seen":"2024-12-02T21:43:54.614338Z","last_seen":"2026-07-12T14:30:59.778917Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/js/api-QQNirg0a.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"bcf5a31b14b7c65967b761e945019b98","sha1":"35c1fe0a83672582102e3790e228ee154bc60517","sha256":"1983b1dd55ad52bb975e8ea75027ad7d6f928e32d983a4843d2f0cbed6bdd45c","sha512":"ab43a834abb81110311f41b3968c60eabf6b19e1d4cd3e078eae6ca1e1ac86f03e2816ca024d49d4dd34d7e685cb70620745ed9000fdd94024278db2b3b7f084","ssdeep":"768:ll+l9eGpBj5OfzG74TLVhlVeGK0h/+miKzAQCHk07Isdiy++gH+hdJAHWQcrH:ck4LOdIx0jzWTdid+hTrH","tlshash":"2d434e8669e320355223b0bc4e4fd91ab224960f2d88fd583e8c56965f0d53da7f1fe8","size":58994,"data":"","first_seen":"2025-09-24T06:54:00.254481Z","last_seen":"2026-07-12T14:30:59.776287Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/funds-form.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3c6779a850fdde67b7cf20730df6a70","sha1":"d73963c84716ff7ce4da55c4459c5c201413d817","sha256":"41f6e7c63eda5710d4ef9dc429eb210d2edaabfdaa3ee09aac0b13ef75338550","sha512":"27d026d1d7c68d76a293701cb41d1b5fff9cfe00b3cd15283062372db95808f7ece191290138f899d414a7a7a399f9e772284eb707ff153db4655717f26dec86","ssdeep":"768:yhV0lS9sZ8ZC4q7YdKC8Mg+Fh5pAS9901W//gHVUtrNr7G7VbFpOa:awMkHUt/B/01Siatp7gVRIa","tlshash":"4443b41622f62435b123b0395f5fd805be26609f2daafe053c5c02986f2c53c97b5f8a","size":58649,"data":"","first_seen":"2025-09-24T06:54:00.220896Z","last_seen":"2026-07-12T14:30:59.811783Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/hystmodal-a1c71d15.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ab0bfe3916eaed5741fded42a08e6bdf","sha1":"832cab9450c4f225a51d9c9679aaf9cdf42b81c1","sha256":"8b3583123535720a0f4aecea0677e01daba701ff08e1a34c4d69d04e4447d45e","sha512":"4152c9560706b3248564b0e047d44ba4e534bc02904908087bf8ee27a22adb19c743685446588e0548c5dff2c61107491020ee3e93eccc3c900ef8289bfabcc5","ssdeep":"96:G+rjuSlXQBaMHFsHxaINeih7QkEzF6mnEsqsFM:G+rjJUaesRnNeih7QkqF6mEkFM","tlshash":"fcb1542ab23858ba04ff8957a2a54b53f32118947507041d783dddce5a4fd877075bf8","size":5192,"data":"","first_seen":"2024-12-02T21:43:54.626428Z","last_seen":"2026-07-12T14:30:59.753059Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/index-05811f69.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"c12ddc3420ea42df410403e3b4dd4c21","sha1":"da738fb6b27e05a214f4862ed88cbef1dc6a7279","sha256":"ccdecf89e091ca877b5b743a3dc836668a688be7ca6d3e19e53e9bad7253b643","sha512":"00eec998097e20c7c09388595ab9d2aa7d605ff02229bbb2a77f758acc45a3367fb06213f05a7df04d5b804926fc8ccfe16fc99aa5f95b26b0ab512c23f70f60","ssdeep":"","tlshash":"05e05c5aa660a0ef460a1cd1c15f354989755c1a3c4adc909408f117593b7fa51d991f","size":434,"data":"","first_seen":"2024-12-02T21:43:54.429532Z","last_seen":"2026-07-12T14:30:59.82455Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/js/homepage.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5de04fb560031c8610cd3886b2f35e0d","sha1":"18a573f18fb61dab33b7a8aca3f8027ef07ed98d","sha256":"7dcda01647ea29c634ca72577c068d5d306d0726fa35c6791586375acd8714d3","sha512":"8c84b9a5fc270d32e20c7663d3d06f853b6d844fe9f85e86886d2311d3af5b556abd5c2435525399499614701b64dc71b5bbd8a2c1d03c5468a57655412eacac","ssdeep":"96:yeslRZ/0GRbj4n2GEg/jg/Igh5p2r1X3QXO008w+/nvgIAI2DO0mJEUUjr:yesGrD/jwPuQXDXw+/nvgIAIemJg","tlshash":"e59121857191f86d29ed9365b2a417e33232b0ac7544852cb43cede69c0ac45b2ff6f1","size":4567,"data":"","first_seen":"2024-12-02T21:43:54.630177Z","last_seen":"2026-07-12T14:30:59.738025Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/index-ba6f7af1.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"ead5b126d2af3da5885f478bb7af0ba8","sha1":"1132097a1055feac2aef2103dcce5b12de928571","sha256":"1f148469472d047bca7376ad2475606b41d4b524b4b3767cf7bc6b760c40700e","sha512":"9fd6c9db8034bad4040048733f1a013d28ca0515802cf40235fc16166fe4d2d3b771f0a6faa48b27496aea0db3d6804315500447df1f6f79797b01a8a5da8198","ssdeep":"384:4fMK/QCtiXbJJMcP4ss3dwvxzx1j+zFuEMbWCtdbo+OYctS06ECQa:4fMKvQXjMa7s3Wvxz+zFuEUWCtlo+OXW","tlshash":"956285993280b07653ab01b690af455af3347454340b84a0d57cbcdb3e726ae47ebf6c","size":15035,"data":"","first_seen":"2024-12-02T21:43:54.597652Z","last_seen":"2026-07-12T14:30:59.979264Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b57b187d20647664df03426ce2cc2699","sha1":"1014dfd37129817986e56fdbed9b1f83d8850c8b","sha256":"1b8655dc52b2885f5dd25fee91da7d0cf91eedc0b81ea4c51874d4f798b7e91e","sha512":"bf2ad5f9e8c9f07b7c55282e0ccc4548041381b329484b5f576fe4ec403a3a88e3c1e6c3c4016e7b9508b3d4d933cb5454e4e8ccbad65682bf3acf36b275bd16","ssdeep":"3072:+sLiAOHjhejjpaAaYnasRGappto2s8xr5Lao/LSL1ZTsNXhF78rso8/zvNN/k/3c:+iajhejjpaAaYasfpFvSLN1iHovS7NaQ","tlshash":"dc74b25127d0a84813a78f77736bb4e6f85e096f3c544c9bc200fda0a6a562afef1531","size":367103,"data":"","first_seen":"2026-03-05T20:17:01.925237Z","last_seen":"2026-03-05T20:17:01.925237Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/sendRequest.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"efb6341f834fc22edc2f2e0c1584c4ab","sha1":"0d6a14e0fc9e4c090791d7828ffd17e4852dacc4","sha256":"22776cc5cec9ac6f9ed58b4ab5dd1a868db717107ada82a9bea067b07ad3e8e9","sha512":"dd0df4d33e6fa6bd2289a297fe9ab4097f98056484f78b4da6eaf84f2c77389e06f5242f58db3b709c9bc49074d48ae2622102986a4d1c12a0145cd7d75af18f","ssdeep":"","tlshash":"b0f0dc87a8f3120217777108ca2b081ab62b402bad26dc747b2c83142fcc56d82713c8","size":524,"data":"","first_seen":"2025-09-24T06:54:00.307844Z","last_seen":"2026-07-12T14:30:59.884376Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/live-drops.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e85de30e4ebcb326bf4e68cb092ccb9","sha1":"3b333ab453a196ca985f41b893bccce3bde01f55","sha256":"6e1e7283987780d62140e877ff5faf2dce19e9a10049b7d377c0a43cf041be18","sha512":"e6791689d56b15e6eb347faa30b95b33297a61bcf18aacd7d0abe0b7ac8e1b4c3d096638a5fd4c1ce13f3efeab1f420e811c516012cc4ef0b42b8c6b83ec40bf","ssdeep":"96:odh5tAv3w01/u0eHL9KTcYe4ySXxN10NEkGc1KtPJ9TGhFx6:ob5tAvX1/peHL9q9hNyE+UtPzE6","tlshash":"fa02332862f3013701e760ae1fa792193ae071037256ce597f7c47819fd6e55e8f2ae8","size":8713,"data":"","first_seen":"2025-09-24T06:54:00.318209Z","last_seen":"2026-03-05T20:25:50.959942Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/utils-baec67c9.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"e4b86f03ee973aace0b726cbe80d0afc","sha1":"6d81fb437f8c556b69486093badf374f480dad2d","sha256":"57284eda86c7eb7762b57ea47a68f5fd3a479bbd0b4cb6de5ae1b1240104d214","sha512":"dda890467c196f48f3d69c4a690d09734d7b6a01094d2b22afe1eb0e7848a76b98ba5fe04b8750f78eb2aeb791c8862d3445f94c253eca511f7e05c8198909bf","ssdeep":"","tlshash":"6b3143be3340b0bb8767206040ff9117f078bac2595b6809d484b0d33e2383496fbda9","size":1771,"data":"","first_seen":"2024-12-02T21:43:54.640187Z","last_seen":"2026-07-12T14:30:59.919876Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"c82a57e7baa01b14e520e0cf8b428fdc","sha1":"b4bdc6524f34efbca2b1cc15ac1e1440034bd604","sha256":"39d0437e069cbf6c04447c0dbe696ebd0609845d36e2ef6fa1186cc9043ecfb1","sha512":"1113afef07e4035d61e010e1d74f2b2fa57f33007683187f859a81bcdc64ce53f56f9092790e3ed12f2ca772c1860406652c40da263d34bff97b4e480f5c63e8","ssdeep":"","tlshash":"76d09762b8b31cc02122406e82a67f0c23a8143f0b48882630bd0f493fc696832e31e2","size":251,"data":"","first_seen":"2025-09-24T06:54:00.367262Z","last_seen":"2026-03-05T20:25:51.029083Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/setUp.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"188632243131ba9ede17c235f39d2a60","sha1":"f72d22aeadb1f0f331089e62171d3a3b9557c11a","sha256":"2355941e5015c231d0f899b45447c4c3890ba703178f7c7e2f32f55ad7c92faf","sha512":"2ad99599fa7a47fc8046426e05c8ec96dc2e7a21e6efd4aa11d15d8a2258c7b95ab2b289bd4b1c353df0b7bab36dba3d4b9f11abecfb7037a4a11b0c52a2d926","ssdeep":"192:0ZJWrJh3CgrI+qfpZPkAs8Z81SdsD74VvDE:0j+Es3X","tlshash":"c842ed2900f3543542a361f96beb55497aa0a103b008cdd97eadd7840fd3ea0d8f7be9","size":12334,"data":"","first_seen":"2025-09-24T06:54:00.279928Z","last_seen":"2026-03-05T20:25:50.974776Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/notify-a5ad4bd1.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"introduction_type":"importedModule","is_inline":false,"md5":"b62bbff81a30bc55c8271a6369010211","sha1":"53fff15bdb6b5b33597b4ddfc4cfb9daf5fe04bc","sha256":"27a0e9872f67d626842616be908644b203cee3a0f75e8548e53c3997679ba88f","sha512":"71bdeb88f3d12b103fbacbca52fdc921f63c8312c92a39bc4dca954d3faf8fd9b8e77e0d935ca76f40da285e3c12da8695088beb3842871720b4efe3f383263d","ssdeep":"192:vCKzYY7imkiMNFW/fgHnsdY1OyS7+kWz3DCsankxtFiskZdxioh4D4VQ6bxxKQgq:vtE780/yFXLSnIZFWLL80U","tlshash":"7692420913bb1b2592d3b07a1daf90047934809f0d96bd1c3d6d86d88f4c97992fafb5","size":21238,"data":"","first_seen":"2025-09-24T06:54:00.346735Z","last_seen":"2026-07-12T14:30:59.662404Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0460d561fe42be609aa21a7358d4d084","sha1":"237f220cbf649c872b9c6925f49d65027e5538ad","sha256":"441b75f5e6da5f50ffd95d0045ad41d0a40bb26efc725f2986bc7a1f6a6f90ff","sha512":"fe669ba4de746cf6c68f385f33292b3728a0ec7de3c2826d005d88aa0eef08e9d45d8293a19d741ff5cac48479fece067898dd619110e6c26ea3146ce8a2f59e","ssdeep":"3072:JB14Xu4FMM/g4Gg1cjm6ApRz7g9fp/1ordK1vV+iKykNyniMrJ4b8:H1ou4F/g4v176ApRI9osCy4yniMU8","tlshash":"e144e8da7682747693733474902f000bb1bebc96f14c8965e186d9d97e389ac9237f2c","size":259388,"data":"","first_seen":"2026-03-05T14:49:10.406337Z","last_seen":"2026-03-11T14:53:31.464414Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cases-batle.ru/img/svg/coinflip.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/svg/coinflip.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 14592\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-3900\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14592,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fb6d28851795c5e72759f13f79673b7","sha1":"ef606112c2f9c47b47ea2d39f34702ee968dd567","sha256":"b227530d34f7dba664801377020aecd8e88137db73989bebd0bf6ea1afd22e49","sha512":"c878f6f6286c5bcec0db273af95345220fc1df4e7c234ed1dbf55b63b04a4f3fb54aa518babdadcfad503b21492c733afc122f892b0d9d8e1b5e42e24a8801d1","ssdeep":"384:ubkp7TRYPSZUpPGaMqYYuka2g8BoTh4kQlb:usdwSZAsqY97CGF4H","tlshash":"8d62717213a4d7fda6c18b088974204b37b5948a76f4e1ecfb2ba686af064f34034d75","first_seen":"2024-12-02T21:43:54.586815Z","last_seen":"2026-07-12T14:30:59.697287Z","times_seen":56,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/favicon/android-icon-192x192.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/favicon/android-icon-192x192.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 7624\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-1dc8\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7624,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"255b3f4f64e8134a663d76b0bdc4a315","sha1":"915ee1c068fdcf7cdb8cf54e1a0f8a0fcd335e36","sha256":"2cab58bbcdd3306dbc2198a3e15f305ce68e678c494c1624e22386611e8009cb","sha512":"4509589c012fa9af29a75a2be724213d169a9c70ee24b07a3b03abe536e260790afa8fde381ee59eeed09a53c4ee077963912365c93c62acb558f8f216837fbf","ssdeep":"192:2OLtbd2c9aeyxkoc9fouyF7KPZl1WHyFHel3pjK6ibhzM:5Lj2cJ99fouK7KPZlDZG3pG6i1zM","tlshash":"4df1bfdcd22e32e456c1a85e72afcf97e78221553bdcc2a87c7e80434268473b5a4519","first_seen":"2025-09-24T06:54:00.34043Z","last_seen":"2026-07-12T14:30:59.787667Z","times_seen":13,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.689.front.middle-67dd56f27fb11.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.689.front.middle-67dd56f27fb11.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6644\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-19f4\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6644,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e2ab21f8d01558792d13de26cdda6d0e","sha1":"dac6ac79add19357f54a9a31a3a577bedab66a37","sha256":"72584ff0ea08b4676ad496ded64e198218a0afc1a790227182c5687d949f9a43","sha512":"d616e6f36bb60734c84bf17c7607c0a0e0bf955c348c4c0fde882e5e3e8de3ff8e702e898ae0d9aaa1d502969a32a807e33111d709791d516ed866b3b097130c","ssdeep":"192:3KrUcKKR/cBhYwY7psFjHrz8nnCX83I0ZUa:6QhKhcBhYwYyFLEnnfI06a","tlshash":"c7d1afac31268ed4bc05d4e967bba74bfdee002cf64a9acf55120a3d6d4d3e28200985","first_seen":"2025-09-24T06:54:00.287015Z","last_seen":"2026-03-05T20:25:50.992243Z","times_seen":4,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-05T20:16:33.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:33 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=31536000;\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":111641,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3015)","md5":"c49e215bba12437cca35408894637ae7","sha1":"3e34c61d2fa54a019603422d4708b6b18feeed31","sha256":"98e094a39d4064c82410cb43b07047d5f0ff31306815927007aa37501da68bde","sha512":"676a56e5e1c89de8f52ad7168e2a7afcbb8e51e6bd6aeb277227a9143ca2339657c1bf5b2f57093a7df104060385fb7992408fa0a0571bbcd69c6864cbee8feb","ssdeep":"1536:qO6r0W2OAfCYbQUjekQZ8ioC+EflQVIV27:TTjeDS","tlshash":"65b3e83193f9106a61419389da342a4b7fa084fbfa63811473ad5fc5afe3ce38537a54","first_seen":"2025-09-24T06:54:00.359082Z","last_seen":"2026-03-05T20:25:50.987016Z","times_seen":4,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":268,"dns":172,"connect":30,"send":0,"wait":61,"receive":64,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 20:16:34 GMT\r\ncontent-type: text/css\r\ncontent-encoding: gzip\r\ncf-ray: 9d7bcc971b0e1a30-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1228944\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 05 Mar 2027 20:16:34 GMT\r\nlast-modified: Fri, 30 Jan 2026 17:33:14 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\nfly-request-id: 01KG7ZENXCTY1A38A3KMZZY6R0-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-07-26T06:29:09.035746Z","times_seen":41937,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":62,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-5c793adb92d4e.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793adb92d4e.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 780\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-30c\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":780,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10f459ebb9bd418ff609f4a429026366","sha1":"31823ee3d27a50de80ac3926828c5cc467ad94a2","sha256":"7c7bfaba13272c7adea531d9a1fecd2fa287445db19c4cb88937b85a12216d27","sha512":"6d82270d9bbae8539558c8754ba56b9af6914b735051b441cfcf8dd1bca37ceae985786389b18cec90d61862af7ef08a00ef6f9f8199d14c28772afc39190b64","ssdeep":"","tlshash":"bf01c57407ca0670c8a69610b85ec6a59b9e526d3330aa3170a00aa682f03255e0a726","first_seen":"2025-09-24T06:54:00.239226Z","last_seen":"2026-07-12T14:30:59.90451Z","times_seen":13,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/isbot.min.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /js/isbot.min.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 2845\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-b1d\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2845,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (2520)","md5":"936628f48ed2e266a67d09a7ca68b234","sha1":"76f3a2deda0106e8131080fab43679a5beebc4de","sha256":"6faa3faf7c21646a25508cf79521e317246b428433641ad6faeff27c1c8511bb","sha512":"d7822d3955afb58d6e50d8ca669e9ff8559715954279d0891d4bc80d1ca3130d5376a48102b515b110e9fca478f99df887459f78b184d4e33be2fac82d6cce3a","ssdeep":"","tlshash":"e3511b7f25d8e405325e2c4d22b792867b7e9610c046f014fa74c95d70588efc267f47","first_seen":"2025-09-24T06:54:00.330155Z","last_seen":"2026-07-12T14:30:59.834446Z","times_seen":13,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":1,"connect":33,"send":0,"wait":30,"receive":0,"ssl":79},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/funds-form.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/module/funds-form.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 58649\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-e519\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58649,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f3c6779a850fdde67b7cf20730df6a70","sha1":"d73963c84716ff7ce4da55c4459c5c201413d817","sha256":"41f6e7c63eda5710d4ef9dc429eb210d2edaabfdaa3ee09aac0b13ef75338550","sha512":"27d026d1d7c68d76a293701cb41d1b5fff9cfe00b3cd15283062372db95808f7ece191290138f899d414a7a7a399f9e772284eb707ff153db4655717f26dec86","ssdeep":"768:yhV0lS9sZ8ZC4q7YdKC8Mg+Fh5pAS9901W//gHVUtrNr7G7VbFpOa:awMkHUt/B/01Siatp7gVRIa","tlshash":"4443b41622f62435b123b0395f5fd805be26609f2daafe053c5c02986f2c53c97b5f8a","first_seen":"2025-09-24T06:54:00.220896Z","last_seen":"2026-07-12T14:30:59.811783Z","times_seen":13,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":60,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/svg/icons.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/svg/icons.