{"report_id":"64e822c6-20c2-404c-ae8b-626d3fdb253d","version":6,"status":"done","tags":[],"date":"2026-04-17T09:57:34Z","url":{"schema":"http","addr":"case-battle.mobi","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"104.21.88.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"case-battle.mobi/","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"title":"Case-Battle официальный сайт — маркет, апгрейд и кейсы CS2","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"case-battle.mobi","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"104.21.88.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-22T09:57:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"cdn.case-battle.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"id.vk.ru","ip":{"addr":"93.186.237.1","port":443,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"domain_registered":"1999-06-18","domain_rank":1117530,"first_seen":"2022-08-29T17:47:28Z","last_seen":"2026-04-14T07:32:12.848259Z","alert_count":0,"request_count":5,"received_data":188666,"sent_data":2959,"comment":"","tags":null,"fingerprints":[{"name":"KPHP:7.4.126432","description":"KPHP (kPHP or KittenPHP) is a free PHP-to- C++ source-to-source translator, developed by VKontakte.","website":"https://vkcom.github.io/kphp","common_platform_enumeration":"","icon":"default.svg","categories":["Programming languages"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.case-battle.at","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-17T09:57:37.65892Z","last_seen":"2026-04-17T09:57:37.65892Z","alert_count":1,"request_count":1,"received_data":748,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-04-13T00:20:36.548247Z","alert_count":0,"request_count":2,"received_data":341036,"sent_data":875,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-12T22:16:45.621325Z","alert_count":0,"request_count":9,"received_data":342303,"sent_data":5023,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-04-12T22:24:43.06808Z","alert_count":0,"request_count":1,"received_data":474083,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"case-battle.mobi","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-17T09:57:37.661188Z","last_seen":"2026-04-17T09:57:37.661188Z","alert_count":88,"request_count":88,"received_data":3304495,"sent_data":44957,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-12T22:20:19.752051Z","alert_count":0,"request_count":1,"received_data":23862,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"mytopf.com","ip":{"addr":"79.137.156.169","port":443,"asn":205830,"as":"Digital Transformation Plus LLC","country":"Russia","country_code":"RU"},"domain_registered":"2017-05-24","domain_rank":174013,"first_seen":"2017-06-01T10:04:38Z","last_seen":"2026-04-13T05:33:01.392347Z","alert_count":0,"request_count":5,"received_data":59757,"sent_data":5256,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mytopf.com/js/dyn-goal-config.js?ids=3636264","fqdn":"mytopf.com","domain":"mytopf.com","tld":"com"},"ip":{"addr":"79.137.156.169","port":443,"asn":205830,"as":"Digital Transformation Plus LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e3635e7b735940ba60629e73f5136026","sha1":"9cb53ecc9e370f27adacdf522f47688a9a0590e6","sha256":"0e7e3045519beaff2095d4a64b8dfb1b581013eb5b8f4b3549983c69abe7139b","sha512":"fe65a2043d22e0b11bad462ca623f20caa6effa160c4496c2f8848c3d7b0c5aff5c4618186e495fea33ff07ba894462fc3362242ca86dbffd1109604a55acb17","ssdeep":"","tlshash":"277185c4f3dd3fd71ae3567298ee028255715c626c45af52412be9503e32e94707be88","size":3573,"data":"","first_seen":"2024-04-18T08:47:58Z","last_seen":"2026-04-20T14:19:21.571684Z","times_seen":946,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ace754874f0811323e913260f7158354","sha1":"d52acf9bcaab76d6bf4bcebb1a196fd958185c9d","sha256":"4da0cfe4a25b55e867e803d4e0e449aa17189a8280c94a3956db78dca30cddb2","sha512":"ab41d9e836ffc7990499db655c66c1ebfe6e75a3dac3f385cbb840b0210dab26941b4fd69a85e8c3e77332500ef20583cd2d4bb6dd6c08256a1fe521378d84b8","ssdeep":"","tlshash":"8551ed6a05a15015090370ba5f4f6405393328f77f2bca657f3d8a2aafd1235ca623ee","size":2821,"data":"","first_seen":"2026-04-17T09:57:45.419307Z","last_seen":"2026-04-17T09:59:08.802574Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@vkid/sdk@%3C3.0.0/dist-sdk/umd/index.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1cfc6acbed6b5d1f895e03846d8d18a","sha1":"82ec238a9cf9b264004e6e53f763e226518ab62f","sha256":"b4bf52a4f7765d119acbb9def11be0530a294d81bed0db60c3c4979c472131d0","sha512":"8fa611dd0227f799e62b0713cb26bfe282efac6eb7237696767734c9a133c4c17f62df592781b680edf0244509500d50c3840f0fd6688e5359c72474293790fa","ssdeep":"3072:YD8VE96PVVqVFRQ/SwSBsWrA0SYs6NQ5g:EaiMy2GJSsa2","tlshash":"06f35c5875a0b03952c396b4553f2106f23834b664a59880777eccfa2bd6d8f81f6f3a","size":169847,"data":"","first_seen":"2026-02-11T13:13:18.339767Z","last_seen":"2026-04-22T06:20:58.469808Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac929c4bef5656bc3341d164f49a6c35","sha1":"dc2a231a53aa0ae44605cd7992bf0192ce2d5a05","sha256":"a95282e3882526048108ac70a1395c433ea99f3b72f16672812e4b818f16d669","sha512":"e1ae3e0e1ddddb4d9a3edb64712ef800f88c8ae68a61a605370d46ddfe5b1358fe624c4b3a36ab19ae0e48f6d57b00176ccf00d0cf224455fb889247abf8961c","ssdeep":"","tlshash":"eb01687b5265393000ff7775668fd61839a150037941cd253f1d8ac14f25e94d4665dd","size":715,"data":"","first_seen":"2026-04-17T09:57:45.420658Z","last_seen":"2026-04-17T09:59:08.803127Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id.vk.ru/button_one_tap_auth?style_height=44\u0026style_border_radius=8\u0026show_alternative_login=1\u0026button_skin=primary\u0026content_id=0\u0026scheme=light\u0026lang_id=0\u0026providers=\u0026uuid=shbmrd\u0026origin=https%3A%2F%2Fcase-battle.mobi\u0026oauth_version=2\u0026v=2.6.5\u0026sdk_type=vkid\u0026app_id=53423210\u0026redirect_uri=https%3A%2F%2Fcase-battle.mobi%2Fggdrop.html","fqdn":"id.vk.ru","domain":"vk.ru","tld":"ru"},"ip":{"addr":"93.186.237.1","port":443,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"introduction_type":"Function","is_inline":false,"md5":"e84723421b2cc3a61e87fb5b4aedcb2d","sha1":"fccefd980c6b448c22cb1b187a24513bd5e7a1f7","sha256":"5cc9848330227cec4b6d15c5eba154162dc1077ad9f86afdc911fa73a4a3b9cd","sha512":"9a119084361a7bca7b306be6a3f4ec6d1a01ee6b69bd53d77092244c8ddfa74b2b311a1f20c6fe3ef898ef0f4dba6d3f4d242a71c78c8349f9d5405b05bf3597","ssdeep":"","tlshash":"33a024cd30d57000d5d331d044170c44103c14d134c4c440410454500c771141115c0c","size":68,"data":"","first_seen":"2025-05-04T17:13:07.400639Z","last_seen":"2026-04-22T15:38:17.508978Z","times_seen":1182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mytopf.com/js/code.js","fqdn":"mytopf.com","domain":"mytopf.com","tld":"com"},"ip":{"addr":"79.137.156.169","port":443,"asn":205830,"as":"Digital Transformation Plus LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"439133614d68b946d03eb581d4ae2ad0","sha1":"66d46cd5deed58f7b62beec57769009c653d08ca","sha256":"49b4d1224ed76cd9f71fef19bf49f01f45f9755e9d0170b8d4d7358208edf6a2","sha512":"09664d959745f4f593b9181693e159995abbeabd5f9cee421e17bf59c1fa2abe10a5415a3f7652eb30fd21f3fc76513fb469ba94902aa1578be11dadb527e3b7","ssdeep":"768:p/dcg5K0tht5ioJyuX6qK4DjapsrYj8uGkDq1zCS/fwVu:p/T0GXIIyDqjiZYfwVu","tlshash":"68233b56736170258af620e4516f210bb0bd9b13ac44cce4d2e1eee42f78e9a1767f2d","size":48989,"data":"","first_seen":"2026-04-17T09:57:45.315936Z","last_seen":"2026-04-17T09:59:08.755698Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-5GSG2TPNHT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e183a741b1249abe78d2c920b4b0f392","sha1":"276d15d4557eaae7422a1196036431e6fbc85f79","sha256":"268b2a44d332ba4f8e6ee43dd6538fe317d481c211ddcad344d83380d8c13e8e","sha512":"ce095f6b6a3138765295181d6583ea5c265f2cf5fd4adcaf549738b19b5dfc1d19dc39457fe578724d3704a5eb8b19a7ba4f18ebac3078c3c3ac6481cbe58bd4","ssdeep":"6144:8J4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:i7t4MtfrJL8p5WOW","tlshash":"bca409ceb3c674665396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","size":473479,"data":"","first_seen":"2026-04-17T09:57:45.332961Z","last_seen":"2026-04-17T09:57:45.332961Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"821804a3d430d14a11a55dee54beb067","sha1":"1078d9f8da9d778b02c254ac92d04ee922801bc6","sha256":"16054315df7b71b5981d6ecf4591d357836e1e0c5720d84b14d537051eedabf8","sha512":"b89231a0e0617a8855babd3f2bc0d03a4d4e76993a8155296a9f82659a441c05b9ffed821b7fad59ce9b7f391647fb2a55aaefa096a8e37bbb394cefb6df12fd","ssdeep":"","tlshash":"19316299a3d754f1075270218fbe290071be8497240ec510ba5c4c453fe022a527fbed","size":1643,"data":"","first_seen":"2026-04-17T09:57:45.423003Z","last_seen":"2026-04-17T09:59:08.803768Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id.vk.ru/button_one_tap_auth?style_height=44\u0026style_border_radius=8\u0026show_alternative_login=1\u0026button_skin=primary\u0026content_id=0\u0026scheme=light\u0026lang_id=0\u0026providers=\u0026uuid=shbmrd\u0026origin=https%3A%2F%2Fcase-battle.mobi\u0026oauth_version=2\u0026v=2.6.5\u0026sdk_type=vkid\u0026app_id=53423210\u0026redirect_uri=https%3A%2F%2Fcase-battle.mobi%2Fggdrop.html","fqdn":"id.vk.ru","domain":"vk.ru","tld":"ru"},"ip":{"addr":"93.186.237.1","port":443,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1096659cec20a39e3e419d51a36b6c2","sha1":"47e8bcd88f7cb45611ae7fff1135b499bab5c5a6","sha256":"159c03fdb588550c6f12135414d43d3b83b286c0e9a57637b8eef9800759830e","sha512":"bc4a554ab68041fd580b9be63d20ab5f24b22cb21f3a5e4f5d71ed6d81a48f94bdd7a830aea00216327db38f80d7ca1cf360f32c954857a7cf0a137b920bee6f","ssdeep":"3072:lzrETV+IQ7iRhzJ7D7gy6LjWmp6w94ArlNlyZGtAVTEXEypZ4AqHgeAZ0+E5aadC:lzrv34NJ3Y9lrl0VTEXEypeM0/aaLkvL","tlshash":"9204df1055e91ca5b38b980aec043a0636ed51fd1feada6106a07e7e64f36d0c2677cf","size":180392,"data":"","first_seen":"2026-04-17T09:57:45.424612Z","last_seen":"2026-04-17T09:57:45.424612Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.vk.ru/vkid/1.1.1321/button_one_tap_auth_widget.js","fqdn":"static.vk.ru","domain":"vk.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"667e38d0a30cde12d156105cd56c9bf3","sha1":"987d99c7cd27fcd6a36eb0ceb6fe110442a40893","sha256":"1d2dfe9d877933639aae5d136974c879fdbb695ce96e00233e7161a68d9655a7","sha512":"4308da34bec75a4f92f5386c559379c2e879914184d9b3171e694e3a707e86ea734cd969c55c9aeb60f09178d43f0a46bf970404cb97f4d8f3d4e41eb9dcd7ef","ssdeep":"6144:RqOtxJNvG5a0thBS9FDP+qmeXaU3o5G1nnd+lBPr7JonUu58EiNCmH:dxLAa0iP+6harSnJFS","tlshash":"56d439d97691f56247e381b6803f1003f3392819741dc460f629edda6caa48ab277f7e","size":638688,"data":"","first_seen":"2026-04-17T03:07:01.964395Z","last_seen":"2026-04-17T09:59:08.80537Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd3ba161fd1.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd3ba161fd1.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 93137\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:06 GMT\r\netag: \"69c59b4a-16bd1\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270073-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184592.753659,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ERMJJgQ34FhWefccKTL8tqH3G0OzQjojpiYs3gnByaARJShKzx9T%2BTJlo0oKQAqoYS4JZoU3wvKnKRpjW%2F457bf9cjFoXx9wcnz04h3pgsjxUyJXgEPkWB%2FG1rfP4ZiV1Akj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda9069dae0b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":93137,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"2ecd8aef7cb222a31d031c8e81a6d730","sha1":"43510a596725bca5fb5282cfae4cd80f0e8fba0a","sha256":"a55d4dc3f5c187f79e5301b2ead3a074de83ad1f7ac55bf03befc8cc04747115","sha512":"773ce2f5af9f410358af198149ec6f3ff10a7cd8525703286fb22f2d04c634e6898221f9e434da9ee35e66ecf3744f6fc9d3a1e655bb83a16ed378cfa9c46e3a","ssdeep":"1536:L8vpsD84T8icUwD4B9W9OByJAx+kZ1Kek3wBF25Fr+IqIwGtpanYO/RIzQ8JSa8D:wN4TLwD6WGySQI1K7eF2nqIwJYO/RmJE","tlshash":"e4931278c19b3133d209ffa89490bee83873b6d00013c096deb7e96d4e161e5fe95695","first_seen":"2025-06-27T04:58:45.847753Z","last_seen":"2026-04-18T20:11:58.24521Z","times_seen":23,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/upgrade-icon.svg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.468Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/upgrade-icon.svg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 258\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:09 GMT\r\netag: \"69c59b4d-1ae\"\r\nexpires: Thu, 16 Apr 2026 22:44:54 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.750497,VS0,VE1\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Aag7Ik38AswxvlLTL4CN5U2ZGbklTdNskSFQcxheFpRkTR4XXjxfHPAgrZoy9hWXUVLuweaEiKCDXhvdlMyi9jOMsKfBCPEoTRQTp9s32RbgWc4gufrcfht9KgB952W6I5XC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90642cb4b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":430,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c83697cd6f5c5df0e167de9aa6e5c201","sha1":"cba1e47d9aeec688ef69890d438f8510e9c1a8c5","sha256":"2621f9b9b413d62762d3c1fa000c408afeced9957a34071c63dfa56c47c731d7","sha512":"5320face84c4568f8ee603c533ddd84960a18ca971e81b987659458b74921147624baa4cb138eb0049207c096c44f5d69c6b2bf13b490b6988d524c4a7aefea3","ssdeep":"","tlshash":"43e0e5fc93f8d158a1124b13ca783d80aa39b1ff034a11ea704dd9a08b546a7fc97594","first_seen":"2025-06-16T19:50:55.599752Z","last_seen":"2026-04-19T19:19:23.512489Z","times_seen":47,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-67272427b6b9c.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-67272427b6b9c.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 5048\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:08 GMT\r\netag: \"69c59b4c-13b8\"\r\nexpires: Sun, 05 Apr 2026 17:41:33 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.467447,VS0,VE115\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2DtwbF0KSmiZGNoFcpkw8vsww7Gu%2BX0rnaJ0RYzqpZlTHu2tAmS2M1EIJV3egL4JG3EC8dV0eYXqz1Qsf5L6LABn3URjo1QU7asunj0iFWPHV2hXto6kZIJnh%2FFIsXLxr7su\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cd1b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"1033459af0b9d02f900e8fe0eca412eb","sha1":"b8ed542d675a233119ea65d6b216a833621192af","sha256":"1e2ebfa0de37322df867437669483d54702b39ab73d696a46098687c11bbca1c","sha512":"0c6d4dbafba759cb41a5f1798fd7bddb23900fb1b2e54e81a1f532a63a874be247159b75464267113ad491366f235ad7f558df430b64e0ab07135a1fc88b302c","ssdeep":"96:kwtH8IrYcwRF5MDUxeWTLlx+ntP6P81gWOxRMA/UwXXMxzLyAVDshB4S:kwtc1cwRL5xe3tC0eWoVxUpFsnX","tlshash":"a2a18dd2e36b93fe81018b291563364727e20c6dd746409d86eac88d3a523bb27c5fe1","first_seen":"2026-04-17T09:57:45.251275Z","last_seen":"2026-04-17T09:59:08.78374Z","times_seen":2,"resource_available":false,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/case-category-bg.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/case-category-bg.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/css/style.css\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 27671\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:11 GMT\r\netag: \"69c59b4f-6c17\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 0\r\nx-served-by: cache-bma-essb1270072-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1776419831.253976,VS0,VE115\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8J8BK%2FHGE%2BGjyPWCCPgEDhCvBd51NSwCYpFHDdHmlre%2FyMvpOyP8UAlMKCXeQI4fctjpava%2BQrEcn8aeZxafK903dQBIUkgncMqeARIgX0%2BKpjgn7qj4BsWpvcwvq8POmfRN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90694a37b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27671,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 302 x 80, 8-bit/color RGBA, non-interlaced","md5":"cdd47a785a73e2cd017588f6d3bd6c7b","sha1":"db071214097672bd9db7cf2364a282f75143cd42","sha256":"223d31dd76b295b451f8a068a66c3f21150336167a5446d91efa1e738398028f","sha512":"c7fe2dd35c612c5413c12020e2895f36009bfedd158d53290328b8321aceecbaff43bfd2d58b35bd0ca28c0a42c69e1a080f1a7ea58609b6e4ea03ae291f49a5","ssdeep":"768:HABTLovVR8T8loG35f+IhrvUM7zfVFotZ:HQvov4A+q5fVhrpfyZ","tlshash":"62c2f16431d8ac7e6faa84df294d94afcb8261cc6426c4edcd02af708751b5cb5f0e46","first_seen":"2024-12-02T21:43:54.445521Z","last_seen":"2026-04-19T19:19:23.514736Z","times_seen":33,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612e1c9f4c1e1.