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 49298\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-c092\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49298,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8c8144b2fd9a91185df142416f293e7","sha1":"160ea7842193844549054801ccef2bf1f0b493f1","sha256":"0a3e7be624c97a49bd076a6b91c3bfcab17d16eb91fe2979b03ff59ee66d8c9c","sha512":"addca60d370779f136e4c5dbef9986f47429a942e4e7cddf6feb5bd9a01a18516a090d7a67d99533a162b36ba30b1bdffd836b9027453c3c8ca105c90c7136cc","ssdeep":"1536:eTRVIfVGNVpIgI1nRLYWpLBjceHD7gP1wq:TL05","tlshash":"60232b7653f043f89ac447184bb8186439bd10ab79b1d1d87f5f8b849f4b9f6a02cea1","first_seen":"2024-12-02T21:43:54.592761Z","last_seen":"2026-07-12T14:30:59.980574Z","times_seen":14,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 10:47:52 GMT\r\nexpires: Thu, 04 Mar 2027 10:47:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 120523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-26T07:26:10.840508Z","times_seen":315959,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":156,"dns":1,"connect":7,"send":0,"wait":44,"receive":6,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/svg/contract-icon.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/svg/contract-icon.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3538\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-dd2\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3538,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d40d0b5c58b0b24e442e4946d03625a","sha1":"06c41982bf5e035e0e1e187555b3c842a8641837","sha256":"2fd79066153d6bebe78aab3a6581d3fbea594699dee06cf9d2301dadd2aa6518","sha512":"d79d470c52ac6c6de1212f3202d421e245cb68b981ab99d80e2958ded7cc11cedca83ff0260c2df82894bc14e10a244ad3a706ce1a7e36e1e2e8882327ba678d","ssdeep":"","tlshash":"4471df560344dffbaed8853c9690249670e4dd6fe1b0f1d8abab642bc50c8c0a49c7de","first_seen":"2025-06-16T19:50:55.594134Z","last_seen":"2026-07-12T14:30:59.782885Z","times_seen":65,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-675e6efee1e98.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-675e6efee1e98.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1976\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-7b8\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1976,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38f92cf73a9f1f005a7cb9f777d846e8","sha1":"f189750777ed1a302cda9100208c5bd12c609dd2","sha256":"340e42e0145d4434da650a6c4c613d2da67cdd2dd5b5053275335ae31ba016ea","sha512":"e95984cf513b8a8e13ef1188be95e98aeae821fe7970eac1283aaaa39d8e1d51c3b3a8fc3d4b65f4ea9aa449eed6ae851ab3892acb6bf916666e5e2822de0102","ssdeep":"","tlshash":"d3412ccf66034daedd1702436ba7e1c110421d4d3a4c7b74c3a780a490f6416add2939","first_seen":"2025-09-24T06:54:00.262585Z","last_seen":"2026-07-12T14:30:59.872677Z","times_seen":13,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":266,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-5c793b19bc6af.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793b19bc6af.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 932\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-3a4\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":932,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ff7f0c3418201a803b4fdae84fc5cf1","sha1":"f6dfa4b0118ae857ab055a30dd9f551c6eb0488d","sha256":"2fc309ffd0f04a0f12f990c1e00a8008c642e72172a89d543218d9edc476255d","sha512":"1fb7aeefe0325254083fab212297496614794dc6265a2123f4b9fcadae60058a0f5af5a6f73da5a661f863ea311b28a3c5fd71216c23517204486ee400068e2f","ssdeep":"","tlshash":"0b11844149d35501dca496e8e2b3ee84a0be282af718cab8602e01eca5bb40a8470f75","first_seen":"2025-09-24T06:54:00.311394Z","last_seen":"2026-07-12T14:30:59.907182Z","times_seen":13,"resource_available":false,"data":null}},"time_used":553,"timings":{"blocked":519,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.675.front.middle-67a363a7723e9.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.165Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.675.front.middle-67a363a7723e9.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 5012\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-1394\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5012,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab4520dc5022ec3a060d1ce4a2f813db","sha1":"c1ef86b21c3a70a5b59111239d021d6c5fa693d5","sha256":"8132c5e7fdbd646229396dd7a5efed23ac54dc9ac2bdf33101c421b676148d4e","sha512":"9effa35f542dc98e972158881580b73a4ef3379108f25a48bc759bffaaa20edd97b002576e360e1219faae9797752cd6f40952183c8603e127cb6625f9ac49ce","ssdeep":"96:EWtxh3TG73NO5ih72KRvTSTuJptLiizN8CwWoVU4CuSJM2/lK3vKjy4ynYviSuC:EaNTGxO5EbTSaJLhtwWoq4nSO2/xjy0L","tlshash":"0fa15c98002b6871cb63531e26dc305ab41b5131a4e7af2364fe5ba1d80b8ea5dc7e15","first_seen":"2025-09-24T06:54:00.357296Z","last_seen":"2026-03-05T20:25:50.980632Z","times_seen":4,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/css/style35.css","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.435Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /css/style35.css HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: text/css\r\nContent-Length: 374231\r\nLast-Modified: Sat, 22 Mar 2025 11:31:20 GMT\r\nConnection: keep-alive\r\nETag: \"67de9f88-5b5d7\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374231,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"7f49ac8f38309f622f78a60997ba524c","sha1":"f8dab813a3c6bec900e6791d90e12482ba69b571","sha256":"b4aa7eb10e4f27886d040e4bc92f7726d9b5e813fb183ebf7895aecf99272513","sha512":"32cc8d1bff756c3a64bf5fb9cc9b1b4017cb1337474e37d2cbf12e70c7f81cfbfee3604a3c7775776f8032f5f0b752b7d4847d70b9ac7c7ca30b372afccda31d","ssdeep":"6144:OSezxZuPmQE2T0OZ2A3IbSSZG22SozM2CQl8pM5AfOh5lJXHfHRGz52LvPeFHt+S:OSezxZuPmQE2T0OZ2A3IbSSZG22SozMZ","tlshash":"d384529b5ab306546a1b852cabee9f14222cd053c40bfced37cd914d8fca6e446d274b","first_seen":"2025-09-24T06:54:00.332941Z","last_seen":"2026-07-12T14:30:59.879431Z","times_seen":13,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/hystmodal-a1c71d15.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/module/hystmodal-a1c71d15.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 5192\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-1448\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5191)","md5":"ab0bfe3916eaed5741fded42a08e6bdf","sha1":"832cab9450c4f225a51d9c9679aaf9cdf42b81c1","sha256":"8b3583123535720a0f4aecea0677e01daba701ff08e1a34c4d69d04e4447d45e","sha512":"4152c9560706b3248564b0e047d44ba4e534bc02904908087bf8ee27a22adb19c743685446588e0548c5dff2c61107491020ee3e93eccc3c900ef8289bfabcc5","ssdeep":"96:G+rjuSlXQBaMHFsHxaINeih7QkEzF6mnEsqsFM:G+rjJUaesRnNeih7QkqF6mEkFM","tlshash":"fcb1542ab23858ba04ff8957a2a54b53f32118947507041d783dddce5a4fd877075bf8","first_seen":"2024-12-02T21:43:54.626428Z","last_seen":"2026-07-12T14:30:59.753059Z","times_seen":14,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/payment/bcn.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/payment/bcn.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3834\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-efa\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3834,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccf796a303d08cb705635ac35982202d","sha1":"231ce5a1971e742bfd9b8fc4633fa697021c3d0f","sha256":"d96e3c77513c78deb1f64c6c9bd76df93619ebaa559bd17c131dae8dab1577e0","sha512":"fe68201fcbf60fe3e2da666ea6013e5662b0981fec7ea9323ad0737a949bdd1651b7dd90fd70e4061ee51e1a5eb794ab85041df748b9fbead09cf147110d0cc1","ssdeep":"","tlshash":"91816127d317d6abf5098184eee83016b2a0f9abd4e0d6d0a367792af1cc8d1150c3f8","first_seen":"2025-06-27T04:58:45.860802Z","last_seen":"2026-07-12T14:30:59.71164Z","times_seen":44,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.685.back.middle-67c16743a3b7e.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.685.back.middle-67c16743a3b7e.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16136\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-3f08\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16136,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d363497e95fa7875686ebb264cd9b39d","sha1":"8d133a7c53de714b55e6daa6309293395f1dd9ed","sha256":"4c31caddd58b896e2aa83e7e7d1c52b6730ee2930ee925f734a5fc72e0c1db64","sha512":"34cb39d613c572ac08a1bdbbc9edf899c2ba08e050183fb8063834f6f950139391a4c2e4c10bc00f1724ed504a617cb90b06f0bd77f121af0d8b6de08a5bdcab","ssdeep":"384:OSWfg+BvimjGJ12qlFK1dHz/6lHA8vJpt2bnB1ps:1WY+9GJsqlGGlH9R+B3s","tlshash":"4772d06477a069833a173b13b1f855d006f616e2da29cd3df6b813bdcf996447e08e14","first_seen":"2025-09-24T06:54:00.261323Z","last_seen":"2026-03-05T20:25:50.97014Z","times_seen":4,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.675.back.middle-67a332915e2da.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.675.back.middle-67a332915e2da.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15356\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-3bfc\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d48f8552446451b0a48509f279d3d9ce","sha1":"efd41d45668ccfbcc08d74e2f36dc8cfec5e9f2d","sha256":"624a2a12ec3a9cea4504e354c3fa604fc02e600a3284edb1fdd41100bbe152a1","sha512":"28092a9d1cedb4cb1bafd512a2c09455b66ee8c0d2017645bc5f18a70c530350fe813ca7d7b169dd27047015c19e74a6a5e2f12165f1e5f2f04cfecc06adb91b","ssdeep":"384:FzJ2tI6U4xfD2NPB1pcTgUFspxxQ/kIYqMLDwMsn26xX:FzJ2qwxfD2dTdUqx6/PY1dy","tlshash":"0362bf06ac38de4e1092beda729f3e6246fd8714300658fd127688e1f9047ec7b16626","first_seen":"2025-09-24T06:54:00.323447Z","last_seen":"2026-03-05T20:25:50.99538Z","times_seen":4,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/api-88f676dd.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/module/api-88f676dd.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 58588\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-e4dc\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58588,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"6589d07dbd72d0ff535e9687f43b995b","sha1":"04f5b47e3e822cee8a316a67cf232affff9ae40c","sha256":"47fecaa248668cf50dfa9ab19f2e44d364d7e6aca5a491dcd61b27772603fff5","sha512":"e014e166e2935e546f251e51b4f68b3b69594726f720b9bdc130bd0b9b6d140c20bef106e55fe180c5a6a347ea25acee7a0665d7a633ec4a26b6e208ad93ee6a","ssdeep":"768:CqpuEERfGEuqJz+z2AFmxq//DzAWZro0KIWdcVZYeHWVv3hDWyyHo:CsrY5kcqDzzAdclWV/CHo","tlshash":"2a434e8669e320304223b0bc4f4fd91ab224950f6c89ed583e5c52a65f5d53da7f2fe8","first_seen":"2025-09-24T06:54:00.24023Z","last_seen":"2026-07-12T14:30:59.817605Z","times_seen":13,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/promo_trapezoid.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/promo_trapezoid.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 718\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-2ce\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":718,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0c9e9d49e15286b9dee6f7485bd0058d","sha1":"163bc3aaed25124c0abcdf66b1a2457602e80cbb","sha256":"03850c0ca9258f22454efa0c19cccabe8660d9c3ef95bbbdfbe7a4a0139a8e2c","sha512":"8f08b8e1c28a9516db185c46bbc9969a0dc1d1ca2ee10dd7af688bd593b52f728001a4a04f59f4f90b26e705817813711b9ae51faf67a8c4f10ba9f212128636","ssdeep":"","tlshash":"84019406c3aeec71f4056dfe518e3bd02713cc4cdf669dd81c40b2f212d04906581c62","first_seen":"2025-09-24T06:54:00.246998Z","last_seen":"2026-03-05T20:25:51.02416Z","times_seen":5,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.683.back.middle-67c1655922be7.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.683.back.middle-67c1655922be7.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16052\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-3eb4\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1f20e32322c830d000580f8d95cc44b4","sha1":"a13261d815dbe3c61a1178f7d8d6de3a0bb17d57","sha256":"80861a1bcd7dcd5f8f470924a0ee606e525a90f36581522c73b376d9cdfe6360","sha512":"dc97f28fba4bbe295bd380f6567c12fc8c654c64cd8951f6c5e6075e6298102d42d0c82edc48fe320521dda37efbd4c60656a27f066bdff773c0a72bd6aedadf","ssdeep":"384:bycHC7bnKxT53Oaoop1/sp3XK9ysHWpb0jqWn:7i7DmOaoQUJXK9ys2N0mWn","tlshash":"3872d1328d2991263466a8c063f9770757f690cbfe6f8fa00f09f964558b1a6903bf1d","first_seen":"2025-09-24T06:54:00.306347Z","last_seen":"2026-03-05T20:25:51.021593Z","times_seen":4,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/js/common.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/js/common.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 112763\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-1b87b\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":112763,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"4bc52296e6d4e5eead9711eff2ccce42","sha1":"e788c13fd41ed1743f76141ba91418daa1089525","sha256":"302f3a1f2c87877874c0ba6378e0ee7291d924528f9acc645451ca986e6123fe","sha512":"e2c56ade3c344fb7c0da370a4e6e50b6223bc434d6a5587b9f74bb62f8e4c52bc27a842614e5265981be8746f94629e9f60a25243658ce361f6eb6c461c55d6d","ssdeep":"1536:+NkeeewAzJ9mEriwnC4lyPc/fqnW19lp2DT:m3kaqnW14v","tlshash":"a2b3604b6ae23434a627b17a8e2fd5093a35500f1e8afd043d4c92954f1c93c66f9fe9","first_seen":"2025-09-24T06:54:00.354154Z","last_seen":"2026-07-12T14:30:59.900998Z","times_seen":13,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":61,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-6760735a66067.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-6760735a66067.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2632\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-a48\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2632,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a9c527bb0879407f2b6cf3f60f2ab345","sha1":"537b9bcea8c666e9c41b3e6812063cda7eabfdeb","sha256":"577f7bd7d8f18ad084efe8ab063dbb5fec7c84df007e88a54494f1b39945bb79","sha512":"a85862edf19f6ccbfcd36d42d4b04200299b098032f33638dfe0a67059089fe1a2fe7b2745dac3ad5dfee7a7f0baa23b6245f104dbd533cab324184e17933ebd","ssdeep":"","tlshash":"4e515c17e92f072e703d83d943a7f70c064874e291a1bdee14b4f4a45896235ae9c221","first_seen":"2025-09-24T06:54:00.216269Z","last_seen":"2026-07-12T14:30:59.849194Z","times_seen":13,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-5c793b9ddd9ad.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793b9ddd9ad.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 968\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-3c8\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":968,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c4c9d55b36c37b1bfa10c01e3dd2efb","sha1":"71eb814276369f49029b18e52270e1fa618bb829","sha256":"477a17804822b8b4416b4c0b3715c1fda460bf1e70d45a216619c10fd623576e","sha512":"67c9b48e08f6791bf60282f420a4690fa0d82102e8a511754064d0390bdb9eb121a629b461a0e9b403b66d4697ad9c1707156b5faf036b741aac64727d9e7de9","ssdeep":"","tlshash":"8d11c86493d2e43eeec6355007624d77ab0929413518ef28fd2ab15b81d26f53d3e60b","first_seen":"2025-09-24T06:54:00.27404Z","last_seen":"2026-07-12T14:31:00.008208Z","times_seen":13,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":310,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/themes/newyear2024/img/logo.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /themes/newyear2024/img/logo.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2824\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-b08\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2824,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1409bdc8ddcf932d701fed3402a6d9b6","sha1":"d2902159b28306267c67c783f39694c6c134b48b","sha256":"bdb034c194be4e335fcefdfc233c4b43ed9798af309ed6174e59b4b440881f3a","sha512":"16b160ab46d8677c121ce382d8647255cf87a55293c2142aef4d39f68ffa7f8573063a7475ec102356f37e3648eb9440e1651fee98a24531650c5ae22c1123a7","ssdeep":"","tlshash":"0f513b384b053344e0d00839d0da4bfaf760ed385347cb23c2c0522d1b067c96eb918b","first_seen":"2025-09-24T06:54:00.334465Z","last_seen":"2026-03-05T20:25:51.022555Z","times_seen":5,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":232,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-67271f82c2c8b.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-67271f82c2c8b.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1190\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-4a6\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1190,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a369a9e4d93b37f2e291e7d57f12bc13","sha1":"f97dfbb1e32de20d9c920d68f0e52f8716b3e835","sha256":"0be633951a947af938f9f8e2581d924dab4943243069b57aafd5a719e136c09d","sha512":"287a69cf3a7c9288fe43950bddcdc13c19e032374050f58fb7780a2c911168f53fa8ab21804d6a680dac544f57eb408a942507177c92a98d6337cb1121253050","ssdeep":"","tlshash":"6d21a3cbeb532153058a2ae2067a15d7c0179dee22b11ca5fad85ebc4d32ca1794fa84","first_seen":"2025-09-24T06:54:00.22722Z","last_seen":"2026-07-12T14:30:59.786711Z","times_seen":13,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":194,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 10:47:52 GMT\r\nexpires: Thu, 04 Mar 2027 10:47:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 120523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-26T07:26:10.840508Z","times_seen":315959,"resource_available":false,"data":null}},"time_used":421,"timings":{"blocked":198,"dns":7,"connect":20,"send":0,"wait":8,"receive":2,"ssl":183},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/cases.json","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /js/cases.json HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cases-batle.