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612e1c9f4c1e1.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 35623\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:51 GMT\r\netag: \"69c59b3b-8b27\"\r\nexpires: Thu, 23 Apr 2026 04:15:57 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 106875\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419832.707169,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X0nfHj0i0skFymsK1p9buDbQVxScwyL6Ck9uzT%2Bblr4nTdFOZASzxpXAjSJizmanEjdzx0FKpSG2Wi88Y38NZ2a0N7gTwuvGl3UgMvmWS2fQCcqQYvBtVLF2rt7qPu1gdyhZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906bfd01b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":35623,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"df21cc43100aab152ca19b7d9b862617","sha1":"5cb647a3a714c91dee23890796093559cb166da2","sha256":"7acd3d0a0fb33d855d797d46c96acbb5065434a31857e4a26e3410f874dc9841","sha512":"cd8db6f7042159c015dce06d366989cb16b69e837e6f89e46f77afd5bfbf47967c506373d035320f92d48cf9d42b5dd3bbca9e79c00c61f26c4f22f6255ce2c6","ssdeep":"768:0cpw3sncZeouDLFa/OTRKhCpPO21t703FJhQGc7c4T90d14:0USe7DRa2dKhqPF1J0Vpxk","tlshash":"91f2f2623c5d7e379699766f00c3340a27662e3e93f8a11e12c0c8f75a715dd963931b","first_seen":"2026-04-17T09:57:45.258251Z","last_seen":"2026-04-17T09:59:08.790997Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id.vk.ru/stat_events_vkid_sdk?app_id=53423210","fqdn":"id.vk.ru","domain":"vk.ru","tld":"ru"},"ip":{"addr":"93.186.237.1","port":443,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vk.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 Jan 2026 16:54:41 GMT","end":"Wed, 03 Mar 2027 16:54:40 GMT"},"fingerprint":{"sha1":"9A:B2:15:9B:DD:A4:3B:0F:D4:06:A8:3F:3D:4F:42:8D:99:F4:47:71","sha256":"4C:28:49:A6:F1:E1:02:92:0C:39:0F:F4:1F:AB:0A:41:3B:CA:14:12:E6:A0:F3:7A:03:03:04:ED:13:D8:76:DC"}}},"request":{"raw":"POST /stat_events_vkid_sdk?app_id=53423210 HTTP/1.1\r\nHost: id.vk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://case-battle.mobi/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 844\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":844,"data":"events=%5B%7B%22id%22%3A186256930%2C%22prev_event_id%22%3A0%2C%22prev_nav_id%22%3A0%2C%22timestamp%22%3A%221776419831083000%22%2C%22url%22%3A%22https%3A%2F%2Fcase-battle.mobi%2F%22%2C%22screen%22%3A%22nowhere%22%2C%22type%22%3A%22type_action%22%2C%22type_action%22%3A%7B%22type%22%3A%22type_registration_item%22%2C%22type_registration_item%22%3A%7B%22event_type%22%3A%22screen_proceed%22%2C%22fields%22%3A%5B%7B%22name%22%3A%22sdk_type%22%2C%22value%22%3A%22vkid%22%7D%2C%7B%22name%22%3A%22unique_session_id%22%2C%22value%22%3A%22shbmrd%22%7D%2C%7B%22name%22%3A%22theme_type%22%2C%22value%22%3A%22light%22%7D%2C%7B%22name%22%3A%22style_type%22%2C%22value%22%3A%22primary%22%7D%2C%7B%22name%22%3A%22language%22%2C%22value%22%3A%220%22%7D%2C%7B%22name%22%3A%22text_type%22%2C%22value%22%3A%22default%22%7D%5D%7D%7D%7D%5D\u0026sak_version=2.6.5\u0026v=5.207"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: kittenx\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\nx-powered-by: KPHP/7.4.126432\r\nset-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.ru; secure; HttpOnly\nremixlang=3; expires=Mon, 19 Apr 2027 08:08:31 GMT; path=/; domain=.vk.ru\nremixstlid=9058520669133044448_xKxZ9IyS9V9DZ4yylzzXLBOjSZyk14w0bKoyLJJsFvs; expires=Sat, 17 Apr 2027 09:57:11 GMT; path=/; domain=.vk.ru; secure\nprcl=03e8f638697f2f; expires=Sat, 18 Apr 2026 08:57:11 GMT; path=/; domain=.vk.ru; secure; HttpOnly\r\ncache-control: no-store\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://case-battle.mobi\r\nx-frame-options: deny\r\ncontent-encoding: gzip\r\nx-frontend: front920400\r\naccess-control-expose-headers: X-Frontend\r\nstrict-transport-security: max-age=15768000\r\nx-trace-id: NVcMShAmzQHBlMqe0BlkUU9Q-YUwdw\r\nx-trace-id-v2: 019d9adf7fa57ae7b576dd31d1c321a0\r\nserver-timing: tid;desc=\"NVcMShAmzQHBlMqe0BlkUU9Q-YUwdw\",front;dur=18.371\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"KPHP:7.4.126432","description":"KPHP (kPHP or KittenPHP) is a free PHP-to- C++ source-to-source translator, developed by VKontakte.","website":"https://vkcom.github.io/kphp","common_platform_enumeration":"","icon":"default.svg","categories":["Programming languages"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"83e5f533d7c9e10f0c98734c9147bb0f","sha1":"c3a52214559e549b8bc3a4b5df3026135e575a3a","sha256":"fbb5c7a158ac0b272b5ed5529454946b4186f8ac87f4ed019581031ac97a783e","sha512":"815494029e1a3230ddf7add224b56b398a86775d4bac3eb88e15099ab67a52c87ed08bd8d11330e16324e63f7755434214cc6a531757539985c5c7d087a8d41b","ssdeep":"","tlshash":"4760000a8088000800802000a8820300a82200000228a0b288008080a208a002880a00","first_seen":"2025-09-17T07:43:58.332882Z","last_seen":"2026-04-22T17:03:11.660562Z","times_seen":459,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793b98dadff.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793b98dadff.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2756\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:57 GMT\r\netag: \"69c59b41-ac4\"\r\nexpires: Tue, 21 Apr 2026 13:08:38 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.260548,VS0,VE3\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNc7biRz%2Bk7iqRKE%2B5T7mm%2B1lUSgPSAYoww5meGK6M%2FbY%2B2yw12tDXOBy%2FrxT9um2Gk2UMBMJ28c6Rz7Jt5HdtbWvpzG8D3JGPQ4WTbMnzFQnWcyVxW5o%2BMhBc4Uz%2FE%2B64D%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cceb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2756,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"ddb6ff210a1b02456e70416b67c1b85e","sha1":"298a69b6e06f7cf49937c92ad7360373959b6cca","sha256":"0e1405719c228a5d1ab0c7358bdeccd501474f1a0a5219546895df541d0eea98","sha512":"6338410485137d180b12632bc1b94d925474da3bb7a39270942a51813f8c61b53a4a80df75f8d9aaad70175dfb1ab1ec10ad8a86e26fd3e72d1b57151969fdd9","ssdeep":"","tlshash":"69514c835031a9fc54e47e0171895e40e0b93f8fbb1b18a796537263b5da2069daa44f","first_seen":"2026-04-17T09:57:45.262429Z","last_seen":"2026-04-17T09:59:08.7915Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793d9da2639.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793d9da2639.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3528\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:08 GMT\r\netag: \"69c59b4c-dc8\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270071-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.473994,VS0,VE111\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JoKg%2F7EUlyWRyd3vUQhuhP7DtXANBaEOHbUfzen2feO8uZDzR6OZkcBvc3Kn1tEh6xIn79B1Wp6%2Fp30%2BeHAo3ob4SK4Oj7h4RSQJPnPiHwrnCmJgHmc2mKBnGIYrRbHJTuOD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cd8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3528,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"09bd6bf3a68e472f4aaf98557517abd6","sha1":"25acf449dab25a19bce5840b8c657f383f41ef0e","sha256":"ea8cc1448ceaacfc6b1a16344c6b7875a928a4b2d68007b7b881796e9da7e7fe","sha512":"a5208672903aac537310e68e67f0c716b6a69ecd47ac4636f5fbde5483693c0f9571aed9ff66601147365b7c6f2829d2c20f6f3db67cc4cbfd25833bb74a45d6","ssdeep":"","tlshash":"7c716dde88c5f58ad8039024f2c451b3d7f4b5115f9ed022a34edea90ad560e4b8887e","first_seen":"2026-04-17T09:57:45.264792Z","last_seen":"2026-04-17T09:59:08.739632Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd59cae022e.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd59cae022e.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 14299\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:09 GMT\r\netag: \"69c59b4d-37db\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.369342,VS0,VE112\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2wVXnjjG7StKhQdaZn37yOAmcq9%2FKGJn%2BR2TpDntj0MnyKRbcoxmG3OTLydLOsC3nPKHBgKdM7drSpuoPO4qZnOauoW57z7euo6JHeLvpEBjF91lGVrABKjrrW6DEpupchk6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda9069dadcb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":14299,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"916f84e1d1b5245da0dbbda640c04dd1","sha1":"0b6b54215d92b4e5f7bcd0f3cd1f134d95916c43","sha256":"c582bcc993b43243a5d9f75f5ee22cfb9b634dea6d2d2c58c03db082d8dd4bac","sha512":"bbe6f8e8349ca92c9c9181396dd5378e1de914761d7336a045a4acda4196a724b494364d8519d6fd11c353139043c66012cc2425e775e549e51eecc1d63fac28","ssdeep":"384:FNXLq9rJO3PJqEgm8IqPFfbic5xfziKnxY2:W9UE+qdfD79S2","tlshash":"8852bfc9a3b0406cae7c15093b9da6affb536108c9ad9537c31e6e502d44fdd2e82983","first_seen":"2025-06-27T04:58:45.885617Z","last_seen":"2026-04-18T20:11:58.280018Z","times_seen":23,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5fd327f367110.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5fd327f367110.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2681\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:04 GMT\r\netag: \"69c59b48-a79\"\r\nexpires: Tue, 21 Apr 2026 16:36:31 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270049-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776184591.260721,VS0,VE111\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4V7C6Y5Tyyx4TT8gJ8%2FthobOSGZYgHfLK0w9Czf6z7srCoRqMeqYZ0O942yYt4n7sAXbTU2HV2FHyCklAd6xywailx%2F448FDKORhBEjLAz7dT1IEyXpC2Qy3DkccCNqLbZY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90645ce6b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2681,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"628c709ecc19780bc9fcdda334f9f3ff","sha1":"12422a142b104beb784870f1db96ce6fc3923ed4","sha256":"73853b31545b4847b33e8c355ca0d4753ed8edeb07e924c988c6f7b4e3fbac28","sha512":"f45f9881abb351ccda6e5eac6d66b4387930a2769b255b3a55465f5aa699e36af4bb430f77fcc90642dd9a4ed9e12933bd9f81cd9a8f0531e409480b1bd66217","ssdeep":"","tlshash":"29512c9b26d7dba4d9171f3480817b5af5f3163a4aec5130b2c0511829cc8bb4615e3a","first_seen":"2026-04-17T09:57:45.268341Z","last_seen":"2026-04-17T09:59:08.775187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-61543a128ae58.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-61543a128ae58.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4239\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:54 GMT\r\netag: \"69c59b3e-108f\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 235239\r\nx-served-by: cache-bma-essb1270027-BMA\r\nx-cache: HIT\r\nx-cache-hits: 4\r\nx-timer: S1776184591.238265,VS0,VE0\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hjuQTnxbR1U38BuAh30EGr5hVsqU1soVeDnV0MiUcPWagBAW5pOjcHnE0Ew5%2FBgLvQdv7Erky4Yjs5G8BcASlgmA4n3zYJgfwW7gA2dL3Akw7HgWrMEY5G8tYtsvkxLFVo4q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644ccab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4239,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"4886f5ef50357812e3911947cda271c3","sha1":"f0cca6665995c18875c9d5ecf0456cb905904abb","sha256":"b8207520469a0704a2ded2eba73a338680ee6819d6d9f0df30218548b5e50a84","sha512":"dfcb33e67cdf0002484a5b2e0a9edf65fc394507e6156bca04b2e1293c5266f17b1a4fc49312e10a117ae4c360c341cc76e8e56b80e5db459120cc2b4dfa9df2","ssdeep":"96:dk7AF4qBbNokcYL1kasRkNDPZMsE2utT6+IFLG7TH:iq5aY0Rklxctu+t77","tlshash":"79915dfd5727b5b9c2412bb47115e07c7435c05a630f4328b76abe7a486a3d8517305b","first_seen":"2025-06-16T19:50:55.640491Z","last_seen":"2026-04-17T09:59:08.745372Z","times_seen":3,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793a7068ad1.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793a7068ad1.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3014\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:09 GMT\r\netag: \"69c59b4d-bc6\"\r\nexpires: Tue, 21 Apr 2026 16:36:31 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270048-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.471908,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vaB7ZtqzEh15H1yFH7DegTjfQxSGGEU6%2BJcnapG3RfEx419DHTgpk5lm3xWqcabg8MqgDUpyRKkUwKUKJjZuHCVCxZhiSF8m10edOMbtp%2Fgtv5auML09ky50a94w8HS2beoN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cd4b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"63a758e0ddd05c6f7e5c0656d54e8dfe","sha1":"2c8bc0886934f2cab671bdcbb7389da6f734423a","sha256":"57f5fb788703e8d67d7aff713c4e315a11f1a7116a8d4171577f1044222a62d6","sha512":"b3f3042b716912829731985440c9b85525ba64fd0b6fd837db4d8b770f44c636326fb9535d6ee96af66db4a03877248888d52f7b4d05d88c762d2b80d0d545b3","ssdeep":"","tlshash":"aa515c1608a9e85608afcc9ac4d092bbc19d731c0ad84b8a6133ad2c8d46338d35778f","first_seen":"2026-04-17T09:57:45.273658Z","last_seen":"2026-04-17T09:59:08.756666Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5fd328e298577.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5fd328e298577.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3595\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:54 GMT\r\netag: \"69c59b3e-e0b\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270067-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.492524,VS0,VE113\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nG%2FiSnri%2BOFeLyKozUNBcZoG68aNiag%2B3Y0U%2BjRLsL4FpkdSYUTEdFgnJU5NAuj8OXv0zH4FXanPl99CAD9Vz81J6Zlu0GHZw3t8s%2Bo8KGSIFmgojo2ckhvWTaazWxNtbmrD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646cf7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3595,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"ac097a55b7486fc2bf39d38bb95fbb12","sha1":"1a1d933b3ee85b64fdee279551495d79b58dd4c0","sha256":"0f2a359fccb86c5cd7960c243710624008f6b2ba9bcee8b90e0bfdf929bd227c","sha512":"30d849870b362578c188eabb57e04c79e9beec66805d0cb0b371bd8a74bfa4caee2aedcab538f3abf982c42387442643129f8187af2fe67ffe1fad48c41630fe","ssdeep":"","tlshash":"b4716d6ed19d1829fcb84b63f1c112e555673838b78b6e7092f11654d60cb51f4d09ec","first_seen":"2026-04-17T09:57:45.275856Z","last_seen":"2026-04-17T09:59:08.745975Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/corner-left.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/corner-left.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4547\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:53 GMT\r\netag: \"69c59b3d-11c3\"\r\nexpires: Sun, 05 Apr 2026 06:37:35 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270039-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.258644,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2SPqy6UqOvkaYyZ3xBrFhWTpK7ytnJAbBBo0qk8YKKxUWgdzP7uGS1y5DF0GVda6eEhk5j%2FYZfvF0NpLC%2FW6uUH4v6iwKroGYXdhY6r0unbgfu1x%2FIU2TBmpTOcqXPEJTO0h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d03b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4547,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 48 x 101, 8-bit/color RGBA, non-interlaced","md5":"d59f2a9cc223227e8291e89fbc263edb","sha1":"2314228fa010608ab847ef430c2717aefefbc24f","sha256":"04bde4a26d09b583422bff18e1886ae8fa919eb2d1250cff0947cb6c9b2e3cec","sha512":"18c098de05f044d018630c3263e7e452d0bc58aab0ab0a14bc358ce9117d1acace9d2b988748437538b1ed852df6b58352c207d6c4c6d2228a242a1061505609","ssdeep":"96:eXDsajAAhCA3498sXdD8d0mTf7O3zUcxGqbRplyyz85Arn9:eXD1CmPgYOY2bbf85Arn9","tlshash":"ca916dd565aa9d67b78cf037c0dcf59200c2f666ca9e4bcd5d8092125ae7c0e2caf344","first_seen":"2024-12-02T21:43:54.414189Z","last_seen":"2026-04-18T20:11:58.221043Z","times_seen":37,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.case-battle.at/images/case/406/back/thumb-6262b66aa921d.png","fqdn":"cdn.case-battle.at","domain":"case-battle.at","tld":"at"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.at","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 25 Mar 2026 10:07:46 GMT","end":"Tue, 23 Jun 2026 11:05:59 GMT"},"fingerprint":{"sha1":"EC:40:0D:28:20:F4:46:F8:5C:15:46:4A:4C:0F:F1:6D:07:CD:4C:B4","sha256":"E2:C7:D7:0B:B4:6B:F3:4E:39:C3:FE:94:12:61:4C:EF:D8:A3:AF:45:53:EF:F2:2C:BE:3D:01:86:0A:60:ED:89"}}},"request":{"raw":"GET /images/case/406/back/thumb-6262b66aa921d.png HTTP/1.1\r\nHost: cdn.case-battle.at\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZwkJQcd45IZSKp7NWbfH4hjOwxote8ec98hfkY0abhxD3asHMWPYnydRbAU3N4%2BLwz3K0rcUdiN9Gdr56Zh%2FTEjHjnJobwg5cEju6zNz5MCcDvvvu7bd%2FjT6UNuG9upL8T0K03g%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9eda9069ad21b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":60,"dns":34,"connect":1,"send":0,"wait":11,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"cdn.case-battle.at","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/bg-main.