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: application/json\r\nContent-Length: 67015\r\nLast-Modified: Sat, 22 Mar 2025 21:27:40 GMT\r\nConnection: keep-alive\r\nETag: \"67df2b4c-105c7\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67015,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"f2fa00756c8c8f12fb64e3ddd1ee66c0","sha1":"2d1e440e124805694af5ab5a96153b3e94fda247","sha256":"61db8a56c3d12eb3f975fabb515c2a7f9bf2de069624ca877f06864d6ed22d16","sha512":"92c2c21ac293d21fed0c7493ca67f7209c60ba2706204feee5329239a70941b02bea559f8003a624e599aa4bd795832da6e725269ecd3f4282a93885bd618b21","ssdeep":"768:lMO0qEynO4/ipMY0Ld1lk0gda/KA34iHP2X4sNY98+vdF1nIxaQtgjIiqMH4k/WW:txMEbNh","tlshash":"b4635a11d1670c1b179aa8143d900aa9b15c027b0f683e343b9ce60e6fed55ece37bda","first_seen":"2025-09-24T06:54:00.270361Z","last_seen":"2026-03-05T20:25:50.976522Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-5c793acc91a74.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793acc91a74.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1170\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-492\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1170,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1be75b80eebf03b5f7227ff399b1dcc","sha1":"fcfa0bb49f82c3e9b51c0254bc9669231dd22890","sha256":"95a58a88b4f58eb2aa19ace539d1cc33cff8928b92840cf6362c08364ff7f19b","sha512":"5901582d2744a388b72eb28d04f5c7a5ae8c741667a42dc1b9f6703d0a7821a231edbebf29f7b55fee86cbe55d68efa32f462e88eecce718c3730d72c65e746c","ssdeep":"","tlshash":"aa21d7a753f04d81f135b08a52ef5932a047c3796095ce92c44a897af0687795093828","first_seen":"2025-09-24T06:54:00.352722Z","last_seen":"2026-07-12T14:30:59.946622Z","times_seen":13,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":183,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/corner-left.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/corner-left.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1772\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-6ec\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1772,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bf1f70398bb7cbfd523fe72a75e96e32","sha1":"d04e3f92ee7d11db26ecbc7a26f3bf6e4fef3fb1","sha256":"5105dc10806e15d129cb338721658c42dc3a2bb51fd05c6e9023ad916a52745e","sha512":"e621e6654a3799b622261aeb542623184d6b4e579596a899fcf8029a04f0adc7885dc1a5413514b88c34d842e734085e2babbf79524969c832181ec8c8522136","ssdeep":"","tlshash":"a331e95c72d521f7cb13f47b47936e6d08320e99654629e8c145c7d712c03e6778af4a","first_seen":"2025-09-24T06:54:00.315732Z","last_seen":"2026-05-29T14:16:16.81761Z","times_seen":9,"resource_available":false,"data":null}},"time_used":237,"timings":{"blocked":206,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/first_promo_block_one.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.198Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/first_promo_block_one.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1668\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-684\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1668,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"493d556fd2e65e7c318f2dc90fd24dd6","sha1":"450f98d48a606e003739ec9f133d0b1b3eb8322f","sha256":"ea346b8f2041d96b74f2e85dae0fcf00b5434febff4127e6c59f6bedc9968371","sha512":"259581946955f471c98776d65b7b05866faca9ce8e5affd0b0c4f2ee0e865810a52bb1146f4245bece8d57bbf785b2b78e070307463c93c77421024fb319c073","ssdeep":"","tlshash":"8731f8d95aba7a79eb0908209b0331c3019d8b5c52f97aa0285117f461305202b333fb","first_seen":"2025-09-24T06:54:00.300323Z","last_seen":"2026-03-05T20:25:51.007208Z","times_seen":5,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.247Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 15:06:04 GMT\r\nexpires: Fri, 05 Mar 2027 15:06:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nage: 18631\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-07-26T07:33:51.586953Z","times_seen":42787,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.344.back.middle-612b80215f418.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.344.back.middle-612b80215f418.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15424\r\nLast-Modified: Sat, 22 Mar 2025 21:25:57 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae5-3c40\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15424,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d3e09edeb29f9af67d215d6e79cbb23","sha1":"10e13507d85d50657946235f1ba056d8401d5938","sha256":"52d490acffd557cbcc19be04e32460619487a9b5409aa24dc5e120cf37d0334c","sha512":"5b19adf33947c5637196f6f8e470f22d55e6357e2ceff3b99a6035060cd1cf5658bf484e9f406c9f10fb91778ad0ce23f6d4b42a174f640e3cbdd98475ada5fe","ssdeep":"384:5bB0kyWHukx+qt7Km2YGJVv2Ow07HvX3bui1uDKdpZ7N78j:5b6Rgukxp+miJ0ODuK7ej","tlshash":"6b62d05e88328864d287362727534983279208b3111ab8f388ff496786eea2d7d14b97","first_seen":"2025-09-24T06:54:00.253285Z","last_seen":"2026-03-05T20:25:50.973801Z","times_seen":4,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-676187fcdf76e.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-676187fcdf76e.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2174\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-87e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2174,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3772ef828986b33b50fe2b4bd7468613","sha1":"c03989913bf4f40839a008f81bfd74c4ed747aca","sha256":"ad93df1535469f5a711cdc65ffd25f0eaa3b03e83260a01a48d2960f5352ef6e","sha512":"98323d82dfac6acb65af20d4c3948a498a4c75d231793efc39e72f83126bcc45bcc66888d2704826b58b0a9975aebd1eb9ae6c233fbe6c88d6ed2f5a2695fd63","ssdeep":"","tlshash":"2841090e34ee853085406b77304e861804ae58aec014ede5d3564b1ec52bdedb5847b9","first_seen":"2025-09-24T06:54:00.327377Z","last_seen":"2026-07-12T14:31:00.009138Z","times_seen":13,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-5c793f629583b.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793f629583b.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 938\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-3aa\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":938,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"689a7212a54ed84ea8287390c2ba75c2","sha1":"33f3341e3d73eb796e9717e95f190346c604c276","sha256":"6b28a071a9b3f9d29747e1d32d9e4b7bb24d1d9f30100422922d4336a44142c7","sha512":"0d9eaf5d5ecd43bc4cdf8a4aeb8496bd1108c5a0c5eeab26b3cd6cab90b2a16c801c796972a913301b3435d3ce92d4bf708743ed6d168ca2f7440f741a2fe428","ssdeep":"","tlshash":"c411fb244fc0e173c07138965f7f9206d703603694c85a060b4f29cd7e79303055cbe8","first_seen":"2025-09-24T06:54:00.29756Z","last_seen":"2026-07-12T14:30:59.803861Z","times_seen":13,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 05 Mar 2026 20:16:34 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9d7bcc974bf21a30-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 1082805\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 05 Mar 2027 20:16:34 GMT\r\nlast-modified: Sat, 07 Feb 2026 06:04:08 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8mhhK6WerRskNTu3fWZ4O8xDWv8cIr5fk8QLrDhplo4=:\r\nfly-request-id: 01KGVB6NBDMQ2RETKW4JBY27SJ-arn\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-07-26T06:19:28.116405Z","times_seen":21770,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/setUp.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /js/setUp.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 12334\r\nLast-Modified: Sat, 29 Mar 2025 19:41:44 GMT\r\nConnection: keep-alive\r\nETag: \"67e84cf8-302e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12334,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"188632243131ba9ede17c235f39d2a60","sha1":"f72d22aeadb1f0f331089e62171d3a3b9557c11a","sha256":"2355941e5015c231d0f899b45447c4c3890ba703178f7c7e2f32f55ad7c92faf","sha512":"2ad99599fa7a47fc8046426e05c8ec96dc2e7a21e6efd4aa11d15d8a2258c7b95ab2b289bd4b1c353df0b7bab36dba3d4b9f11abecfb7037a4a11b0c52a2d926","ssdeep":"192:0ZJWrJh3CgrI+qfpZPkAs8Z81SdsD74VvDE:0j+Es3X","tlshash":"c842ed2900f3543542a361f96beb55497aa0a103b008cdd97eadd7840fd3ea0d8f7be9","first_seen":"2025-09-24T06:54:00.279928Z","last_seen":"2026-03-05T20:25:50.974776Z","times_seen":4,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":5,"dns":1,"connect":34,"send":0,"wait":31,"receive":1,"ssl":82},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/users.json","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /js/users.json HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cases-batle.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: application/json\r\nContent-Length: 17774\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-456e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17774,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"27dee94ff0aa97faef277b95d942fe10","sha1":"eec3ee2b7f16223f07a35777f01a59d02ece83d0","sha256":"fe9d5986a799e6a3a1ddb20a173e1983612e5d9efb3a610487d6e01ba537c996","sha512":"e07427c725ac5a94f6a49b76db1605f3fc59a246af138a4380f1f8b0a784690e88463b13d8de85fa6d50afb72aaf066c380b1311a0a5df15b76a4f30640d8dd6","ssdeep":"384:d5qBOcqqREq/qHbwiZqBXvOWeSntUq+PC+qixjqCJiSQWibU95iqoJFrqYgypY5u:d5qBOcqqREq/qHbwiZqBXvOWeSntUq+8","tlshash":"9582e8e6e4f22c5b587e20157d5e6b49e094016b4ca97e20762e6548ffdec0f1c3ab2c","first_seen":"2025-09-24T06:54:00.309268Z","last_seen":"2026-07-12T14:30:59.981631Z","times_seen":13,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.690.back.middle-67dd3d9f8484f.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.690.back.middle-67dd3d9f8484f.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 18010\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-465a\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18010,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d039c6cb9c692ffd9d595dde0c2b23ce","sha1":"5719ec9f1ea5c5ed800f48bad79832ba1a6090c5","sha256":"285fe6271f480756004ed10070ef91dd859cc028c217988ba9f49af799fa4dfc","sha512":"25bccadfcb24b60e81796cdd152105b2b178c48dea47a9341c3753af1eef7d1c62c5a26028de339fdeba558ad1972c9692c1b7f3d31ec67f0cbbab51e17ddf5e","ssdeep":"384:fX/cy9JDu0x2QPoojJAmPteC0Qs8E7Stm7qqZgjF81Qofb/mjPOsmUN:P/v7L7rAm898E7SkzgB8Soz/eGk","tlshash":"6c82e0e791f3cc0ed4ad0ae5850649d07a12fc4b04276a1b7c52dae73794042a20deeb","first_seen":"2025-09-24T06:54:00.260175Z","last_seen":"2026-03-05T20:25:50.97863Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/svg/upgrade-icon.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/svg/upgrade-icon.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 430\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-1ae\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c83697cd6f5c5df0e167de9aa6e5c201","sha1":"cba1e47d9aeec688ef69890d438f8510e9c1a8c5","sha256":"2621f9b9b413d62762d3c1fa000c408afeced9957a34071c63dfa56c47c731d7","sha512":"5320face84c4568f8ee603c533ddd84960a18ca971e81b987659458b74921147624baa4cb138eb0049207c096c44f5d69c6b2bf13b490b6988d524c4a7aefea3","ssdeep":"","tlshash":"43e0e5fc93f8d158a1124b13ca783d80aa39b1ff034a11ea704dd9a08b546a7fc97594","first_seen":"2025-06-16T19:50:55.599752Z","last_seen":"2026-07-12T14:30:59.974224Z","times_seen":65,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":257,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.685.front.middle-67c1b92714f45.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.685.front.middle-67c1b92714f45.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 4704\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-1260\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4704,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d76a2579fe42355d299d5b4a911fb89d","sha1":"77e43b20baf62453625872ba5a231c4d189f4665","sha256":"4242986c1133e5bb85a6b3dc7149c7beb31d1d6a20923f86dfd2dfc2c23db4f9","sha512":"c7e556979d2091df1950177d278c2af0fd82f0ca6fd9e5b66c833d1ca5916c9182d4251e872e054aca20b8f9837c2b4fd29ab4d980c730d604988040961f738f","ssdeep":"96:fh52LzV2AywFOEBodeYBM8hKylmRaH5GWyKy7+pZBD8QBgb0+N2FHN6u3u:Z52voIOmodZDhKimG9SSvBDxBMGtVe","tlshash":"6da18dd69250fef08b4061c7d23452e6ca07db61938133aaa7d384e5e5a81c49eddbd0","first_seen":"2025-09-24T06:54:00.252202Z","last_seen":"2026-03-05T20:25:50.985778Z","times_seen":4,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.676.back.middle-67a333f229ef5.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.676.back.middle-67a333f229ef5.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13150\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-335e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13150,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"59e59723b2d4f78bfff4f9775fa424fe","sha1":"773732034337c9e08fb6f321e45454e4799c77e3","sha256":"8a719954b696d20eee7985011604dddc54f66496070f30b7257278dc9a51a1a2","sha512":"f3b24ccf90104b3815afeb84a5510265e80f5facde3d1cf4fe4f070886bd415e975b480350d21ee9b4cf15ef066e0127ec62a297fc4b39d1b8165ca63edc919c","ssdeep":"192:XvkPtrR9ac2frQ/mFxSGHyVgvkmEcKqThvgMQY9QdrmP37zUlFpT1sLoSQ:/krRkDTQ/+S2YQkmwcvg3s4IeFpKLob","tlshash":"6142d093abafa1449c1b3e910dcf20571a42a110497ceea45d3b93f2c70541cf9dfd96","first_seen":"2025-09-24T06:54:00.26603Z","last_seen":"2026-03-05T20:25:50.977075Z","times_seen":4,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.678.front.middle-67a3638a4d847.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.678.front.middle-67a3638a4d847.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6482\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-1952\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6482,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5e070fee595e528bd68fcf04b2f7902f","sha1":"fb836a4524353fc9aa458f31081faa76b00784d5","sha256":"2c73f8343bfe4b432f343a077835e87064debd88cb7af9686adb1a17b1df924d","sha512":"3bf3abf5f26814d635fcde76f0dadd91fa4f77818469a5ee987c665b7b9bee581509a977648c564b52f210070fc996f3418f90b15b436b1ab662abc19a920411","ssdeep":"96:5rvv+0NNaZlgCOcuJEHBzJOCBaJAo/kal6gOw6npR37Bp/v8exQUQ9Bxjdx38WJ1:BvJ8lxOghzkCBpgAf17Blc9BxjbsXP1m","tlshash":"a3d19f06c4e6b004b98670aa6462db7d5022577feb7d84e088925eec69e91e42e3088d","first_seen":"2025-09-24T06:54:00.256989Z","last_seen":"2026-03-05T20:25:50.997646Z","times_seen":4,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.204Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 17:53:46 GMT\r\nexpires: Fri, 05 Mar 2027 17:53:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nage: 8569\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-07-26T07:25:14.346822Z","times_seen":12451,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":143,"dns":0,"connect":0,"send":0,"wait":36,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 17:53:46 GMT\r\nexpires: Fri, 05 Mar 2027 17:53:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nage: 8569\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-07-26T07:25:14.346822Z","times_seen":12451,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":118,"dns":0,"connect":0,"send":0,"wait":27,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.687.back.middle-67dd3af2b35f6.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.687.back.middle-67dd3af2b35f6.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16282\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-3f9a\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16282,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a1ec12479c3e33180e2dd092f48a4c99","sha1":"61e962b99eeb8d1339945874d63787e471232716","sha256":"51aceecb028f3aeacc9359bcc501866656264c9fb9f39bf8388185414e5b0c77","sha512":"0a5f6a7c45e20e479a3c8d6565c7177d1c67ca5aa2711c824094bc933a61e6490806a00980b87b9e41fd225501d3c5061a4c405eed7a4c3017ae4e25a6813e96","ssdeep":"384:k8sZuzeGfiCPmaWi3VXWg8AoYLxHd72p1W+jfQIS8:kXmesiqFXWg1TL7w1r4Ix","tlshash":"1772d02b91b141efbf8cdc99318c27989e63f2994ec9093e54334050ba501c6bd62f6a","first_seen":"2025-09-24T06:54:00.251142Z","last_seen":"2026-03-05T20:25:50.994873Z","times_seen":4,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-6762deae53fb0.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762deae53fb0.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1280\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-500\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1280,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"443827d20f8e0979c37b0ffa0d062968","sha1":"27c4156385b49fde4686acbe5233c5eb09972254","sha256":"7ec185614c9ff21d8735360eb07076d3fd06454d57ea23d7dabab3f046f5251d","sha512":"683d80dca878b5d738fd2efc0d0ac8c714c03112a3953373d5b69b73e7982b2edb3cf699711c44d54fdd3c2d4d91741d3161f1fed9cb723c65bb4622896b2853","ssdeep":"","tlshash":"1a211a70d67048f9b785a6f0208cf2c206384e438b722fc4f86bd146e0cbb4521e40f5","first_seen":"2025-09-24T06:54:00.285116Z","last_seen":"2026-07-12T14:30:59.804747Z","times_seen":13,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.085Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /metrika/tag.js HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 85866\r\naccess-control-allow-origin: *\r\nset-cookie: bh=YKPJp80GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Fri, 09 Apr 2027 20:16:35 GMT; SameSite=None; Secure\r\nexpires: Thu, 05 Mar 2026 21:16:35 GMT\r\ndate: Thu, 05 Mar 2026 20:16:35 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nlast-modified: Thu, 05 Mar 2026 10:23:35 GMT\r\ncontent-encoding: br\r\ncache-control: max-age=3600\r\netag: \"69a959a7-14f6a\"\r\ncontent-type: application/javascript\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":259391,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (676)","md5":"0460d561fe42be609aa21a7358d4d084","sha1":"237f220cbf649c872b9c6925f49d65027e5538ad","sha256":"441b75f5e6da5f50ffd95d0045ad41d0a40bb26efc725f2986bc7a1f6a6f90ff","sha512":"fe669ba4de746cf6c68f385f33292b3728a0ec7de3c2826d005d88aa0eef08e9d45d8293a19d741ff5cac48479fece067898dd619110e6c26ea3146ce8a2f59e","ssdeep":"3072:JB14Xu4FMM/g4Gg1cjm6ApRz7g9fp/1ordK1vV+iKykNyniMrJ4b8:H1ou4F/g4v176ApRI9osCy4yniMU8","tlshash":"e144e8da7682747693733474902f000bb1bebc96f14c8965e186d9d97e389ac9237f2c","first_seen":"2026-03-05T14:49:10.406337Z","last_seen":"2026-03-11T14:53:31.464414Z","times_seen":30,"resource_available":true,"data":null}},"time_used":693,"timings":{"blocked":256,"dns":16,"connect":50,"send":0,"wait":77,"receive":107,"ssl":184},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.691.back.middle-67dd3e5910c9c.