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/bg-main.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/css/style.css\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 258096\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:49 GMT\r\netag: \"69c59b39-3f030\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.925872,VS0,VE113\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpjLcTq1AXjlZqqELbADAg4U5Q%2F%2B0dSjcSjPSXrQbgE7n1JLNiiTwMzw88C4FlmdZASVlhHb9yeWqXtNwf10%2FWM%2BvgysyUvO0KbSCIKpj8I9q%2FG78AbEHvrcwbQLVC0sdBaj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90671fe8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":258096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1900 x 862, 8-bit/color RGBA, non-interlaced","md5":"b42109bbec3ce99ecead3805d39f33b0","sha1":"f33f663cf70ce8d97ac4c03224f2aea42514a7fc","sha256":"1a4bcf236af80547187f6daeb446dd532b76a83befb6f55b255cc99f416290c0","sha512":"c2a5ba369b637997007eab87cb819c9f4f096b17ee3b1b0f8f6f156bdf568b9625748cff70ade44f1d5a6545c818aebf7a5356ad31dae695eed7a0c73a0711ad","ssdeep":"6144:nQox9X6IapS2fv8wd+FEkDhuYDb7ph7Thq:nTTapS0fd+iupS","tlshash":"fa441212d1f7eb8d9d6706b60066af030b17b29ea6f64c1dfe41dc8dca6ad80f052b15","first_seen":"2024-12-02T21:43:54.594474Z","last_seen":"2026-04-19T19:19:23.539172Z","times_seen":35,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c1b6525c9c6.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c1b6525c9c6.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13264\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: \"69c59b3a-33d0\"\r\nexpires: Wed, 15 Apr 2026 16:25:22 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270075-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184592.784539,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RUb3KU6FEOAS3sTYAgd57JZmrVzk10Pal2iaNh9r%2FPU0CU0SsvaA3KRzwHkH%2FqyVFLgywY%2Fr9BgcPkeolM5sdeh9Tz6SoGW8TDSDWRJkJlqGH2Egelgr1v0HwIgId%2Fbwinpg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b21b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":13264,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"ac7a2b9ca53f37b421d9d203a884f49c","sha1":"fbf04b3008129408377d568f4741d4ae537d1fde","sha256":"41b403b1f3618d67e6d59412eabaaedd86f03e2f33a0c41c673be1faa09d9182","sha512":"26933c99115bf2aa775d66a62bc1ada24f44b35f3d9479390766b043ac57deee34d42c18932fc722bf10d9df8971d242f64e31ce897c854426c18b99c4c64543","ssdeep":"192:KSpS4zTlEJStInNZIJ1/xsEVl7LsbajLnotkKgTHOw0gNOrBucmPvTWc:FAcONZIJNqEVl3sgLS46gNOgX","tlshash":"c152cfffd8b51436216eb1b1dc246fe229b456fe8dac00defd8e3056201576234d6b8a","first_seen":"2026-04-17T09:57:45.280583Z","last_seen":"2026-04-17T09:59:08.748285Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612e1d1800428.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612e1d1800428.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 26180\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:55 GMT\r\netag: \"69c59b3f-6644\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 99716\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270059-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419832.709472,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZABgeIl2grU12z7vIsOOpqEYh71pTOleJuOAWIvaL13xXywtApILgxzQTzogj0B6W2opFrZ5pvjNThGTlJmHunHIMY4UanoavvLCLQENqkJqLOORPvy19sXEpxIbUQutBNQr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906bfd0cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26180,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"d8e58c724ed0a3d76449e7d831858b2c","sha1":"182646abd59cbccedbf1e67043463453540465b8","sha256":"33ca87ce1980e86a0973005a98778d1eedfaea99a66d2b23e57d719e3172cf0b","sha512":"24c5b8526a8ffdb3a92e162cead12146add4de8115897d72b799a7be5491b93500f24fcd30e2bcc636546d35f60d7663fed09b4b1e3da80559962aa5bc405342","ssdeep":"768:3XBHSisTczrKFU1vTsuMpQXAFR5wSDGf5:H9SiiczrKFcs0Xc/DGf5","tlshash":"82c2e1ea15c7d3cde1df4d08fba18054070cb68b6a9f885632c4dc8de65aa5f14e7c45","first_seen":"2026-04-17T09:57:45.282811Z","last_seen":"2026-04-17T09:59:08.77879Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@vkid/sdk@%3C3.0.0/dist-sdk/umd/index.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@vkid/sdk@%3C3.0.0/dist-sdk/umd/index.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 53\r\nlocation: /@vkid/sdk@2.6.5/dist-sdk/umd/index.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9eda90648b0856ae-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":169847,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T17:09:26.793872Z","times_seen":14067879,"resource_available":true,"data":null}},"time_used":526,"timings":{"blocked":7,"dns":4,"connect":1,"send":0,"wait":475,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793b508f4d5.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793b508f4d5.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3181\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:11 GMT\r\netag: \"69c59b4f-c6d\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270072-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.483880,VS0,VE114\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QoBC1wB80BPfwXmnCdephCiRAyhYTupnMkSW8hgs%2FzweCCVzqiKqiNqiqDPJ4zSLWG3T7jRy%2Fx5WfgaHJipOBRHhR7xsGjErb%2BcPqpqYTu5elY5muUbBenIa4u9Booc29r5%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90645cedb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3181,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"335293a3927f7c2892219d331d9de30b","sha1":"f8029367713b50538b616bfcf860f2535bfe583a","sha256":"2ae0aa51df3d1014704b36fb2753864919af91de047cceec80282b1d492d845d","sha512":"8feb9f09d53b76caaf2e4505a07a23e5761888cd7ba289c3291383e25baf3e15cdc8a4d02acd9165a646d37d5161d23b7a0fdafe7972a792456d25b2ed148d46","ssdeep":"","tlshash":"9a615c5110f1c9d7bcb9af2d8c51484698f527ef024bbb5886983c20e738c1cc9478a4","first_seen":"2026-04-17T09:57:45.285054Z","last_seen":"2026-04-17T09:59:08.758816Z","times_seen":2,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/mc.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/mc.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2439\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: \"69c59b3a-987\"\r\nexpires: Fri, 24 Apr 2026 09:57:10 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270027-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776419830.493997,VS0,VE111\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9j6y4%2FxMs10oLAsqMJHcFBPSeKZUXF3zVTVHounZcPGIUtjB2MFvsaS0UA4%2BAixMv9ggAy5Mq%2Bo7nwHByhgeZ%2FDoLyAIoqcyu2jMgPrfgr1C14IAAQlwoF5EZuLkWyKXHez8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d0cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2439,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 30, 8-bit/color RGBA, non-interlaced","md5":"708506421fd71ff4a28e158474f4ecea","sha1":"79467f671e2c6e8e9b2ccb10a079afc25ec584ee","sha256":"682aa094239baf3bd2e0d576d1b1da085a7c64f434a1d8f8a4d036abbfa3b7d5","sha512":"21bc557386b1b535cfb10a394061bd635ca223e182c95a3931773ff14b96ef8453e38e1d43641e6acbd0c26c11ad17f7f1a896c6606597d56362598831048b11","ssdeep":"","tlshash":"fd412d5161fe28126009a7a775942d6c1365335c1d0f8e5c9005f492ff0024c43fdca8","first_seen":"2024-12-02T21:43:54.420431Z","last_seen":"2026-04-19T19:19:23.491492Z","times_seen":40,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.19.