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.691.back.middle-67dd3e5910c9c.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17052\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-429c\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17052,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1cda79ecd478d4f209026c64f9a828ff","sha1":"d57701e22f7df97f419be1e9f5a51d3835088b6e","sha256":"a4b65c190ec3076425a6ddf75636fbf90dde635a771f35dcb38644abadb57583","sha512":"0b0bcfe7911a2cfe2a0a54b88f78e051f9511a69eb115b8b6b113bfddeeaa070864d84f3e2dd81856b40dafd1a829753e1096ec6112cb23ea915bed12d644020","ssdeep":"384:+Qbg0AUm4NAuJ+iuAoxFzs7XTgr20DgQMyoQ9fbEZmh:Fk0A14x4FzgT+DnMy5fbt","tlshash":"ea72d177ce17659310bf9941b058ce4156b3c82eff078622d9f2a0522be4498be2bcb0","first_seen":"2025-09-24T06:54:00.283771Z","last_seen":"2026-03-05T20:25:50.958517Z","times_seen":4,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.686.back.middle-67c1699e0c323.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.162Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.686.back.middle-67c1699e0c323.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17818\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-459a\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17818,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ff74bcfacfac5309f4fb719a20134ea3","sha1":"3dc99e562c66691cb3e1f56758775c38474dcaf1","sha256":"ad7b2f422a1562cccd132d3f774be5190cd91f42f6f21ebdcd1f2f7956491e1f","sha512":"5de43927c4a80ee510094f3bd5a98c892d76210a85ef51e3bdf5702cec45fd1fc16add7840e1baad041220cf543a6c78a59fbc339fbf7b110edb5b3403bbfb05","ssdeep":"384:DfRAkm0G3B5qMz+T2OlCN0vaD8sTkVn6ZDNkN/lYq1TndSRUM5oagcFG96Txh8:rm/5Gli0Y8WkV6ZyJlB1LdSHxdGCxh8","tlshash":"1c82d1c23f04a130e02b07268f5d8bf56175b4f3e5187a7e30ea8da4254bd746ab4738","first_seen":"2025-09-24T06:54:00.264873Z","last_seen":"2026-03-05T20:25:50.982805Z","times_seen":4,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.680.front.middle-67a363fb38ebb.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.680.front.middle-67a363fb38ebb.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 4220\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-107c\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4220,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"efdb7f00db1e2673226bdc7c3abcd6e0","sha1":"39ed524bde3f1252f99be3ec98d68f486238f2b4","sha256":"c5bc0e7150455b495218827a8e607d731879b1d987436d9460c702bd6a4d6cef","sha512":"f95fbfe32d551bf5affd3e67d84205aee0f0e0100d5c27b74c1ea526153673195e5c653d253a7dc5f9c07a3e08a1b5dd439b154c44598eda472637d6b8a07b83","ssdeep":"96:9A3hhq8HA9eMm2I5n41H7OuaAlzu4NT1xO8zPxqj7B9lW1aEIWFfwVP7K8SalS:mXqMRMon+Outlz/R1Q8zPMHFW1/4P7Kb","tlshash":"be916d2070c1d174f1da3db6c25fe129c63984bc4f4bacb37436a1ba2da9805b6c6809","first_seen":"2025-09-24T06:54:00.267323Z","last_seen":"2026-03-05T20:25:50.979149Z","times_seen":4,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":86,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-609e9efa559db.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-609e9efa559db.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1670\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-686\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82c4adcd0f924ad8ceec8c4015968c35","sha1":"7b9c852f7742f8d787ee7241fe69c39091ae1665","sha256":"fd457488ae9c61ad64f2be347b5b860967253e743ff5607643d07f3161904675","sha512":"787c85abfaab718b48dceccc986013d2da8a1d63ef4eb1fdb7e32b19b5ae7b092cffb150023fba7a4eff23b2b9edeb23c7176a53de366659c2c959aee4ca1e8a","ssdeep":"","tlshash":"a331f8a072cb6f21bb9c054d25caf2261b65f0a0f54815b3604cbab749ae84d1c9bb0f","first_seen":"2025-09-24T06:54:00.278846Z","last_seen":"2026-07-12T14:30:59.984526Z","times_seen":13,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":131,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-6762dd43184ee.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762dd43184ee.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1536\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-600\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1536,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e2ec6840a6d3b57d480b171a11a6c8de","sha1":"1a8da445b0fb375087e53702fd42c87b2cfa8d4c","sha256":"91df6ba50d599e8b3761d74b530ec664121f733dcdaaf39cf33af2fb5cc5215d","sha512":"3c0a5ba65be141909e7771162cf0a3c949e563634bc5ed8e216c61fa67945ba1269402a7cb480d319e52f27a8d6321d8e1fcef5e74f406a216845cdb5ce2bbe7","ssdeep":"","tlshash":"c831d769c46b8ab2cc24079d23650da1c98286d9c99cc9eba49c9c84066d277f6dcb78","first_seen":"2025-09-24T06:54:00.219739Z","last_seen":"2026-07-12T14:30:59.815964Z","times_seen":13,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":309,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-5c793fbc62a1f.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793fbc62a1f.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1316\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-524\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1316,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1b8ec334cd43cc9ff532fe33522a1eb","sha1":"d6a8ba3c8d580662fdd4177455de93f4c256100f","sha256":"ddfb36e9d849939cbdb814bec2997b2501f1d15a88e996a86c17dc8e7c101a4d","sha512":"5abe52d393ceffcdf5990a2a495986f1207641f6dc3ed441d1eeaf4477fe557dacf9c0638e8a6465b0b2a28e97627b4f5dd3c26211944dfe715bcca5246a0916","ssdeep":"","tlshash":"5b212b12e200d4aff80ceac8104611934f82fd314492c8d8e27d9411ced2c5987613b0","first_seen":"2025-09-24T06:54:00.360997Z","last_seen":"2026-07-12T14:30:59.993221Z","times_seen":13,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"cases-batle.ru/ws","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.326Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cases-batle.ru\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: ggPg3xIzYEwW5DBjbWOjsw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T07:24:10.984473Z","times_seen":17541736,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":1,"connect":30,"send":0,"wait":29,"receive":1,"ssl":71},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/live-drops.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /js/live-drops.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 8713\r\nLast-Modified: Sat, 29 Mar 2025 19:40:19 GMT\r\nConnection: keep-alive\r\nETag: \"67e84ca3-2209\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8713,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"3e85de30e4ebcb326bf4e68cb092ccb9","sha1":"3b333ab453a196ca985f41b893bccce3bde01f55","sha256":"6e1e7283987780d62140e877ff5faf2dce19e9a10049b7d377c0a43cf041be18","sha512":"e6791689d56b15e6eb347faa30b95b33297a61bcf18aacd7d0abe0b7ac8e1b4c3d096638a5fd4c1ce13f3efeab1f420e811c516012cc4ef0b42b8c6b83ec40bf","ssdeep":"96:odh5tAv3w01/u0eHL9KTcYe4ySXxN10NEkGc1KtPJ9TGhFx6:ob5tAvX1/peHL9q9hNyE+UtPzE6","tlshash":"fa02332862f3013701e760ae1fa792193ae071037256ce597f7c47819fd6e55e8f2ae8","first_seen":"2025-09-24T06:54:00.318209Z","last_seen":"2026-03-05T20:25:50.959942Z","times_seen":4,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":1,"connect":29,"send":0,"wait":29,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/no-module.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /js/no-module.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T07:24:10.984473Z","times_seen":17541736,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-6762c2c7c724a.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762c2c7c724a.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1390\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-56e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa773bb18fec160c1e28379b63bb9c5c","sha1":"65d0249a112cdc0af082fab52f3aba86ba11f244","sha256":"a704a94782edcda8d592ae664e7e42fb07b1eb2c0dba1ff5e94710d6f4ce18ae","sha512":"8ddd772661c460e352494a9673028929088fb094a375d607364663982e536ebc4ea88d2b3788b66fcc6c698603f014eddc24d0a1a5097beec89fd5d5139cbfec","ssdeep":"","tlshash":"9f21b6061cb9ebb57dea695be7c5c66d1863307060184fa10ee0b4fe9ba2399d08df05","first_seen":"2025-09-24T06:54:00.263791Z","last_seen":"2026-07-12T14:30:59.882581Z","times_seen":13,"resource_available":false,"data":null}},"time_used":550,"timings":{"blocked":519,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-67371470ea677.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-67371470ea677.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3670\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-e56\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3670,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76088e85e54091f55de8cddc8c8047f9","sha1":"7acecff429b4e2d638d636406317cc47fa97c00c","sha256":"a64f1f26efa18a11f88e22d182183cd455bb85d94840d9479328d5a35d1f3ff9","sha512":"79fa6b62f5b779a33d4ec18a8c3fb5b4966c7821829cad3196fcdb5d3fca47ce90d80219b9730a90a98889e2bf3c454cc1fbe5d03b923040a1498a8380ab0339","ssdeep":"","tlshash":"a9717e6297907610cd4e453069f10e7ef6f9bbf049d18dba92c19199fb37ac0d89d047","first_seen":"2025-09-24T06:54:00.331596Z","last_seen":"2026-07-12T14:30:59.668514Z","times_seen":13,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/logo-footer.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/logo-footer.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1782\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-6f6\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47fc218e7fe2b0f6ee44e73193ab6b2d","sha1":"52c7cd3268bdc0c0d641f2409ddc4bccd71542e9","sha256":"2c9c9447809e5ca6595888ff879a737c1c60ff99e1c8a433c815edc811cc6c51","sha512":"600d1def1155627a3ac7a2d22f33b31b13c86530f61b6317dc5ec89c67f8db9290eb90d5f017d307a31c334c2c27b8d977bddf72768cfa022218d1fc4b5d6e1f","ssdeep":"","tlshash":"e93129e8fbdd73b98926bbe22b9ea9008989e585b541b60734014d039d81379ab52c21","first_seen":"2025-09-24T06:54:00.248984Z","last_seen":"2026-07-12T14:30:59.816741Z","times_seen":13,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/svg/funds-form.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.300Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/svg/funds-form.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 14531\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-38c3\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14531,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bb42a82847526b11dadb94771cbba25","sha1":"a03193208b8fc447b3d0b5c9d648c967fc7b0fae","sha256":"a676b438b775a8101ef2bf29afd5ec688367f7e78c5e996bf97dbd7a89e24e7b","sha512":"9b731bfcebc4c9ab2bc328afcdeecb8e4af84cfae045d36091fb8b8ebb993356a0c3d79f6973ce907ed40277f99840bde0f0dcc76e19305516153e6b1d635992","ssdeep":"384:IRBD41UdF05VajbztEoV+xDMf2NHU8enbODMnkS:InD4eF0TaZEE+xQFbhnkS","tlshash":"6362565e9b732af49c4587d19d2106b03f1f907f2eab8378c294d770ba164fcc8919a6","first_seen":"2024-12-02T21:43:54.602171Z","last_seen":"2026-07-12T14:30:59.868115Z","times_seen":56,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-67616f6d5f2e9.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-67616f6d5f2e9.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1626\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-65a\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1626,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cb5e00093dc5030a7b9c06df41236a47","sha1":"410503896eab40ddb8afc5eba588d9a86a5c17b1","sha256":"95feb7b1caeabdb2e61e114f238b4f0b9cc36e8a0f51ed0e88280f32e9eafb3b","sha512":"5763696d830821556e5e8b3e5d9b95399bec622106e73f2dbb2b77b46718bc4976cde6a78d64b3d3f7fa938c90684bf7e139056b5817b30790a6f13013b12880","ssdeep":"","tlshash":"4431eac18142570414fb1adba74bafc16356155499234bc0e21ba4acfbbf96a454006d","first_seen":"2025-09-24T06:54:00.34975Z","last_seen":"2026-07-12T14:30:59.867147Z","times_seen":13,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":302,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.683.front.middle-67c1b6525c9c6.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.683.front.middle-67c1b6525c9c6.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 4146\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-1032\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4146,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"025042bfac3e03fb645ce682930c0415","sha1":"eb6a4e2c3f68fe92e24a0760a969cbc70f2fbd45","sha256":"eafd57bf8da57733e5473cfef4fb8fcf4e628837fe0674b326016bdd74b38969","sha512":"5815ef9af4c1a5583304587d997a5bdbbff148db23e2210bc76d8779e1b81800be65020b77f0037274da79aead09e95d4ae18dfca768a185a4f1972a668ee069","ssdeep":"96:RVj2vb3Tm+FuvzTsjK/wBBqKcfCOAX4w62SuPddQZ:RV6zTv0WK/wBB5YCnXn6EM","tlshash":"a7815c8b489ed1bed5a9cf3123a87f8888b718d6894b7d1adf774890e423c82d85445b","first_seen":"2025-09-24T06:54:00.236315Z","last_seen":"2026-03-05T20:25:51.018439Z","times_seen":4,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif?t=gdpr(14)ti(4)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /metrika/advert.gif?t=gdpr(14)ti(4) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ntiming-allow-origin: *\r\netag: \"699ef608-2b\"\r\nset-cookie: bh=YKTJp80GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Fri, 09 Apr 2027 20:16:36 GMT; SameSite=None; Secure\r\ncontent-type: image/gif\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: *\r\ndate: Thu, 05 Mar 2026 20:16:36 GMT\r\naccept-ranges: bytes\r\nlast-modified: Wed, 25 Feb 2026 13:15:52 GMT\r\ncache-control: max-age=3600\r\nexpires: Thu, 05 Mar 2026 21:16:36 GMT\r\nstrict-transport-security: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-07-26T05:44:25.2208Z","times_seen":110002,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/steam-login.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/steam-login.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3258\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-cba\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09bc1e0a30306661df1797c91b73d09b","sha1":"c83a8a11e5549eba4edd18d19851be3949cabd6a","sha256":"4c4ed6afb880efb895df40f563b56f215f6edd11800d4209d30a7085c18673c0","sha512":"308e5ddf9c04938357497369f912ae486a057ea8fa22949fd1bd3485c1dcb2f725a1f3616b0c4a2d1dfb7082b7c3bd312e549ef92ff0141d5a3a47c130cc753e","ssdeep":"","tlshash":"95614b8de71494cae219ec922b9bf62c90309209db37c92e64c7e5326ce49c6d931e57","first_seen":"2025-09-24T06:54:00.238311Z","last_seen":"2026-07-12T14:30:59.914363Z","times_seen":13,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":256,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-6762d08a42de3.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762d08a42de3.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1558\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-616\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1558,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f817917157cf2f1951a56a56dfd803f9","sha1":"e2b1e1ce0eed4248cbdd8e42245ffd6b2a8f29e5","sha256":"893ecdf10e19d361aa10c22290e8cfbbc7486a222037aff77e45e74b1c729182","sha512":"cfaf8ad2ab483bea08b2373b7dd6a74bba60a632f0189ba8e72c6e18e69129eb13f0f69a502309baab5ef5f1b69f744452a0b5cd9a89f6b4e55d1d133adc38d9","ssdeep":"","tlshash":"48310ca7f47c14b1d54dff5c29c487d15d20984ed607179d9c29e2ca70e471b69c6323","first_seen":"2025-09-24T06:54:00.290971Z","last_seen":"2026-07-12T14:30:59.983645Z","times_seen":13,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":108,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-67331b06e19c7.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-67331b06e19c7.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1794\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-702\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1794,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"31c23d21c9dccefd435c2b5383576108","sha1":"e3d1b3fce775e0cbb7d4218c1770983ac59586ef","sha256":"b38bbee480b4561775e3cf3f98102861959efb60776cd808f32fca2a234b2043","sha512":"cd75b4c143aeae3b452fdaeb690eb527214050422eab1dcb7db720c5b0045955d8570ad552e58391070f607cfb7e2b75cb8d3fc19c5cce4c86f33eb146d7d32d","ssdeep":"","tlshash":"6f312b8d173adae00b2d47a061252650f65a19dc025cae96a4d13d1af32d82fe4cb2da","first_seen":"2025-09-24T06:54:00.226144Z","last_seen":"2026-07-12T14:30:59.918939Z","times_seen":13,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":106,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-675308f969887.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.196Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-675308f969887.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3420\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-d5c\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3420,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e0c3d87f5a919bea77d7076011861e9","sha1":"9aecc9b2f5b03f319e60f4ac2e6ab7fc5cb694ba","sha256":"0e4f23375aa3974a7c53b2e76d856a8d9ead756fd2dbc4e542b3391402032fa2","sha512":"73c5ace32e35a886c77243a722e70981339f53efbbe8e18799d55a5babbe99478fb70e207afa25f810febcb2592b3915b5b564ac7be283ddeb77831c8c97af52","ssdeep":"","tlshash":"19616d7843c9c7f4d6d1b0b470e4abadf128a203d24b76382dc46d8321842c24e19edf","first_seen":"2025-09-24T06:54:00.22976Z","last_seen":"2026-07-12T14:30:59.905407Z","times_seen":13,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oldwwweeeewee.com/dqcgqfokjobjqnigbimmvhhztkgaflhcbblkiycqmhkqfn","fqdn":"oldwwweeeewee.com","domain":"oldwwweeeewee.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.089Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /dqcgqfokjobjqnigbimmvhhztkgaflhcbblkiycqmhkqfn HTTP/1.1\r\nHost: oldwwweeeewee.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 152\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T07:24:10.984473Z","times_seen":17541736,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 05 Mar 2026 20:16:34 GMT\r\ndate: Thu, 05 Mar 2026 20:16:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49148aa6aa83030c8107b048340b6d45","sha1":"0120fa4085b32b021b14aeae199e5dfade9bbf78","sha256":"c9232eb823d220300177aba31f7efd6e78e0ccdef46558336f8ede5a6efbfdc4","sha512":"2e5514ec03270ebe0019fbafead0722e2ab5e87b3ddc3e2c6a2beab2ab4ca36d6fa22835e6a88827eaba8f0fc9f0819a94e69fe3049539a389076b6baa8521fd","ssdeep":"192:NCddw24WrqKnbqGIwV4Mrz7xCAAN21/rqbnbqGIwV4RazqbCuuH2PlrqxnbqGIw3:0AYqY4tjXqY4ahhqY4tU8qY4Z","tlshash":"3ba22ba00027185063431de623de7e34ee0fa2657048d0766bfd8b9beedad6963b435d","first_seen":"2025-09-17T06:09:26.673739Z","last_seen":"2026-07-26T07:31:17.616046Z","times_seen":16482,"resource_available":false,"data":null}},"time_used":319,"timings":{"blocked":119,"dns":0,"connect":20,"send":0,"wait":44,"receive":0,"ssl":131},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.691.front.middle-67dd581438047.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.691.front.middle-67dd581438047.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3084\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-c0c\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3084,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c193463e7d527aff7a2700a08e09b293","sha1":"750ac894b5bc9d19f7de133fb3ac7e0547676ed5","sha256":"3cf28fcc92c1b196d822b2581e53eae2d7277d57fad2001e9294ef5b3dcd308e","sha512":"ea42d37632fb84902f3c88a4c37ba950b05f75701ac27c256a06be06d3ee3693227fffa1d8ae520c0d44c91af9f9ba012e7e0d370357921b95ae69c28d3ae800","ssdeep":"","tlshash":"45513bee39efb38f0237e2470d66369456af064a9429af45d5816152c21251cfa5608d","first_seen":"2025-09-24T06:54:00.342024Z","last_seen":"2026-03-05T20:25:51.008404Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.684.front.middle-67c1b6ac3f2ce.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.684.front.middle-67c1b6ac3f2ce.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6100\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-17d4\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"791c973b05a328e66a140bd8c1b09f05","sha1":"c948c4e76b6580e6f5f61a0f33a6590f4be8915f","sha256":"c61c616d618a16f950a03a162f7fcdde249fb4556e95be04350bf0221af61f3e","sha512":"ef3d6690a67f583b8b630795ea19f4b54cfccc57b75d4186baf4c4437e5ba12577c285410c6cbb10af4a9a5d36f92f05bfb510a65a807c28abe0e7478282ddb9","ssdeep":"96:jWzf5bcpQbljVdb/eh2Tc+T62HfA45nUqK595FVAFn8ZLHKgbq2QuvRNAGaVNf7d:jWz1cQVb/eoTnw453K595FVAcLiuvR+D","tlshash":"bdc19d3b5012f83062d2d867d499e902ac58dc12a3e999bc12bd7e0203b5842b751b9f","first_seen":"2025-09-24T06:54:00.30467Z","last_seen":"2026-03-05T20:25:50.989169Z","times_seen":4,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.678.back.middle-67a3355ed2703.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.678.back.middle-67a3355ed2703.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 13528\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-34d8\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13528,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5f4826f4eb529bc14ccb8db9349a2b8e","sha1":"0d10f3280cb1556b585ad6b12d571bd0d35a1af3","sha256":"a868e051392c253be62de2ee522a64669c94915435988560a7e49b633e8c7e90","sha512":"10074b02f34bdedb0ca25b7d6b4793106c7e12c0bbb1e103b21b03ac6669481d9bed6aefc79abd2c457a59095eac3a300a4c9f8f6f5f75b69c2c4d849baf7314","ssdeep":"384:p2yo9k/RPrFTBwQKQ4kIFvfVmlLADY2lWSJoc:smRPrFT1OrvtMLGlx6c","tlshash":"5252c01f84151e6e9bdff3333a063b32025b3d341424e6e5e954ada49bb88c6263b5a1","first_seen":"2025-09-24T06:54:00.271266Z","last_seen":"2026-03-05T20:25:51.025199Z","times_seen":4,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.684.back.middle-67c1665d3f253.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.684.back.middle-67c1665d3f253.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17258\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-436a\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17258,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44deef54f12ca6461e4b63e11b7851e3","sha1":"9ea6340c484c64dbc1c2ffeaade2838196b24f4c","sha256":"9c43d7cb6d059f1de9b3d68088b25fe4cf5e2ecf4cb49083d7ddbb17d0b1d96d","sha512":"eb6d352bc3f2b38a44cbfa8d162c03337ef2b49b252d0955e8b3d19cd2e22c3f4dfeaa17659b440c7493153ff5a127ccc61ad9ecabf185b3270aae27e8e86be9","ssdeep":"384:ODtSyWbrf0lM5ikfF320PrSSAXMAFl+nj1GgZSL9X4:8fCr553FTPubXMK4jdZSL9I","tlshash":"a672dfdcb8aea6ff73d08d31f11111ac785741218d806f5cea9436d783a428ace89bd7","first_seen":"2025-09-24T06:54:00.303166Z","last_seen":"2026-03-05T20:25:51.010044Z","times_seen":4,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/corner-right.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/corner-right.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1698\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-6a2\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1698,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ea9f090b88546df25375bc9159d504bd","sha1":"9a3a1e2d11783a5b654c4ef13935c72a2d0488c2","sha256":"0a8b64f2426bea67af7c6851f22061a17bec3dfe1219e01f2cf3d75582c384b5","sha512":"803f86a2d59d19633742e6b7c4eb5de0468401d8ac97eec0abc57da3b7c257ed9d37bbf3fd11617a2a116f83d23407a50f92b03b681b883224cfb2de2936db62","ssdeep":"","tlshash":"e731d8c2f29031918abc8929d0b52c188a142a4149e6ce8ff55e8e2bc80d0d0b5cad6a","first_seen":"2025-09-24T06:54:00.336384Z","last_seen":"2026-05-29T14:16:16.722872Z","times_seen":9,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/utils-baec67c9.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/module/utils-baec67c9.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 1771\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-6eb\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1771,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1770)","md5":"e4b86f03ee973aace0b726cbe80d0afc","sha1":"6d81fb437f8c556b69486093badf374f480dad2d","sha256":"57284eda86c7eb7762b57ea47a68f5fd3a479bbd0b4cb6de5ae1b1240104d214","sha512":"dda890467c196f48f3d69c4a690d09734d7b6a01094d2b22afe1eb0e7848a76b98ba5fe04b8750f78eb2aeb791c8862d3445f94c253eca511f7e05c8198909bf","ssdeep":"","tlshash":"6b3143be3340b0bb8767206040ff9117f078bac2595b6809d484b0d33e2383496fbda9","first_seen":"2024-12-02T21:43:54.640187Z","last_seen":"2026-07-12T14:30:59.919876Z","times_seen":14,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/svg/case_hit.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/svg/case_hit.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1766\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-6e6\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1766,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"367cff6056805af45a1ad47f0eb7d30e","sha1":"df69877a180a42e51235782454bcf7305896e734","sha256":"37d1e974e5028a577c5be2df60a1b9d87958d8150f3e5c77a4867d99027cdf9a","sha512":"919b8407c6459cdfd6d0d3aed20e26ff61261a9b942c5b08d0c5130d2900e8526eedf5e4c2fc2a8db6753374b25eb927e76fc21e0fdb61250806771a71671f3d","ssdeep":"","tlshash":"c03196b6d2e95c12f48c87e4c968a0a9f90858dbc541c3b5f4dead693f360d18e8c5e0","first_seen":"2025-09-24T06:54:00.233063Z","last_seen":"2026-04-17T09:59:08.782466Z","times_seen":6,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.689.back.middle-67dd3c97bc96f.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.143Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.689.back.middle-67dd3c97bc96f.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17374\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-43de\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17374,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f8d512ac5d2afe27596f5141c13b3382","sha1":"c4f6b94a850938ebdb2cdce2686c35c73a84143f","sha256":"61d5fbfebeaccf2fbf54732ad3fbdc329f8ac701249027bb1349809d3c499c48","sha512":"9ab59da4365ca8b03e64b0cf2a77188cad03cb3f6c6c75c55bba8efc9ff2d8c2a485f97234060ce2474cd445a8b2e667c7231246a8563fbcb7c3ed69ad73f962","ssdeep":"384:jY9gfhEt1Pt7Ny/7IjDM34lEh7nLPc2AQk8XAwOfzUDYvz:sq5E71N+7w434ehDLPnAQjqbUDg","tlshash":"0372c0bdfb019edf64b24fc04424231af98be581ba5d34750076257907f828e97fa0c9","first_seen":"2025-09-24T06:54:00.277695Z","last_seen":"2026-03-05T20:25:51.007821Z","times_seen":4,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.682.back.middle-67c163c0e7b53.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.682.back.middle-67c163c0e7b53.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 16868\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-41e4\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16868,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2bbcc4a084902eff8d6fdbf7173d5dd5","sha1":"7f79ccd8517f8f84793a1c6c8b2829479946e45d","sha256":"684477e0303f9bae6eec7134d99b511bf935b50297eb3d24686fd98dba77b632","sha512":"6fc922d5f9b0b86388ffd93d8bdd7c83811da392f9981393c91695605514cd4e0d7741dfd9a230c7f0f8bcbe57ff53b7c9821c5f0ebe1137edb92930003b14f2","ssdeep":"384:iXZyi1baTPUqX/legwLDmpicVgZlyL5mblgingKS5SpC6:4/UpX9eNWpZVgZUL5mbqAgRSU6","tlshash":"5372c04425ad57ca3c59f4a823181f29c641281cfd1f398c5c6f2fb732ab96d3aa15e4","first_seen":"2025-09-24T06:54:00.355572Z","last_seen":"2026-03-05T20:25:51.009131Z","times_seen":4,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":32,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-5c793df2b330a.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793df2b330a.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1498\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-5da\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1498,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c720837e7c57e45e79b4d51919242815","sha1":"846043dc030d077ed111cbd6f21b5dc269161883","sha256":"033f4873c6b398f56601762585c2d8396f18facd868a4d67fa2b7cb52b809544","sha512":"99fb8d08795598d1e43a3a03841f475b8eb3ea30aee567bc31d34631e05b9d852eeedfb4eb4b7db29cd598fca2ce714fb6c5ff70b5fb9691475ed5fbd044f6c1","ssdeep":"","tlshash":"8f31c7cab7714fbcdf801724e07667d002cae4d855928cb220e916918ac46940b4baeb","first_seen":"2025-09-24T06:54:00.301767Z","last_seen":"2026-07-12T14:30:59.89105Z","times_seen":13,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":159,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-675310dda99d1.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-675310dda99d1.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1110\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-456\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1110,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae9e8be98a7e959a206662b5297c50ea","sha1":"32ac6f693372fc58942cd2e3c6dcbfa00f2d9071","sha256":"4125c2e2e13f30df491f56ef7e4209e477cc6618265724f3d375019071848c9c","sha512":"5781f8ba92bea47faf33eeb43cc3b226e415b9256faaf9eef6c001a264e07217b50b1777069d3103ab161d05168f7c81e799b61566dfb8953d3001273d3e7712","ssdeep":"","tlshash":"2111f9c7156b4194ee97b818b83313c5ced8203ab33cf34fcf0401a419943891368a4c","first_seen":"2025-09-24T06:54:00.345108Z","last_seen":"2026-07-12T14:30:59.843789Z","times_seen":13,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":159,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/index-ba6f7af1.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/module/index-ba6f7af1.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 15035\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-3abb\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15035,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (15034)","md5":"ead5b126d2af3da5885f478bb7af0ba8","sha1":"1132097a1055feac2aef2103dcce5b12de928571","sha256":"1f148469472d047bca7376ad2475606b41d4b524b4b3767cf7bc6b760c40700e","sha512":"9fd6c9db8034bad4040048733f1a013d28ca0515802cf40235fc16166fe4d2d3b771f0a6faa48b27496aea0db3d6804315500447df1f6f79797b01a8a5da8198","ssdeep":"384:4fMK/QCtiXbJJMcP4ss3dwvxzx1j+zFuEMbWCtdbo+OYctS06ECQa:4fMKvQXjMa7s3Wvxz+zFuEUWCtlo+OXW","tlshash":"956285993280b07653ab01b690af455af3347454340b84a0d57cbcdb3e726ae47ebf6c","first_seen":"2024-12-02T21:43:54.597652Z","last_seen":"2026-07-12T14:30:59.979264Z","times_seen":14,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/bg_pointer.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.200Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/bg_pointer.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 544\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-220\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":544,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6bf2ea5ea2d26493e066f1c7a751a8ed","sha1":"2e4b2520e8a439d5fe0bb3086baa2ab908a89952","sha256":"75a42c26c75e15ae305d7ea3d0c5dfe5c7ebb8d3e489e2fef237b4f85bf9fb72","sha512":"9eb797e4320a1b50171e2bb112385eb3794df86ade128405c4682118c075f204131482e19b226716d0d7ec1d2102033b3278ba2677a45009cae75f91394c8861","ssdeep":"","tlshash":"6df02619b422cb5c57764818a04bf931896eb420c268199437161aa00d1351c2734a97","first_seen":"2025-09-24T06:54:00.364154Z","last_seen":"2026-03-05T20:25:50.968887Z","times_seen":5,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100289301?wmode=7\u0026page-url=https%3A%2F%2Fcases-batle.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8he8e6rm6azi046aj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2401%3Acn%3A1%3Adp%3A0%3Als%3A875800220503%3Ahid%3A304519650%3Az%3A0%3Ai%3A20260305201635%3Aet%3A1772741796%3Ac%3A1%3Arn%3A406337623%3Arqn%3A1%3Au%3A1772741796861752653%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1536%3Awv%3A2%3Ads%3A172%2C102%2C31%2C94%2C%2C0%2C%2C1194%2C87%2C%2C%2C%2C1719%3Aco%3A0%3Acpf%3A1%3Ans%3A1772741793602%3Arqnl%3A1%3Ast%3A1772741796%3At%3ACASE%20BATTLE%20-%20%D0%9E%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B5%D1%80%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D0%9F%D0%BB%D0%B0%D1%82%D1%84%D0%BE%D1%80%D0%BC%D0%B0%20%D0%9A%D0%95%D0%99%D0%A1%20%D0%91%D0%90%D0%A2%D0%9B%20%D0%B4%D0%BB%D1%8F%20%D0%9E%D0%BF%D0%B5%D0%BD%D0%BA%D0%B5%D0%B9%D1%81%D0%BE%D0%B2%20%D0%B2%20CS2%2C%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%D0%B5%D0%BC%20%D1%81%202018%20%D0%93%D0%BE%D0%B4%D0%B0.\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952132)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /watch/100289301?wmode=7\u0026page-url=https%3A%2F%2Fcases-batle.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8he8e6rm6azi046aj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2401%3Acn%3A1%3Adp%3A0%3Als%3A875800220503%3Ahid%3A304519650%3Az%3A0%3Ai%3A20260305201635%3Aet%3A1772741796%3Ac%3A1%3Arn%3A406337623%3Arqn%3A1%3Au%3A1772741796861752653%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1536%3Awv%3A2%3Ads%3A172%2C102%2C31%2C94%2C%2C0%2C%2C1194%2C87%2C%2C%2C%2C1719%3Aco%3A0%3Acpf%3A1%3Ans%3A1772741793602%3Arqnl%3A1%3Ast%3A1772741796%3At%3ACASE%20BATTLE%20-%20%D0%9E%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B5%D1%80%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D0%9F%D0%BB%D0%B0%D1%82%D1%84%D0%BE%D1%80%D0%BC%D0%B0%20%D0%9A%D0%95%D0%99%D0%A1%20%D0%91%D0%90%D0%A2%D0%9B%20%D0%B4%D0%BB%D1%8F%20%D0%9E%D0%BF%D0%B5%D0%BD%D0%BA%D0%B5%D0%B9%D1%81%D0%BE%D0%B2%20%D0%B2%20CS2%2C%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%D0%B5%D0%BC%20%D1%81%202018%20%D0%93%D0%BE%D0%B4%D0%B0.\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952132)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cases-batle.ru/\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\naccess-control-allow-credentials: true\r\nlocation: /watch/100289301/1?wmode=7\u0026page-url=https%3A%2F%2Fcases-batle.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8he8e6rm6azi046aj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2401%3Acn%3A1%3Adp%3A0%3Als%3A875800220503%3Ahid%3A304519650%3Az%3A0%3Ai%3A20260305201635%3Aet%3A1772741796%3Ac%3A1%3Arn%3A406337623%3Arqn%3A1%3Au%3A1772741796861752653%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1536%3Awv%3A2%3Ads%3A172%2C102%2C31%2C94%2C%2C0%2C%2C1194%2C87%2C%2C%2C%2C1719%3Aco%3A0%3Acpf%3A1%3Ans%3A1772741793602%3Arqnl%3A1%3Ast%3A1772741796%3At%3ACASE%20BATTLE%20-%20%D0%9E%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B5%D1%80%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D0%9F%D0%BB%D0%B0%D1%82%D1%84%D0%BE%D1%80%D0%BC%D0%B0%20%D0%9A%D0%95%D0%99%D0%A1%20%D0%91%D0%90%D0%A2%D0%9B%20%D0%B4%D0%BB%D1%8F%20%D0%9E%D0%BF%D0%B5%D0%BD%D0%BA%D0%B5%D0%B9%D1%81%D0%BE%D0%B2%20%D0%B2%20CS2%2C%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%D0%B5%D0%BC%20%D1%81%202018%20%D0%93%D0%BE%D0%B4%D0%B0.