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.654Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:48 GMT","end":"Mon, 22 Jun 2026 08:36:47 GMT"},"fingerprint":{"sha1":"1A:63:7B:F3:04:6F:4C:E4:F3:15:87:E8:E7:FA:DD:B1:F7:7E:89:49","sha256":"5E:36:5D:D1:35:3B:0A:E9:8A:55:91:DC:12:B0:50:4A:AE:D9:A7:97:06:7C:0D:D7:F0:23:3E:8A:B2:08:19:00"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 17 Apr 2026 09:57:10 GMT\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23176,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49148aa6aa83030c8107b048340b6d45","sha1":"0120fa4085b32b021b14aeae199e5dfade9bbf78","sha256":"c9232eb823d220300177aba31f7efd6e78e0ccdef46558336f8ede5a6efbfdc4","sha512":"2e5514ec03270ebe0019fbafead0722e2ab5e87b3ddc3e2c6a2beab2ab4ca36d6fa22835e6a88827eaba8f0fc9f0819a94e69fe3049539a389076b6baa8521fd","ssdeep":"192:NCddw24WrqKnbqGIwV4Mrz7xCAAN21/rqbnbqGIwV4RazqbCuuH2PlrqxnbqGIw3:0AYqY4tjXqY4ahhqY4tU8qY4Z","tlshash":"3ba22ba00027185063431de623de7e34ee0fa2657048d0766bfd8b9beedad6963b435d","first_seen":"2025-09-17T06:09:26.673739Z","last_seen":"2026-04-22T17:07:29.910869Z","times_seen":10872,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":66,"dns":4,"connect":7,"send":0,"wait":18,"receive":0,"ssl":70},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/contract-icon.svg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.470Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/contract-icon.svg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1664\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:05 GMT\r\netag: W/\"69c59b49-dd2\"\r\nexpires: Mon, 06 Apr 2026 09:51:12 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 32772\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270075-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776387058.236280,VS0,VE110\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nYKr7rzjOHY7abusIzf3hDvgZx%2Ba3DRJwIuQCn%2BIfhd4w%2B3lFgRIfigswrFxKnUgM8Oes4vwpDeGBVncuW45rdLCN9H%2Fgmnpx5Yg%2Fp8HPqDYhH1huiOIBimI7YuF8CuP6lOr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90642cb6b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3538,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d40d0b5c58b0b24e442e4946d03625a","sha1":"06c41982bf5e035e0e1e187555b3c842a8641837","sha256":"2fd79066153d6bebe78aab3a6581d3fbea594699dee06cf9d2301dadd2aa6518","sha512":"d79d470c52ac6c6de1212f3202d421e245cb68b981ab99d80e2958ded7cc11cedca83ff0260c2df82894bc14e10a244ad3a706ce1a7e36e1e2e8882327ba678d","ssdeep":"","tlshash":"4471df560344dffbaed8853c9690249670e4dd6fe1b0f1d8abab642bc50c8c0a49c7de","first_seen":"2025-06-16T19:50:55.594134Z","last_seen":"2026-04-19T19:19:23.523942Z","times_seen":47,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/live-drops.jpg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.480Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/live-drops.jpg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5917\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:07 GMT\r\netag: \"69c59b4b-171d\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270041-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.470381,VS0,VE83\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JFf2lyX1SK%2FWNqca6HC6HSZ5JaJXKwASuthoH6rGQdA5XOTONkTTTu55E29Yz7FTv76A4jIa54wOrHyRE%2FGyBm7zsdEQsRFZV6bfx1DCoZPcVrbdU4gVCF3kGeON6k1ZNRIU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cc7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5917,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 100x68, components 3","md5":"a4720326855bc5f6ae753834a8831c6e","sha1":"7d08e13a893c190e98524688cedd54e0da0c22c8","sha256":"1ed4ddde66046447f32c4f2193330c6069318ec62bec97833c45224906af2a0b","sha512":"a9bf5556d1246cd2a59d31a1d3ced0c0c13750c65654b6a6fe58edb25c673e65ce896f62471a3f3c2887191a0f34380891896d7d4ccb10e8686eee6387353649","ssdeep":"96:pN26MT0D5MdtbZPAVwzVHAILjnElu0ozyahRCqE1SXb1F38t86:4YNMtKwFAILgkzyahZxL1F3C86","tlshash":"b2c14d3fee9acf17f9e1e67420f1eb907386721ed3635e8920995a2532812c44b4d16b","first_seen":"2025-06-16T19:50:55.425481Z","last_seen":"2026-04-19T19:19:23.495072Z","times_seen":37,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.922Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 18:12:08 GMT\r\nexpires: Sat, 10 Apr 2027 18:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 575103\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-22T17:09:11.950811Z","times_seen":218792,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":139,"dns":5,"connect":15,"send":0,"wait":15,"receive":21,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 10:07:33 GMT\r\nexpires: Mon, 12 Apr 2027 10:07:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431378\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-04-22T17:08:29.182866Z","times_seen":8462,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":180,"dns":1,"connect":28,"send":0,"wait":15,"receive":2,"ssl":150},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd3d9f8484f.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd3d9f8484f.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 93125\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: \"69c59b3a-16bc5\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.369131,VS0,VE30\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CXWIccCyrflk6tUygGZXnXhznPnGd3S3GuRKhsM3ExxYgtFfcMSkd78f%2FXTE86XBQvnyC1pVmV7Nvq%2BRBZjU2cMYUCU7dgL9DV4bozQtzygs%2Bxv0afAgsK418eHK635rSNJq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda9069dae8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":93125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"e7d9816b91a49e24634b728564bfdfea","sha1":"7e4d409ad6d27f84fd8bb985f9b6f016b38a5973","sha256":"90883c58de29a0460766c5271ce535af05feda01aa7e48de4ea06385de1c6059","sha512":"4f4cbcc4cb77420aa45c454f966f2364ffb75a5cde0be17531079ef223a1f51e802e96fe57d8dd3d201fe4a6be6e8220fae7390c0a88d8ae224cd0c61a78813a","ssdeep":"1536:ib+uXyWL8qL5tcPP2medlVguaB42SSXlU0nJTUekS7gFu+yWLcNG4GQCLJxO:oVHcPHYlVgua5RWoUetpJLNG45+K","tlshash":"1d931201861ff9565d3b6e24dcf39b9c9f600d1ab1a218fb4c767cc51ae4548264bdf0","first_seen":"2025-06-27T04:58:45.793317Z","last_seen":"2026-04-18T20:11:58.248101Z","times_seen":23,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c1655922be7.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c1655922be7.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 88793\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:07 GMT\r\netag: \"69c59b4b-15ad9\"\r\nexpires: Fri, 24 Apr 2026 07:54:48 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 7342\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.381453,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BxYnYDA%2FO0di3THm2DDzjPdWuxcV1IBEFJ2Edv1Y%2FEQZ4wuHmOUsj6v9OHa8upnLgKODm101LzNyIdgWakQvqpfDF8j1s6PkIKVqtK3fkLliz80M8hK%2FYrJBKniHzyE165Lm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b20b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":88793,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"c448a3f1ca80c94d11078795189c0720","sha1":"e5c5d931183c7bf419be840607e874a260c36d11","sha256":"fe72ce056bee422cb8a4e003e57bb9e9cbaf2a4718c91a3a14673ce9061faf5d","sha512":"d4c23e2341057f83b04f1b7a241490e4620cf6b7f29c99e5cdc172da32d3da58374e45571828ee2900ff33fd4cc77b8afb3ce87d98029febc7bc37d2ca1d33e1","ssdeep":"1536:ZcxBgJrogn+UwkEVi200ktfuVdXchwwJhjYC7kmYzTl2I8drRccAAEvULrxBp7yo:+x8Bf27gfuV5gJhjp4TI3drR5a8xr7pb","tlshash":"f68302edeb69197d43a884204cbe9b314eac182948cff0c55d91d7a431146f2ede9af3","first_seen":"2026-04-17T09:57:45.310947Z","last_seen":"2026-04-17T09:59:08.778212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c1b6ff7163e.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.401Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c1b6ff7163e.