\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29ti%281%29\u0026redirnss=1\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\npragma: no-cache\r\nlast-modified: Thu, 05-Mar-2026 20:16:35 GMT\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 05-Mar-2026 20:16:35 GMT\r\nset-cookie: yabs-sid=711168811772741795; Path=/; SameSite=None; Secure\ni=7BeSLcb54lFomU+dsJCG0ObJpRM2MNvWF9WorC1QxSHGUJ0q5+SZ1WVqoHfckEQWk4nhErdgtbG3xNrfzrw6yeRUbuU=; Expires=Sun, 02-Mar-2036 20:16:12 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=1540553621772741795; Expires=Sun, 02-Mar-2036 20:16:12 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=1540553621772741795; Expires=Fri, 05-Mar-2027 20:16:35 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1804277795.yrts.1772741795#1804277795.yrtsi.1772741795; Expires=Fri, 05-Mar-2027 20:16:35 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YKPJp80GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Fri, 09 Apr 2027 20:16:35 GMT; SameSite=None; Secure\nbh=YKPJp80GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Fri, 09 Apr 2027 20:16:35 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://cases-batle.ru\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":667,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T07:24:10.984473Z","times_seen":17541736,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/svg/case_new.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.879Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/svg/case_new.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1998\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-7ce\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fa0fc159287f97cced8e84993a11fe9","sha1":"a4b5245b7a6a820b6aa7230cbf58d290f4f9e981","sha256":"a30c3d3c5ee552c7073e25af1d0397908e8b73000b568883954019eefb39b1ed","sha512":"b357bcff804dedcb8f636d0ad41e57758c944d8b8e68df56e0ca0e4503bbd5e362b5b39b9585bef498fb1e46210c861dce8c200f5f919cc702e601631258547c","ssdeep":"","tlshash":"8b4194f2d3e52c25f44c87d4c6246049be10248be191e3f4f4ceae493f224e2889c954","first_seen":"2025-06-27T04:58:45.862319Z","last_seen":"2026-07-12T14:30:59.854Z","times_seen":57,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-6762d0587888c.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.499Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762d0587888c.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2312\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-908\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2312,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"516c7d9d9f13fa52e0cf3de923cd4b4f","sha1":"b2cb974ce9196460c9bf8fcd8884ba3fd45f07a4","sha256":"f7efe3074148d82c7d551ecc46f99e03ad31fb56292e86090873bf26873dede3","sha512":"13afe56dc4372685539daccf290ee99346a8af16a41de391ac83de3d8fda9c996167850fdcd470ba776f85aefea8690a1aef318994a3acfb025d2052560e6a35","ssdeep":"","tlshash":"b241292113759d94e835fe2d68530ab512250428f14b6cf305feef7a80902e94bf26e8","first_seen":"2025-09-24T06:54:00.217428Z","last_seen":"2026-07-12T14:30:59.741764Z","times_seen":13,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":193,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/logo-bg.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/logo-bg.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2630\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-a46\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2630,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30843874f24f22b0f362bb05d37c79e8","sha1":"5c2e7950d0316cc50b2c1becdb491d6f7d6c8c98","sha256":"e7496cdb9c9d2b2277adae588c35f955a50e2dd6d93c943c8df0a567bf65e38c","sha512":"55e62d7746ed2d2d9a368fd6003b463b531838e6489cd646e79ca7dac8bdc414ebea59010a1a61bc1b4e78422d16d2c30f5dcd60b558c7200fdf05913805cec8","ssdeep":"","tlshash":"87515b8784899ad0b07d5af34a6f7e0e43c8c03a8b513be0064eb7b061e00930a06348","first_seen":"2025-09-24T06:54:00.348191Z","last_seen":"2026-07-12T14:30:59.698612Z","times_seen":13,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 10:47:52 GMT\r\nexpires: Thu, 04 Mar 2027 10:47:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 120523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-26T07:26:10.840508Z","times_seen":315959,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":33,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-6735fb5a384e5.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-6735fb5a384e5.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1474\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-5c2\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1474,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7756d709a8cfdf931ae0dbcfd99e8e10","sha1":"ddeb1a3fe9820dfc432663098761e39329ca8544","sha256":"45fce6a4d828cc8f819456398ca687415f4e4a78663580b93ada765c143b4bb5","sha512":"27a9b1a651a460d442a0c9f86f5e4236f224ba2755f20f5024d054e6cdb52d96c32c60b97662809ed18078a5c5cecc27538e921db9c1fb24f6a37b1fe5a867e6","ssdeep":"","tlshash":"1431e95711d20c40da6f3050bb7ab381b62c288690d67d58baf095a265314ac7c09e80","first_seen":"2025-09-24T06:54:00.321418Z","last_seen":"2026-07-12T14:30:59.890135Z","times_seen":13,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-675fd10fb9c3b.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-675fd10fb9c3b.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1272\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-4f8\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1272,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6219d5ab565dbfd0199ba94d1b180784","sha1":"e95694dcad9803eac12330edce4a8362c4891b33","sha256":"875b90967063185062dba2206dac1b8dd546c0bfe07966afb569d61b3373c0cf","sha512":"6cc03d6fe1bd840091aee13e9b3b12c31ca31d73f2de23f2883c630089f3482f70a64796824c6655785f1c20faee5fb6723c3474af26a31e76f07fecc70b1193","ssdeep":"","tlshash":"7a21eabc3188816959944e1097512c407c531126cec44e90cbbb8a9cbb229db828bfaf","first_seen":"2025-09-24T06:54:00.313548Z","last_seen":"2026-07-12T14:30:59.954527Z","times_seen":13,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":163,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/js/api-QQNirg0a.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/js/api-QQNirg0a.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/build/js/homepage.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 58994\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-e672\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":58994,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"bcf5a31b14b7c65967b761e945019b98","sha1":"35c1fe0a83672582102e3790e228ee154bc60517","sha256":"1983b1dd55ad52bb975e8ea75027ad7d6f928e32d983a4843d2f0cbed6bdd45c","sha512":"ab43a834abb81110311f41b3968c60eabf6b19e1d4cd3e078eae6ca1e1ac86f03e2816ca024d49d4dd34d7e685cb70620745ed9000fdd94024278db2b3b7f084","ssdeep":"768:ll+l9eGpBj5OfzG74TLVhlVeGK0h/+miKzAQCHk07Isdiy++gH+hdJAHWQcrH:ck4LOdIx0jzWTdid+hTrH","tlshash":"2d434e8669e320355223b0bc4e4fd91ab224960f2d88fd583e8c56965f0d53da7f1fe8","first_seen":"2025-09-24T06:54:00.254481Z","last_seen":"2026-07-12T14:30:59.776287Z","times_seen":13,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.686.front.middle-67c1b9ad31b80.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.686.front.middle-67c1b9ad31b80.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3604\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-e14\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3604,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96d986540a036928f7b76100167fa459","sha1":"fffeda585c3fa1a1fda061346eec163a8575aec2","sha256":"e43c92c6b8e3e807002b7d99cecbdf8993912ce9a9657f7a90e688213a4895f0","sha512":"756ac28c9e26f460c6912231a96a87c5fe7e83b18420afbde16c066b3d665e9e51bc4131e9802fbb6574c67c4bbafa53f7c03dab91aa8466a038429183548d3f","ssdeep":"","tlshash":"c8717c78a2db7a3d76ad233a3b20056253a0b204d9d26dd04ecb2f67cb597809f12028","first_seen":"2025-09-24T06:54:00.225076Z","last_seen":"2026-03-05T20:25:50.953571Z","times_seen":4,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.677.back.middle-67a33494f2dfc.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.677.back.middle-67a33494f2dfc.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 15472\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-3c70\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15472,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fdfdfe008fc04a447db1f1d9683efa39","sha1":"0fc88fbf014c95c29338829965d6ef8f5e45b5e3","sha256":"d79e953a4fd3fb13ff1c097c261dcc861eb0ce71b4e1679396ebee659e9b668c","sha512":"8708e01631dd114053aac9cde334738b6a45765810b11bce20bde2c8e5919395d48359ff63e33d4a5252a89ba4d568eb271c5e3fc20dd0e034c5a71ef6645269","ssdeep":"384:g1l46wjBx7+FmJOIrvujVWV69EupuKXcFTaDI5+yD:dXCkJOZgQvpuzKI5+yD","tlshash":"a862d0cbb46de275f961ad015778efb690fa1db0184c0a5129cd03ecb9881e2d368e63","first_seen":"2025-09-24T06:54:00.288365Z","last_seen":"2026-03-05T20:25:50.98121Z","times_seen":4,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.680.back.middle-67a5db1bd8c45.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.680.back.middle-67a5db1bd8c45.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 12908\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-326c\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12908,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a016aaf9846289ebed034a83157829b7","sha1":"8560ccc7480ee64de2e599027ade05060b244da1","sha256":"104a9636585684a0fccaf5d98d9b0f248a4c2b485ba373b536ea9fd99d857fd2","sha512":"557a104a406d8165d8fe897df447db2d1d8cec0e41fd835e30a9909504cd345cb9eabe869959b2654ced09df7705d86903e0f69e9ceba5212c861e7f1086bee7","ssdeep":"384:5RByF/19K10plzgRUW3VLybkOKigrGDMGkVta/M1:5RBQ19tplMRUMfGAGkf6M1","tlshash":"4d42c0e90571b65ed4fb8b5e5bbe8447f0434d98782b93c13c980854e2ea05a2c6e17a","first_seen":"2025-09-24T06:54:00.215008Z","last_seen":"2026-03-05T20:25:51.000724Z","times_seen":4,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-671ba1e9b64c1.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba1e9b64c1.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2964\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-b94\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2964,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d267e386f3b714c0f223f6b11e3eadef","sha1":"9e360a9078ccc1aa4de25a1fcf21fd8aaebcfdc8","sha256":"e17e1370e138410d0d27ad49e48748a49b7738d88cd1af97320de07a45636595","sha512":"c4d8d495b13f92a8dd2e2dfccc74b3e348b95867b7c190b96657602c43fdb23a635061015aa59d0c977870817775cc733e7e94d9efd4808bd6531b35f012a758","ssdeep":"","tlshash":"e0514bb11b084aa9c104ed7d24988f46f2383e336816def68159ebd365c44c5042e212","first_seen":"2025-09-24T06:54:00.268385Z","last_seen":"2026-07-12T14:30:59.921777Z","times_seen":13,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.307Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 17:53:46 GMT\r\nexpires: Fri, 05 Mar 2027 17:53:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nage: 8569\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-07-26T07:25:14.346822Z","times_seen":12451,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":37,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 14:51:50 GMT\r\nexpires: Fri, 05 Mar 2027 14:51:50 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:01 GMT\r\ncontent-type: font/woff2\r\nage: 19486\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35156, version 1.0","md5":"062c1f2aaf2d4de07ad2a2f21c17ffc0","sha1":"3fd1f07343bd33a53cd374f7f107dbdf9effae03","sha256":"d5bab8e28732fe3d10dcef4f77b9c248605bbb2a87d289a2539251ceafab536a","sha512":"7ab522d8bc41128be5a15f2cb91f851f6dc5e437afbb90e6191bbe63d9b94a35911f04701fb2b291362b2ae0f0cc639dec2d15e53928afc5769590a2937e81cf","ssdeep":"768:is48okTArkNSgZJAf5jkRcaUNt8wrNPCbJktQV+n+NUB/wo8IEH:5hNTtNSgZJMjkRBUMwrNPC9NV+n+o81H","tlshash":"22f2e172c3787192ae0985760d60cec8986bb2098f7658b0143fdd38ee45345a3f6e6c","first_seen":"2025-05-29T19:30:52.507782Z","last_seen":"2026-07-26T07:57:36.377259Z","times_seen":22222,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-5c793efd65aa8.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793efd65aa8.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 830\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-33e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":830,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d423a2f8f1cc8ffa104dad47ba4e80","sha1":"38ac6dac6d27f8c4231c1f5b138fcb8697c05087","sha256":"8e0ca3cae4b30ab921b34f0811d7b5fe1a557ee0c1691ce98414c4b984edcfad","sha512":"7fa77b762669e5bfaba43526385feae06c0a41d835fba7f6a2e2456760ed08932b73e1cab563b272d4dc90986a767ad4020c93526d504658a2822ed7113fb930","ssdeep":"","tlshash":"f6018628db50d0778054bcaca77951c4d01260ed688ccb41450dbc4b35797e759a5be8","first_seen":"2025-09-24T06:54:00.338755Z","last_seen":"2026-07-12T14:30:59.740531Z","times_seen":13,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/payment/footer/visa.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/payment/footer/visa.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 778\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-30a\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":778,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"992ed9f41271d9da30e6f85d3d7b7921","sha1":"a0aa0ba35487e6a3a14dc8fc0e6859addd2e0252","sha256":"5c559331d97140f750748485d283b7998ca496ddd2c6c86a7882bac51d8d3f5a","sha512":"54b6dfe53c71f4e7e6072b98105a24a271dc3c3c178851d3d8268b0ba71707b64a22e34d2efb564e7818a00e4548c93a9d23e74249c9bf23f3a976d5c623d8a8","ssdeep":"","tlshash":"9801c51703909f2cf7e03aea32194b402902044021b8dc76f6a33c79628558e202fdd0","first_seen":"2025-09-24T06:54:00.231999Z","last_seen":"2026-07-12T14:31:00.010066Z","times_seen":13,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":239,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/svg/case_updated.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/svg/case_updated.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3534\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-dce\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3534,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c8d52a7da1b57688dbe8ef09de9ea48","sha1":"73b89962bc64c2291504bf286646c390752d0be8","sha256":"5cf60cf79e672aa841d3ee156659d487a6258e07b577bca71ffd12a674e3a6c8","sha512":"fe91206f1b6066ec391c954148e02d69908bf00f8e946df04ebce17cd08bc80bdc4a236dc6bd8f67c95080aea81335aa5a496dc7d557e8baeda6e2aff7d44bdd","ssdeep":"","tlshash":"487175b2e3b858bdd84843d8867414693a10559ff2a283f8fe8d599c2f059e3c05c560","first_seen":"2025-06-27T04:58:45.863773Z","last_seen":"2026-07-12T14:30:59.994375Z","times_seen":49,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/sendRequest.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /js/sendRequest.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 524\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-20c\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text","md5":"efb6341f834fc22edc2f2e0c1584c4ab","sha1":"0d6a14e0fc9e4c090791d7828ffd17e4852dacc4","sha256":"22776cc5cec9ac6f9ed58b4ab5dd1a868db717107ada82a9bea067b07ad3e8e9","sha512":"dd0df4d33e6fa6bd2289a297fe9ab4097f98056484f78b4da6eaf84f2c77389e06f5242f58db3b709c9bc49074d48ae2622102986a4d1c12a0145cd7d75af18f","ssdeep":"","tlshash":"b0f0dc87a8f3120217777108ca2b081ab62b402bad26dc747b2c83142fcc56d82713c8","first_seen":"2025-09-24T06:54:00.307844Z","last_seen":"2026-07-12T14:30:59.884376Z","times_seen":13,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":3,"connect":34,"send":0,"wait":30,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/SVG-19e7f4d4.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/module/SVG-19e7f4d4.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 1270\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-4f6\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (1269)","md5":"0fa1f568daad1008a4fd3e9ad48c1708","sha1":"757d3ed4a1e66c920af51cc11f5060c6116436b5","sha256":"469470f3ee516b88125f2b540f1b605dd980a2abe227e117a01cda008e93650a","sha512":"31a964591009fbebe2a4b6ab9ffab972a01e8093e76f83f003904d013c62c2ae1bd24e0850164f1da3abfcf7c067e814d551337ce5eb20c06364518c60f8d589","ssdeep":"","tlshash":"e921325ee4b773be986960846165b10053034827db709eb181b558b224fc34863bfedd","first_seen":"2024-12-02T21:43:54.614338Z","last_seen":"2026-07-12T14:30:59.778917Z","times_seen":14,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/js/items.json","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /js/items.json HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cases-batle.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: application/json\r\nContent-Length: 50612\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-c5b4\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50612,"size_decoded":0,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"3886a7ea07998c1e5bbfceecab2f51ea","sha1":"c332dc357e097cb8b44bc9df312c0704b0488928","sha256":"47c845a4b369e244b07dd8120204f077049fd6926301655fc41d93e1676ed607","sha512":"faed958737aa835bae5e0ffdaf57c069af8da68fabd2d8f2d1928ce912784145aeb5512eec2d5254d5165e74f8c1ea90c683c4b05f516cf9cb210f9bb0e02e7f","ssdeep":"768:6XoDDC0LQ0IGPbN2JVM4N94Q27PbwDOAQdNCsQ03gnsz0eHMMO8Sg99rjjnzx6CP:cAQZnAeAh","tlshash":"1e330e66d6fa2c1f2639149a7c743540a0e4a0e79c56b522b2ac6eccef9cd0fc47671c","first_seen":"2025-09-24T06:54:00.223753Z","last_seen":"2026-07-12T14:30:59.792795Z","times_seen":13,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-6761317ae8fc3.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.188Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-6761317ae8fc3.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2792\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-ae8\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2792,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d600b94f01e78b4d39151edd8b527762","sha1":"2aaa6fa5e1f08971e3a2a4f9e43b37ddb60cdf79","sha256":"c52e47ac3028bd7ece922d03b55c685a6c17f83c4fe13112fd13bd26febf88aa","sha512":"61340b5a806695040b48d93a61b192da7396b3212abf47cb7110e2a519b1b2e5c353b991cc968a288c78aef9c8628ae154732d2d3ab0bfe931291935ef3e2cc9","ssdeep":"","tlshash":"72515ecd699102c7affb790c4e534320e2054762f284255616231fc639cfe58a787f78","first_seen":"2026-03-05T20:17:01.880976Z","last_seen":"2026-07-12T14:30:59.851153Z","times_seen":3,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/100289301/1?wmode=7\u0026page-url=https%3A%2F%2Fcases-batle.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8he8e6rm6azi046aj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2401%3Acn%3A1%3Adp%3A0%3Als%3A875800220503%3Ahid%3A304519650%3Az%3A0%3Ai%3A20260305201635%3Aet%3A1772741796%3Ac%3A1%3Arn%3A406337623%3Arqn%3A1%3Au%3A1772741796861752653%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1536%3Awv%3A2%3Ads%3A172%2C102%2C31%2C94%2C%2C0%2C%2C1194%2C87%2C%2C%2C%2C1719%3Aco%3A0%3Acpf%3A1%3Ans%3A1772741793602%3Arqnl%3A1%3Ast%3A1772741796%3At%3ACASE%20BATTLE%20-%20%D0%9E%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B5%D1%80%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D0%9F%D0%BB%D0%B0%D1%82%D1%84%D0%BE%D1%80%D0%BC%D0%B0%20%D0%9A%D0%95%D0%99%D0%A1%20%D0%91%D0%90%D0%A2%D0%9B%20%D0%B4%D0%BB%D1%8F%20%D0%9E%D0%BF%D0%B5%D0%BD%D0%BA%D0%B5%D0%B9%D1%81%D0%BE%D0%B2%20%D0%B2%20CS2%2C%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%D0%B5%D0%BC%20%D1%81%202018%20%D0%93%D0%BE%D0%B4%D0%B0.\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 13 Jan 2026 21:15:07 GMT","end":"Thu, 25 Jun 2026 20:59:59 GMT"},"fingerprint":{"sha1":"77:D9:43:82:07:FF:48:D3:BA:16:7E:7E:F2:6F:4A:1E:F0:38:14:70","sha256":"4F:23:46:51:0D:F1:FA:D9:9C:39:0B:B0:3C:AA:3B:1E:E7:1A:56:18:24:BD:BA:2D:EA:DB:4A:87:EB:43:86:86"}}},"request":{"raw":"GET /watch/100289301/1?wmode=7\u0026page-url=https%3A%2F%2Fcases-batle.ru%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A6g20vg83qczf8he8e6rm6azi046aj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2401%3Acn%3A1%3Adp%3A0%3Als%3A875800220503%3Ahid%3A304519650%3Az%3A0%3Ai%3A20260305201635%3Aet%3A1772741796%3Ac%3A1%3Arn%3A406337623%3Arqn%3A1%3Au%3A1772741796861752653%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1536%3Awv%3A2%3Ads%3A172%2C102%2C31%2C94%2C%2C0%2C%2C1194%2C87%2C%2C%2C%2C1719%3Aco%3A0%3Acpf%3A1%3Ans%3A1772741793602%3Arqnl%3A1%3Ast%3A1772741796%3At%3ACASE%20BATTLE%20-%20%D0%9E%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F%20%D0%BF%D1%80%D0%BE%D0%B2%D0%B5%D1%80%D0%B5%D0%BD%D0%BD%D0%B0%D1%8F%20%D0%9F%D0%BB%D0%B0%D1%82%D1%84%D0%BE%D1%80%D0%BC%D0%B0%20%D0%9A%D0%95%D0%99%D0%A1%20%D0%91%D0%90%D0%A2%D0%9B%20%D0%B4%D0%BB%D1%8F%20%D0%9E%D0%BF%D0%B5%D0%BD%D0%BA%D0%B5%D0%B9%D1%81%D0%BE%D0%B2%20%D0%B2%20CS2%2C%20%D1%80%D0%B0%D0%B1%D0%BE%D1%82%D0%B0%D0%B5%D0%BC%20%D1%81%202018%20%D0%93%D0%BE%D0%B4%D0%B0.\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cases-batle.ru\r\nReferer: https://cases-batle.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 667\r\nset-cookie: bh=YKTJp80GahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Fri, 09 Apr 2027 20:16:36 GMT; SameSite=None; Secure\r\naccess-control-allow-credentials: true\r\ncontent-type: application/json; charset=utf-8\r\nlast-modified: Thu, 05-Mar-2026 20:16:36 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://cases-batle.ru\r\nx-content-type-options: nosniff\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\npragma: no-cache\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 05-Mar-2026 20:16:36 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":667,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"721330a6ab76e33f6e9be09ef191e06d","sha1":"e9d3a55377ce058a3653ff4453b6dcf7940c0d61","sha256":"d848f1335c9b69eab6736630f67b7a24e9976935aac49aa2d471552f9a51fe38","sha512":"2aa768245c799a60b9af477be304a9c172c0a169b8b02f8ab938c2d42418121211ec77fbb687af5d8dcccdc61ea7ae5542ce152e017c017c3c93193fda812dcd","ssdeep":"","tlshash":"4a0123995e1804b6868b8eb190db734717597129cdc203e17b82c6015d8fe72f1472f5","first_seen":"2026-03-05T20:17:01.884654Z","last_seen":"2026-03-05T20:17:01.884654Z","times_seen":1,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-673723ecc7149.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-673723ecc7149.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1100\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-44c\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1100,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa2b0f80fb73bb0dba20ccbd2722df30","sha1":"c1a991bf79df994af469748199967295454e4b70","sha256":"69f023c3c283c3003a6079cb4d985b3eb57ce5515406cbcc9d316ae625cb76e3","sha512":"958d4b5176997839fa0e244b23cc951dfe457ee866bfb0168883610059ee2822a45340a07f091a41d8c21b7b636ab4e16d1e184ef06c6cd5da9ed514342c1960","ssdeep":"","tlshash":"7f11b68847600ea6a1ccd939c74b59988996329462736aaae201ba04778d2f9c0636e7","first_seen":"2025-09-24T06:54:00.244072Z","last_seen":"2026-07-12T14:30:59.885306Z","times_seen":13,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":521,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-671ba1acbc31c.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.191Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba1acbc31c.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3226\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-c9a\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ecde46699fa4fdf832b24e365e5307a","sha1":"697c51b1aecfe6477f038750c5054fce24680b47","sha256":"0623b2d84ca5af270a0ffdd691f83e3c02658f4772a668412aa3f0f170b70088","sha512":"16c890e4900548355950ccd39794625ae8e23a90a02a78066c4073faee00347591e3abda2e397876b22458f6da15ddf210e8172d43e2d239c6fa8e27b79e7930","ssdeep":"","tlshash":"5c616db5e28c33bec8009eb4f1f47bc9bb7531b349259d3e45d48825365c2c89998a8f","first_seen":"2025-09-24T06:54:00.222129Z","last_seen":"2026-07-12T14:30:59.920827Z","times_seen":13,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/promo-dots.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/promo-dots.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 138\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-8a\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"be1e3284b0e84c77d641c9af3bb53dad","sha1":"f4543abd568e3a8921bfbc587854f6644bb54000","sha256":"80c07f304b327c34d112a0c13db07a4cb4c76eec9f3de28ce06444e8def76b4c","sha512":"67be39a959d1ffd38b39903bc338864adcb6db47f0d4672718adc2925b3fb9c385e119c14aa7795d644e52ed99b4ef0fdb3de31b97ecec2fc5f8f04063bcee5b","ssdeep":"","tlshash":"25c02b3a5500c000f1c42decbeb010c030271242d231c511004808b052d01b30c9ea7f","first_seen":"2025-09-24T06:54:00.269374Z","last_seen":"2026-03-05T20:25:51.005477Z","times_seen":5,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 05 Mar 2026 17:53:46 GMT\r\nexpires: Fri, 05 Mar 2027 17:53:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nage: 8569\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-07-26T07:25:14.346822Z","times_seen":12451,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":114,"dns":8,"connect":20,"send":0,"wait":24,"receive":2,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.688.back.middle-67dd3ba161fd1.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.688.back.middle-67dd3ba161fd1.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 17416\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-4408\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17416,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"661dc2e13a00f4516711720837780669","sha1":"546148c472521a4f4aed90ebafbceceeb498bd1e","sha256":"a0c96d79ad9c538485d103b04862043344cd1aae17521fe2eecd6c392bec7621","sha512":"9b0fecfed96b56de2b4b2cca410f25d46f4cdd2415628e7f7a39bcfe03354be96b21aeab1ac0b70eb69dc5cb5599451d16342c814d6d8046cc846179ff529752","ssdeep":"384:TG6TObrBw4bpSdmJoiJWtsGo54ELvFjYeB7GktlSXF3mX:TBTObVUdmDWt5o54EJEeQktlkF3K","tlshash":"6e72d0f620d9124079f638f0b6e166a77af53f060c760524dea9952dd13fb1e915f083","first_seen":"2025-09-24T06:54:00.294309Z","last_seen":"2026-03-05T20:25:50.969389Z","times_seen":4,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/svg/giveaway-icon.svg","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/svg/giveaway-icon.svg HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1753\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-6d9\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1753,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ceae9ac313a7ecb3a8629b0aecceb857","sha1":"9703701e31698a750389917ce6b10dca27a3b13d","sha256":"88ae3070c4a123bdbdee5963f68f8489195856358487bc6e8be1bee7ad4c744d","sha512":"3e91d42305fd340c951a97e11f1dce745bd369778598339dc692d14a3964269f4c29250af7c5ade3d039597dff8f12d2d4d90b52e1929251b5f4c35ca2914e2a","ssdeep":"","tlshash":"ba312d58d384c7fa7de1422892e42c8172b49dbbe474e2e4a7ff1451dd9c0e1651cacd","first_seen":"2025-06-16T19:50:55.77131Z","last_seen":"2026-07-12T14:30:59.821929Z","times_seen":65,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":231,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.682.front.middle-67c1b6ff7163e.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.682.front.middle-67c1b6ff7163e.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6434\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-1922\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6434,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4034abc5f353a2e487b082a8d12f6d1b","sha1":"fc557dc7209a78bc253ab402b64487d0c5a89675","sha256":"a1e8ba338e247dccfb8b2981c588d6e26c95564040a99544dff77f3cd12d4af8","sha512":"c7644868973fe3b01ac2c93f8afe59fee5e95137b751ba9077c1de149c2596f15adde1b7e6f634843794dfeeefbe3ccc295aac875f8972342700eebc7f73f225","ssdeep":"192:YbbWM0sgsfoh3TXUOff59UIZqSUPgdc8TYGyKnb:YbSM0ZsfIjb6SUPgdJTXb","tlshash":"5dd18dde5859cb066522886ea7a634f5448f2d678ae8e1d70880affcc1d0dfcbc58275","first_seen":"2025-09-24T06:54:00.281176Z","last_seen":"2026-03-05T20:25:50.993347Z","times_seen":4,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.676.front.middle-67a36269949de.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.676.front.middle-67a36269949de.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 5734\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-1666\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5734,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dc55b8c8967e9cf8386274e1911f17ab","sha1":"d70b420b0a2126fa9ed7ee27213779cc3da64b9d","sha256":"e3a2069f93a8c2a56ab6e9e51767657babcdfbcf1289fe8ee6112070a7c330f1","sha512":"7ed8c538c0dd3868b5d29a7d67128c0f987cc9be09555230e1697e42881979425c37d5f18b37240b3a777b4a64a372a17d47e8a4dc8bc5c21f7dd42f12778698","ssdeep":"96:7pZNZVw6oX/qGGSxr03cBAqcUivRyMeQedfqXGU5ZQB/v7EKLvhO8tQlUVn3lcc:lZhwB/MfqcUiMdf2GU5ZkvtI8tQ2LX","tlshash":"28c18dc6f84b3535e8f9ca7f0533c7ae52432e2d618117a7358b9f8472a676310f48a5","first_seen":"2025-09-24T06:54:00.242855Z","last_seen":"2026-03-05T20:25:50.98629Z","times_seen":4,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":69,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.677.front.middle-67a362bda43e9.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.677.front.middle-67a362bda43e9.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3666\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-e52\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3666,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"23c52488fe0439fd38d73207f042b9e2","sha1":"f45d0ced6d5a779211df31d7cd258b88b86a1358","sha256":"cbeef3fac2dc75687ef85ca37a0b9a6fe4f7e4553004fb0070f31d97bca139e4","sha512":"43edeb22a97404d2a74d09bbf2c53d428deca5a57567bda78a34e985ed6be65c7f94f8efa5c46ed7a533d037575914c483778b545f7deecb608e3e2112893b6e","ssdeep":"","tlshash":"6b717ec06652dfee1cd1b1e792fa0e9d6078db34794ddc06cd21c9d18e9084ab82266c","first_seen":"2025-09-24T06:54:00.324831Z","last_seen":"2026-03-05T20:25:51.000066Z","times_seen":4,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":67,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-676236fe6ca29.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-676236fe6ca29.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1058\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-422\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1058,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"952f9a1fd6155503dcbb4d9d00a631fe","sha1":"ec900b440c837bff24ca78b16206de7d4bd6a931","sha256":"50a7d27c2c76673930835c6bab8b650af55682afc534bc29ebe47116f3a91816","sha512":"a3a02dc78dd095fdd892c7f93457a2b54f036c57c923f8c7dce8f86c3c205b3dc555a0647bd31395364251cfed7d6603ead2b4db91334b6d4ba5456879636b7f","ssdeep":"","tlshash":"7611d8ad81b858dbca823ecd305cb020008fc8d80e7361a7d984ad551d14cbaf00feb4","first_seen":"2025-09-24T06:54:00.362644Z","last_seen":"2026-07-12T14:30:59.97499Z","times_seen":13,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":181,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/js/homepage.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/js/homepage.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 4567\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-11d7\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4567,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4541)","md5":"5de04fb560031c8610cd3886b2f35e0d","sha1":"18a573f18fb61dab33b7a8aca3f8027ef07ed98d","sha256":"7dcda01647ea29c634ca72577c068d5d306d0726fa35c6791586375acd8714d3","sha512":"8c84b9a5fc270d32e20c7663d3d06f853b6d844fe9f85e86886d2311d3af5b556abd5c2435525399499614701b64dc71b5bbd8a2c1d03c5468a57655412eacac","ssdeep":"96:yeslRZ/0GRbj4n2GEg/jg/Igh5p2r1X3QXO008w+/nvgIAI2DO0mJEUUjr:yesGrD/jwPuQXDXw+/nvgIAIemJg","tlshash":"e59121857191f86d29ed9365b2a417e33232b0ac7544852cb43cede69c0ac45b2ff6f1","first_seen":"2024-12-02T21:43:54.630177Z","last_seen":"2026-07-12T14:30:59.738025Z","times_seen":14,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/notify-a5ad4bd1.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/module/notify-a5ad4bd1.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 21238\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-52f6\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21238,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"C++ source, Unicode text, UTF-8 text","md5":"b62bbff81a30bc55c8271a6369010211","sha1":"53fff15bdb6b5b33597b4ddfc4cfb9daf5fe04bc","sha256":"27a0e9872f67d626842616be908644b203cee3a0f75e8548e53c3997679ba88f","sha512":"71bdeb88f3d12b103fbacbca52fdc921f63c8312c92a39bc4dca954d3faf8fd9b8e77e0d935ca76f40da285e3c12da8695088beb3842871720b4efe3f383263d","ssdeep":"192:vCKzYY7imkiMNFW/fgHnsdY1OyS7+kWz3DCsankxtFiskZdxioh4D4VQ6bxxKQgq:vtE780/yFXLSnIZFWLL80U","tlshash":"7692420913bb1b2592d3b07a1daf90047934809f0d96bd1c3d6d86d88f4c97992fafb5","first_seen":"2025-09-24T06:54:00.346735Z","last_seen":"2026-07-12T14:30:59.662404Z","times_seen":13,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.687.front.middle-67dd59cae022e.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.687.front.middle-67dd59cae022e.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 4412\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-113c\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9cf4450c3c27308edd8c9b34068eb995","sha1":"c69c06f78ba83e2ae756a65cad171d1e4b81fe0c","sha256":"17088f9e3a0583a99cef4b5aeae53d647f2ca26987b7ca3146235081902b45dd","sha512":"c80aad4982dcaac661fe328cb1df465a1fc05b59e0136dd4f709468e54dad420c1525d546ee8371e195b0463499c657c0b29797714bc0273efcc0611d0d005ca","ssdeep":"96:XKzOS4w/YaRoNw4JF7jcb9G1Mq3DyKBVQ46EiYyo2OafZaUziX+x:XKzFodJF7jcb96OKBmzEiW23fESm+x","tlshash":"7a916f21306448e681a72e7d49b7b01c55b3af8b3b12ef0b1609f47dab9d4146db1863","first_seen":"2025-09-24T06:54:00.237341Z","last_seen":"2026-03-05T20:25:50.952427Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/payment/footer/mc.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/payment/footer/mc.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 658\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-292\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":658,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57142f2c1ae64e9aeb455f8138065777","sha1":"e9aaa1ccd4be7faa38434cb143f21eb78ac72da0","sha256":"ee8682b167f24bcf5ceba8f604a96c7ac221c7afde07f3b99772dccad917f9cb","sha512":"3f81aab08698e62409021f2f554a5c23f78643770ab66d3d6d13d3e58018cfbfffbc9c41b9740e3a45f1adef6d032d1c30920ee41492b955d2cc490a4e87ed88","ssdeep":"","tlshash":"fc01683ea7543c1da0d0447023931c4074c950bd939ba4cd1b6f61bc999b2725653b0d","first_seen":"2025-09-24T06:54:00.274997Z","last_seen":"2026-07-12T14:30:59.908017Z","times_seen":13,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":249,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-671ba30cba21e.