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 20556\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:51 GMT\r\netag: \"69c59b3b-504c\"\r\nexpires: Mon, 06 Apr 2026 09:51:14 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270051-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.400183,VS0,VE117\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MZYwy0Zd4ca5XPLSQl4IeTP5GlHr4hyqaBlQ1LmaOkIVG3fy0XOS6NdRsdYKk8BHrGhKYsxzScwWtia4AzKnmJXBtFU7zalW4zZvYdDaW9TDFNgmbW2Q2LNWg7mZ6ad8oC2C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b1eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"6c0240bd65842c64ba523c8d01f11097","sha1":"cfc17745c406acf477d529a9dcea9d615943f233","sha256":"50931db769a399b2abe4985447f0a5acf4d2acd67aac1440b77e182e8445798b","sha512":"ed0d94d3be17e254694a58fdcc035dd382741b55f73c1a6009fdcda70d29a562697d4dd452845c14813f86bb9c66ed15931bd7aadadbeaba2bcc9bae18132043","ssdeep":"384:F1qhpTlgkmv/o9cRpimut9FyZlHSrLVXtL8pfptUVvL:/qhpTGk2T3iVtfyZlHMVh8vup","tlshash":"9c92cf87c76e681aa30ddac2d7ce99e0ee51ed0950b058b70143d52df98eb5049def4c","first_seen":"2026-04-17T09:57:45.313531Z","last_seen":"2026-04-17T09:59:08.796511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytopf.com/js/code.js","fqdn":"mytopf.com","domain":"mytopf.com","tld":"com"},"ip":{"addr":"79.137.156.169","port":443,"asn":205830,"as":"Digital Transformation Plus LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mytopf.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 29 May 2025 13:49:18 GMT","end":"Tue, 30 Jun 2026 13:49:17 GMT"},"fingerprint":{"sha1":"6E:F1:03:10:39:8D:4F:69:B4:66:03:59:B2:D9:B4:BA:38:F3:E7:C8","sha256":"9F:26:5E:45:90:75:A2:71:B4:28:C2:F6:48:01:20:32:F8:48:25:B7:A6:E1:CB:91:5C:F8:A7:97:A5:BD:6F:CD"}}},"request":{"raw":"GET /js/code.js HTTP/1.1\r\nHost: mytopf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Apr 2026 09:57:12 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Apr 2026 15:12:08 GMT\r\nset-cookie: FTID=1RMYgQ0tkIId:1776419832:0:::; path=/; expires=Sun, 18-Apr-27 09:57:12 GMT; domain=.mytopf.com; HttpOnly; SameSite=None; Secure\r\netag: W/\"69de5948-bf5d\"\r\nexpires: Fri, 17 Apr 2026 10:57:12 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS\r\naccess-control-allow-headers: *\r\namp-access-control-allow-source-origin: *\r\naccess-control-expose-headers: AMP-Access-Control-Allow-Source-Origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\np3p: CP=\"NOI DSP COR NID CUR PSA OUR NOR\"\r\ncache-control: max-age=3600, private\r\naccept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccept-ch-lifetime: 86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48989,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (694)","md5":"439133614d68b946d03eb581d4ae2ad0","sha1":"66d46cd5deed58f7b62beec57769009c653d08ca","sha256":"49b4d1224ed76cd9f71fef19bf49f01f45f9755e9d0170b8d4d7358208edf6a2","sha512":"09664d959745f4f593b9181693e159995abbeabd5f9cee421e17bf59c1fa2abe10a5415a3f7652eb30fd21f3fc76513fb469ba94902aa1578be11dadb527e3b7","ssdeep":"768:p/dcg5K0tht5ioJyuX6qK4DjapsrYj8uGkDq1zCS/fwVu:p/T0GXIIyDqjiZYfwVu","tlshash":"68233b56736170258af620e4516f210bb0bd9b13ac44cce4d2e1eee42f78e9a1767f2d","first_seen":"2026-04-17T09:57:45.315936Z","last_seen":"2026-04-17T09:59:08.755698Z","times_seen":2,"resource_available":true,"data":null}},"time_used":1288,"timings":{"blocked":594,"dns":15,"connect":57,"send":0,"wait":92,"receive":0,"ssl":525},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612e1bcd75ff3.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612e1bcd75ff3.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 35289\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:49 GMT\r\netag: \"69c59b39-89d9\"\r\nexpires: Thu, 16 Apr 2026 22:44:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270066-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419832.703844,VS0,VE111\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtwzM6UMV4k8y99Gk%2BFyMGHAmEIcLXphpSvjGDMP3JCZyzAP5leS%2FLO8cJyzjyERqC660CNCYkLZ27zYdbLRpGhqZxYFJaa5sutWpWh4D7dI0gCBFqSvabkdXwgMRACQ23t2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906bfcf6b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":35289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"1e81d067870c050266829d830deb1df8","sha1":"76f175cd2f6112b78265fbce85b5270c5d6c0ef0","sha256":"0fc9499d37dff29eb70b769371c36b9dbaea09de8649a502acf372580f6c1ca8","sha512":"7156def7ad7bfd6e508b68c5e44b098dd06108ed7dcc176eb7ee0e37d3c70d06033cb0b604ee34cd471ba2bbeaef2963374e485eebcecaec2be387ef92696caa","ssdeep":"768:SiOdVZ5jgNXSR40brJcG64qa7KEsiwxlGOC7iPBkJ:SiIFgRSR7cGNqa7KExiP+J","tlshash":"4af202bef8972396949e3d6035553dcc782330931c0ea079075d97ea068623f1cb4eca","first_seen":"2026-04-17T09:57:45.318156Z","last_seen":"2026-04-17T09:59:08.738265Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612e1d967f0e6.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612e1d967f0e6.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 29338\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:55 GMT\r\netag: \"69c59b3f-729a\"\r\nexpires: Thu, 16 Apr 2026 22:44:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 7343\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270054-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419832.711767,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b1LEeQwHUQErsjEJXLPFAUYnYrb1KXS%2Fa7tbxmEvNpWGnsjAorACwmCrYnFT%2F0HnniJlZtPAr5SBJgXTmucwGwBAyLEfAR9EkGJLxjPSU2n2egwTT2gtxS%2Bwzh4dsg9Knt0O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906bfd0eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":29338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"4dcab8fd04ab104b8d577935e23b4534","sha1":"3b52612160dcded88d60e453f987795119a252b0","sha256":"b61fed95b9966bf1d17a3e9aec9d7b33180369819b7cd4b647aca4096b015795","sha512":"faea51282153e0aca5f49a0db66c7f3acdd6d1b047f97f4180e0a1009e49deda62205f4df0dc9f6de13f4a0e6f271057629ac8437a081928acc760134ffaec19","ssdeep":"768:b1aGSJ5p1U/6u7T1/gvOPmEm+Jk0pjCJZ:b1aN51Ut7hm+JppUZ","tlshash":"4dd2f1db647638f7ec260d2450f28f53e9a8ba0c091a0e5639213e5e3cb99e351d8fd4","first_seen":"2026-04-17T09:57:45.320762Z","last_seen":"2026-04-17T09:59:08.751094Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytopf.com/counter?_=0.48600471899086783;id=3636264;u=https%3A%2F%2Fcase-battle.mobi%2F;title=Case-Battle%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B9%D1%82%20%E2%80%94%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B5%D1%82%2C%20%D0%B0%D0%BF%D0%B3%D1%80%D0%B5%D0%B9%D0%B4%20%D0%B8%20%D0%BA%D0%B5%D0%B9%D1%81%D1%8B%20CS2;s=1280*1024;vp=1280*1024;touch=0;hds=1;sid=5390ca4d7e991ace;ver=60.6.0;tz=0%2FUTC;st=1776419831271;ct=2364/2374/2374//1478;rt=1478/821/0/0/0/1478/1599/1613/1619/2206/1681/2206/2298/2299;gl=u;ni=;lvid=1776419832486%3A1776419832519%3A1%3Ae3f89da607ec229ca1deae86401d16c6;opts=dl%2Cjst-gtag%2Ccnhp%3Dh2%2Ccs%3D19694-48989-20775;visible=true;js=13","fqdn":"mytopf.com","domain":"mytopf.com","tld":"com"},"ip":{"addr":"79.137.156.169","port":443,"asn":205830,"as":"Digital Transformation Plus LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:12.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mytopf.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 29 May 2025 13:49:18 GMT","end":"Tue, 30 Jun 2026 13:49:17 GMT"},"fingerprint":{"sha1":"6E:F1:03:10:39:8D:4F:69:B4:66:03:59:B2:D9:B4:BA:38:F3:E7:C8","sha256":"9F:26:5E:45:90:75:A2:71:B4:28:C2:F6:48:01:20:32:F8:48:25:B7:A6:E1:CB:91:5C:F8:A7:97:A5:BD:6F:CD"}}},"request":{"raw":"GET /counter?