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba30cba21e.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 634\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-27a\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":634,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a194dd2e93c8be1576db25026f4a706","sha1":"66d4a76bf122ec653f3b93c3dd6c2af4c010746b","sha256":"e325d068ba1446293ad824f7267a6a33679e19b577454e842f8880a8405a534e","sha512":"847cbc190e93c7ec0f88ea3c15c292c3b90a682dcf3f4c06a28674e380be075dc9d92ecefdc96b1cfd3edfde52e39a22580fb7202cecf32e0e90e564201495d9","ssdeep":"","tlshash":"bff068b703e7e12ffcf0517d43f031b45a04712b1195966d2df44920dc458043e9c8b8","first_seen":"2025-09-24T06:54:00.351266Z","last_seen":"2026-07-12T14:30:59.809123Z","times_seen":13,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":148,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/themes/newyear2024/css/style.css","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /themes/newyear2024/css/style.css HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: text/css\r\nContent-Length: 2240\r\nLast-Modified: Wed, 19 Mar 2025 16:11:34 GMT\r\nConnection: keep-alive\r\nETag: \"67daecb6-8c0\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2240,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"9c19a90d8876f89c01fa2a86bcc38ffd","sha1":"2717ed4ca70198e3b693ffbef401d7a6b6cbbc53","sha256":"511806294141ae59b419381c7027cc98718192133c41ba699c62583de2f543aa","sha512":"e13c7ca7d36b72fe9fe897b3bd2662f938ed1da97ece84b960da210a4bb0541fa9a1c5ed0aa4469845ff487872d7a1c64f9247e7ee1056e25ab569f6caf085f9","ssdeep":"","tlshash":"ec415adf17b32008a8c794982b49409953b5a08bdb09dd6cb68cc7cf9f452f25353bc4","first_seen":"2025-09-24T06:54:00.320152Z","last_seen":"2026-07-12T14:30:59.978004Z","times_seen":13,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":58,"dns":1,"connect":30,"send":0,"wait":31,"receive":1,"ssl":75},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/build/module/index-05811f69.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.855Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /build/module/index-05811f69.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 434\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-1b2\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":434,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"Java source, ASCII text, with very long lines (433)","md5":"c12ddc3420ea42df410403e3b4dd4c21","sha1":"da738fb6b27e05a214f4862ed88cbef1dc6a7279","sha256":"ccdecf89e091ca877b5b743a3dc836668a688be7ca6d3e19e53e9bad7253b643","sha512":"00eec998097e20c7c09388595ab9d2aa7d605ff02229bbb2a77f758acc45a3367fb06213f05a7df04d5b804926fc8ccfe16fc99aa5f95b26b0ab512c23f70f60","ssdeep":"","tlshash":"05e05c5aa660a0ef460a1cd1c15f354989755c1a3c4adc909408f117593b7fa51d991f","first_seen":"2024-12-02T21:43:54.429532Z","last_seen":"2026-07-12T14:30:59.82455Z","times_seen":14,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/bg-main.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.077Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/bg-main.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 190096\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-2e690\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":190096,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d1508409a7d3b57b47e28fa9b4fb06a","sha1":"34410f58764c031b9716a879297ff1234d405e39","sha256":"6b592082c617f37afddfa1b99f9198b0016b1d40ecacf537a67a3772a24c4748","sha512":"c561b86faf5fcaa0cbd80410adc65756ccb7ebeb26956e3e7f00ca5eed81c17cacf9f94e528789c4e36711040380d2145f57302e67420806ced774ad1d541200","ssdeep":"3072:Zs81PD+YKqkRQDXu4j9Ti67dapeN2YjilUZOPOj8AsZJKaDt3MD:zLBVEQr3TggN2Yjil0Z8B3","tlshash":"000423e38f899920dbd92edc3e9bf31751070cbe67c4eb9856628274331ad75943a062","first_seen":"2025-09-24T06:54:00.245769Z","last_seen":"2026-07-12T14:31:00.020402Z","times_seen":13,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"192.178.25.3","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://cases-batle.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 04 Mar 2026 10:47:52 GMT\r\nexpires: Thu, 04 Mar 2027 10:47:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 120523\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-07-26T07:26:10.840508Z","times_seen":315959,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":127,"dns":1,"connect":12,"send":0,"wait":16,"receive":19,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-63f0913e668ba.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-63f0913e668ba.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1468\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-5bc\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64256d1387ee0de9b274b26ef94ab2f1","sha1":"1018f8754c80da6e4d837ac98d7c4d17045c0b9b","sha256":"1c47b41fbfeabc6c32bfbfe9e382f5b381878991367f6438ae62d0ab5e7b6f45","sha512":"d18ca62005162989f6ed691ecfa1bd26fc895ef262940f1057045d8fcaf7b885e4623808fdf0792a189f40343b54c96259e8d5c21ca13a44dc4d45f8f65a50c4","ssdeep":"","tlshash":"bb31c79693fe8a14e5d0a0eb24c8fb48a4ff8aba20a0bf1c521b205a57c1895fd51895","first_seen":"2025-09-24T06:54:00.343536Z","last_seen":"2026-07-12T14:31:00.015044Z","times_seen":13,"resource_available":false,"data":null}},"time_used":295,"timings":{"blocked":265,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-5c793c1dd5a25.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793c1dd5a25.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 782\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-30e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":782,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9b6ea60e532f83b84ea06e249fc92d9","sha1":"9860ce879ba067996250406eca7cecfe1b57793c","sha256":"54310d22d580583a04c4e6cc960f06d09d60a549f6fed3da2d96d5b0d66711fa","sha512":"c74a82b6b4b7667491e83a9e0e08ffd9f125af46a0f05fa6708c16cd93dfd05e9f19a2d5638ae0cf2420f628dba454b3eee24231acfc81770c5da4f8d0ff73e3","ssdeep":"","tlshash":"2101705a8da11381c64cae1da6b32a0fb38908bc55d0eb122be417456367122226a1cc","first_seen":"2025-09-24T06:54:00.328823Z","last_seen":"2026-07-12T14:30:59.883461Z","times_seen":13,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":168,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/favicon/favicon-16x16.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/favicon/favicon-16x16.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 382\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-17e\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01957326454bd08e9aed0e190e6c151b","sha1":"1b9d6b8d9e63f92236d738cf94335ff079cec41b","sha256":"51fcab1fb8fffe07ed33bfde6d9c536d0bd347412e088620ced3db37cae75f80","sha512":"5b34f81ed7cfb7cddbacf5bacd32054a513fc9981d8626c9c33b2c0a14b47fb1b0c32937782dd1c1ca8fc804553451c139fe6d54251cbaced20b96ff22dafc10","ssdeep":"","tlshash":"93e06a69f3ef61dccd5d7af4ac41f0787402017437f1ce4507c9984149d17411e51431","first_seen":"2025-09-24T06:54:00.317016Z","last_seen":"2026-07-12T14:30:59.97701Z","times_seen":13,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/case-category-bg.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/case-category-bg.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/css/style35.css\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 9464\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-24f8\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9464,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4ed727dfad58fe3aaea1966c080fbfd3","sha1":"548544af51ed96ec6c6c86396c05b96224ac3be9","sha256":"bec3927495ce1a669df4c524804d7a9b89f5745e0fde9a3e09b4bf2ea3170146","sha512":"adcc20a95c0c5b280a3abd0545aca85f3099f829daa614066aa5bdd465c7697172c1d6cf31872fc2cd3377287308dc1db10563d678a7d07e1bbd22fd93b48cad","ssdeep":"192:knW/QeG97uhouw0KxCjrrbR76xg1vKC3O31cM:qZIdwjcjrF6WdKncM","tlshash":"64129f7ed66c024e6ef919713556198b80aa330d74c685cd70f53766b2bcb343e8b24a","first_seen":"2025-09-24T06:54:00.230854Z","last_seen":"2026-07-12T14:30:59.78872Z","times_seen":13,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.344.front.middle-612e1b3243a0d.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.344.front.middle-612e1b3243a0d.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 11510\r\nLast-Modified: Sat, 22 Mar 2025 21:25:57 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae5-2cf6\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"139f477f21fbdece1f030659a036be4d","sha1":"1fadfa3a85d2f27bc8df70be5a14d69c86597829","sha256":"b58ce36bc072995d304e270f578a48f9cc4062a160b13dc0c974fd5460ba432f","sha512":"1ebefff5fab08c4b70b7f48fa030f3fe004acbe0739a5eea32f24bf997df6eed3dd4c4cdf625526be2a8d69fab72e5a2b46589b0be0e2c5855aa06c689175019","ssdeep":"192:s9tK/cetoZUfIOk/jqh0ggrk2T/M43Nv77Fc1T3E1onmqhfk5fM/olHlPaTQi1dE:Y2j9Seckutv7xcV3SoXZAl8d7jgK4ckt","tlshash":"db32c07526ccdc96f6207cf90fff06006a5cb1c0f3718616a54b5f46da6d90b11127ba","first_seen":"2025-09-24T06:54:00.218505Z","last_seen":"2026-03-05T20:25:51.013409Z","times_seen":4,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/payment/footer/mir.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/payment/footer/mir.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 752\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-2f0\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":752,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"386d361d67eee9bb95f88fc2d15ab524","sha1":"297c956b751e279da7fb82cccfd4461ae25b0847","sha256":"d2c8506e6d8e4eecf4f8a0e4b75ec996d1991d4e9369a815959950cec4b23903","sha512":"6f9d3d979116b57140703f53e7892dc76253e7fca92f3ee16694f8996db190783bb52232592b15290efd14ce32c0b7c540220d24124d760e59595175a18026ff","ssdeep":"","tlshash":"6c01b568fd73bcf2d9642467920a96320e4508b9a7c4c30e1a221cf1cad520f2bc8a2c","first_seen":"2025-09-24T06:54:00.292376Z","last_seen":"2026-07-12T14:30:59.94766Z","times_seen":13,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/6457h8p38dzo.js","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /6457h8p38dzo.js HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cases-batle.ru/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 367103\r\nLast-Modified: Mon, 23 Jun 2025 16:22:01 GMT\r\nConnection: keep-alive\r\nETag: \"68597f29-599ff\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":367103,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b57b187d20647664df03426ce2cc2699","sha1":"1014dfd37129817986e56fdbed9b1f83d8850c8b","sha256":"1b8655dc52b2885f5dd25fee91da7d0cf91eedc0b81ea4c51874d4f798b7e91e","sha512":"bf2ad5f9e8c9f07b7c55282e0ccc4548041381b329484b5f576fe4ec403a3a88e3c1e6c3c4016e7b9508b3d4d933cb5454e4e8ccbad65682bf3acf36b275bd16","ssdeep":"3072:+sLiAOHjhejjpaAaYnasRGappto2s8xr5Lao/LSL1ZTsNXhF78rso8/zvNN/k/3c:+iajhejjpaAaYasfpFvSLN1iHovS7NaQ","tlshash":"dc74b25127d0a84813a78f77736bb4e6f85e096f3c544c9bc200fda0a6a562afef1531","first_seen":"2026-03-05T20:17:01.925237Z","last_seen":"2026-03-05T20:17:01.925237Z","times_seen":1,"resource_available":true,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":173,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/undefined","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.877Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /undefined HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"a53e183b2c571a68b246ad570b76da19","sha1":"7eac95d26ba1e92a3b4d6fd47ee057f00274ac13","sha256":"29574dc19a017adc4a026deb6d9a90708110eafe9a6acdc6496317382f9a4dc7","sha512":"1ca8f70acd82a194984a248a15541e0d2c75e052e00fc43c1c6b6682941dad6ce4b6c2cab4833e208e79f3546758c30857d1d4a3b05d8e571f0ce7a3a5b357be","ssdeep":"","tlshash":"3bc02b6d3913bc4cca63327422c37580c0c6833764ba81128440800331cf2998ac3397","first_seen":"2023-04-05T07:24:51Z","last_seen":"2026-07-25T23:32:55.4271Z","times_seen":3207,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/img/ico-limit.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:35.976Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /img/ico-limit.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/css/style35.css\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:35 GMT\r\nContent-Type: image/webp\r\nContent-Length: 510\r\nLast-Modified: Wed, 05 Mar 2025 15:45:26 GMT\r\nConnection: keep-alive\r\nETag: \"67c87196-1fe\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":510,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a682c905302ce6f7aee6db9467ffac69","sha1":"a91dc799ec8afecb1873cf27fa19acde40be7600","sha256":"4fd0eba6936f15cabd9bcfc3d5649854b9699460e58676791f3f1dc750019441","sha512":"7b4ae2a3ab7f21bb4a8701e9e02650b3b419706a08389f27b18a4253a735707451dd43aba3e735297f030837ed98d0a36feb5a1281f8d31f0a2bd1dd439e84b1","ssdeep":"","tlshash":"b8f00ecfc2128285ed882dec46a4bdb39b992a50a842fa05a0cb344091aa913f070ed8","first_seen":"2025-09-24T06:54:00.295664Z","last_seen":"2026-07-12T14:30:59.85716Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.688.front.middle-67dd56af38652.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.140Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.688.front.middle-67dd56af38652.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6664\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-1a08\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6664,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"585fe841906d11cb5981b716317e8feb","sha1":"fa93f375d3ce0afb7674dba1ee1e93e48cfc93c5","sha256":"8122ea217c60276d5931c56dba699f0be82f23e00aa548604ffbb8fdfd590265","sha512":"7a169ec21c1ee20c9a56268e303669c67851870909955c2289fbe56522e9a00e32c91d4d62321bd51ae002137f6f27e939b2d7deda397ed69890a9faf02b71e5","ssdeep":"192:TUcJ5IuderzmbgM+ihun1jjnpJBNJcgKz:gcFgzXihajn/Jcf","tlshash":"bdd18dc28e661acadb8236f8373ef705849e185b09dfed8d565f0994101b181db3932d","first_seen":"2025-09-24T06:54:00.255642Z","last_seen":"2026-03-05T20:25:50.96218Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/cases/case.690.front.middle-67dd57bc9b359.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:36.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/cases/case.690.front.middle-67dd57bc9b359.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nCookie: _ym_uid=1772741796861752653; _ym_d=1772741796; uv=mmdwp03h-y0zi2cys\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:36 GMT\r\nContent-Type: image/webp\r\nContent-Length: 6362\r\nLast-Modified: Sat, 22 Mar 2025 21:25:59 GMT\r\nConnection: keep-alive\r\nETag: \"67df2ae7-18da\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6362,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a534d4ccfba49e1ce910807088c4ed00","sha1":"18496ff517e8a3cd8f16988703a182d6cf09f6f3","sha256":"bb7a2f1ca5af6b5c4aa8166941d533fb2d116d36e0e339778d3030d7fda8ce41","sha512":"facd86837961703b0ec5895eef04be5266fb7c76e6b2b0cff0d8cebede74de965bc48b600fa90a5fa6b808fe5b940a1bf51ae1bc8ab996dcb81585066a0bfc1f","ssdeep":"192:mBnqLgdA7WS4fq5ZD/UewvEnmpi+VJSQWm:uvCaS4S51/Ujimp7VJSQWm","tlshash":"09d19e256dedebb5729b981bd24cd1ff10a6bcf5aece01460c1f1011258f6929d4c6d1","first_seen":"2025-09-24T06:54:00.282483Z","last_seen":"2026-03-05T20:25:50.973289Z","times_seen":4,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cases-batle.ru/cdn/img/items/thumb-671ba24107c45.webp","fqdn":"cases-batle.ru","domain":"cases-batle.ru","tld":"ru"},"ip":{"addr":"212.192.14.27","port":443,"asn":207713,"as":"Global Internet Solutions LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cases-batle.ru/","date":"2026-03-05T20:16:34.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"cases-batle.ru","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Tue, 09 Dec 2025 23:18:59 GMT","end":"Mon, 09 Mar 2026 23:18:58 GMT"},"fingerprint":{"sha1":"3D:DA:BE:E1:55:D6:A5:7D:D0:C7:A5:3D:BC:62:59:69:AA:33:B2:7D","sha256":"93:CB:AE:15:E5:06:21:A0:50:19:56:C8:03:DD:35:6A:07:39:59:38:52:8D:17:F8:7D:F9:76:61:AA:6F:C4:DF"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba24107c45.webp HTTP/1.1\r\nHost: cases-batle.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cases-batle.ru/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.20.2\r\nDate: Thu, 05 Mar 2026 20:16:34 GMT\r\nContent-Type: image/webp\r\nContent-Length: 852\r\nLast-Modified: Wed, 05 Mar 2025 15:45:28 GMT\r\nConnection: keep-alive\r\nETag: \"67c87198-354\"\r\nStrict-Transport-Security: max-age=31536000;\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":852,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbc6d24a3f69a591f0f39ed125c672fa","sha1":"708a5bb6e0e0edcfd8eacf388edcd9c9a1b03222","sha256":"bd0e1f76bf0c5a7e64e88c3871a54510f36ddfdf87bbfae676ffcba6e10b2384","sha512":"62f3803b1f5b77003f39d9b0df0305ab5bc91ec9ca1ef1b317753129c28a78f86151d9330ef3d3216a3efefad68f7a46bc697514680170dfe175fb411657be1b","ssdeep":"","tlshash":"4901d600f3aa60b4c8bc2a730bcf1e3ba45b6199940ad303493def0c16768771732e29","first_seen":"2025-09-24T06:54:00.276567Z","last_seen":"2026-07-12T14:30:59.861777Z","times_seen":13,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":274,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-03-05","alert":"Phishing Block","trigger":"cases-batle.ru","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-03-05","alert":"Sinkholed","trigger":"cases-batle.ru","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}