_=0.48600471899086783;id=3636264;u=https%3A%2F%2Fcase-battle.mobi%2F;title=Case-Battle%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B9%D1%82%20%E2%80%94%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B5%D1%82%2C%20%D0%B0%D0%BF%D0%B3%D1%80%D0%B5%D0%B9%D0%B4%20%D0%B8%20%D0%BA%D0%B5%D0%B9%D1%81%D1%8B%20CS2;s=1280*1024;vp=1280*1024;touch=0;hds=1;sid=5390ca4d7e991ace;ver=60.6.0;tz=0%2FUTC;st=1776419831271;ct=2364/2374/2374//1478;rt=1478/821/0/0/0/1478/1599/1613/1619/2206/1681/2206/2298/2299;gl=u;ni=;lvid=1776419832486%3A1776419832519%3A1%3Ae3f89da607ec229ca1deae86401d16c6;opts=dl%2Cjst-gtag%2Ccnhp%3Dh2%2Ccs%3D19694-48989-20775;visible=true;js=13 HTTP/1.1\r\nHost: mytopf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: FTID=1RMYgQ0tkIId:1776419832:0:::\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Apr 2026 09:57:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nset-cookie: PVID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cb8:CAASEL64cFDKk2chkuI3ZiHZhX8aYJM5xe0JEWiYD5juM2meFjA44cq9NFzbpbLcQj3XLubuMyidWaAIBXnv0mPZq2TxeDicH6Q_A3CMET0jCyiMij-kGagtAoA9dZgIDJbzG6rs5A5FE48uGzQwOHy5APFqEQ; path=/; expires=Sun, 18-Apr-27 09:57:12 GMT; HttpOnly; SameSite=None; Secure; Partitioned\nVID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cb8:CAASEL64cFDKk2chkuI3ZiHZhX8aYJM5xe0JEWiYD5juM2meFjA44cq9NFzbpbLcQj3XLubuMyidWaAIBXnv0mPZq2TxeDicH6Q_A3CMET0jCyiMij-kGagtAoA9dZgIDJbzG6rs5A5FE48uGzQwOHy5APFqEQ; path=/; expires=Sun, 18-Apr-27 09:57:12 GMT; domain=.mytopf.com; HttpOnly; SameSite=None; Secure\nFTID=0; path=/; expires=Thu, 01-Jan-70 00:00:01 GMT; domain=.mytopf.com; HttpOnly; SameSite=None; Secure\ntmr_lvid=62fd06812a9251cd3b7fb8eb6155c6b2; path=/; expires=Sun, 18-Apr-27 09:57:12 GMT; domain=.mytopf.com; Secure\ntmr_lvidTS=1776419832000; path=/; expires=Sun, 18-Apr-27 09:57:12 GMT; domain=.mytopf.com; Secure\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS\r\naccess-control-allow-headers: *\r\namp-access-control-allow-source-origin: *\r\naccess-control-expose-headers: AMP-Access-Control-Allow-Source-Origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\np3p: CP=\"NOI DSP COR NID CUR PSA OUR NOR\"\r\ncache-control: private, no-cache, no-store, max-age=0\r\npragma: no-cache\r\naccept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccept-ch-lifetime: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"9bb191c6827273aa978cab39a3587950","sha1":"25d8043336eb799e52b1a0e15ff6b95e09c24e35","sha256":"24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db","sha512":"c3970b9a8dc9b424528274e8d22d21e9990ce956aede61cba13de8d7832a8c896eaf1032662a78e95980ea013090cd4406f32604da3c6f557aa136842d04324d","ssdeep":"","tlshash":"fb900003cac888a2c2a2c0300a0803002bb8a8300228030ec2bc30acec3aba2cc03008","first_seen":"2023-04-05T11:29:20Z","last_seen":"2026-04-22T13:54:19.802667Z","times_seen":2460,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/case_new.svg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/case_new.svg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 960\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: W/\"69c59b3a-7ce\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270064-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.494416,VS0,VE117\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fK5ewpLgvpL%2BcspGAnHO7AttvIlCUQfZnGQg2%2FRD54Z3NhxW9DUKOh%2FqE81%2B0z0H9Pwmd%2BJqxULV%2BE5gZsBac9iJIZTOph5J1hU8B%2F%2BR95%2BY3JITd0gr9ujB1nKk8LE7xwJg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d06b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fa0fc159287f97cced8e84993a11fe9","sha1":"a4b5245b7a6a820b6aa7230cbf58d290f4f9e981","sha256":"a30c3d3c5ee552c7073e25af1d0397908e8b73000b568883954019eefb39b1ed","sha512":"b357bcff804dedcb8f636d0ad41e57758c944d8b8e68df56e0ca0e4503bbd5e362b5b39b9585bef498fb1e46210c861dce8c200f5f919cc702e601631258547c","ssdeep":"","tlshash":"8b4194f2d3e52c25f44c87d4c6246049be10248be191e3f4f4ceae493f224e2889c954","first_seen":"2025-06-27T04:58:45.862319Z","last_seen":"2026-04-19T19:19:23.512972Z","times_seen":44,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd57bc9b359.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd57bc9b359.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 21553\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:11 GMT\r\netag: \"69c59b4f-5431\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 7343\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270055-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.396215,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=64OxrdNFkYCaxMsNa1%2Bdhh3VI5A%2BMF0YrPO3b4yX4Tp58iDy9eokVxtsfKdGGOKJ6vwylqr2heH8Mw3DcXslbh4cxBHnTNHNqKtOMwj1q4QCeuKsD6Mu1IN4Gq8CZ424Jw%2Ba\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b13b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21553,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"409ad4c7633acccd10dda7a953894b09","sha1":"6b90d220184498f569015995a72a2ee47f4131fb","sha256":"44f6a89603f35722a33e701bab2c5791c9d67b0fe9bce313a3fe5330ff51c3d8","sha512":"8ef0691af9119157d9b836743ddd194dbe24eff5cb196c61bceb52ac34ba8b14b4dcb2c2caf33b8e06efce56ab012268186c7752c0ad67f7fa1ce1d062d350a3","ssdeep":"384:F9NPgM4CwGpPR0MlvrIMzuL8E5bsr2SFrLIFZxsvMx0b0ycQ+H:7NPgM4CtdtvUEI8Ab62SFEZxsvGKcQ+H","tlshash":"5ea2c04492a2e2df8f363c6753b099a01cfb90ff89664188c559cb6c1ee17522e0bdc1","first_seen":"2025-06-27T04:58:45.821611Z","last_seen":"2026-04-18T20:11:58.265505Z","times_seen":23,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c1699e0c323.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.411Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c1699e0c323.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 91606\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:10 GMT\r\netag: \"69c59b4e-165d6\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270046-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184592.808201,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mbjyOk%2FVoTlMyc7ayv8xi1TFw3RLC2wYJWZlyUayagxtno%2FaXwtmiRKi8WqrEQl5YA5H9n5tZb34plWQOxYD8LYf4zYZ6NMKfP9rXLs59Mm7ImTmb00hN%2BKqmx%2FYTEVYzrKQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b2bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":91606,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"f62fa2ab6174178a15a9a57c00fae643","sha1":"535efa4444d48b6cf2f06c3c31aa8aaeae452861","sha256":"74988184a7d950bd2d010d646bb98e91876cd765ec626ea3f8d8f1c0a949d742","sha512":"17b1cb90ad0a6d06ce322a89777dda62ccfcacd338a93b91d838603af3e3be92ec0b5f1ec3e764c35bcc6711b9aef4b855c71c444dc5f9fbd238b13f3953956a","ssdeep":"1536:en7suwgCav2bq38TkmDtiP2ND+MT73WyyEH6dJb7H2wxpwCr:en7suzde238TfZhD+mzxHu5HZxpbr","tlshash":"a79302dcc6f79605df0c08fd8b8bf5b647b1441d009cebc939411a4deca9aaf659809d","first_seen":"2026-04-17T09:57:45.32698Z","last_seen":"2026-04-17T09:59:08.798726Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a362bda43e9.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a362bda43e9.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13495\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:58 GMT\r\netag: \"69c59b42-34b7\"\r\nexpires: Mon, 06 Apr 2026 11:21:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 106874\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270053-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.391688,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvH0BkrhkHF3YvjP86UEBnmu60VdryplQKQJCCtQd9vZXx%2FPXh28DjjELnBFcjvnICd0YcsVGbxOGY2qLJ%2Be1ZbV3uZW0G8V8we6v%2Bj6Nk1JDFBrv4f7JWdT7awpTmpe1jNQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b40b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":13495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"1d097bb46c8ab028d0ad961bb3412995","sha1":"dcd055ae5c408174338dda3b34f19f89c21ffe3f","sha256":"4699cf430f3af6456fa02dd659c7bb97ee312e2b158553fc5dd9d9de83956c40","sha512":"01b2b7b21f154ecd0974083a074fece8af563a77648d974393cdbfd58ca76eb428962a2734f8cb408be1491d13f445e337c4e1c77b59e5a61c750357d2601bb9","ssdeep":"192:KS8NQzke9R0Hi1mbYERK311ih7YhJPu3FyplvX0H6IE/Raf4QdUtYH7irSI:Fs4ke9n1lEMF1ih7YhJPr7kgZSvI","tlshash":"fd52bf61acfa2a2a62ce3337400a7981db5795bf11f69cb106e0d04fad089df73c9994","first_seen":"2026-04-17T09:57:45.328686Z","last_seen":"2026-04-17T09:59:08.789341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793ec485d7d.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793ec485d7d.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3845\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:07 GMT\r\netag: \"69c59b4b-f05\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270029-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.258435,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7QzDafln62wmsVGJ11iA%2F3c%2FcRkj5%2Bw2oxsQ0eVbW8Lfe2eS6XSJCgML%2BzQHJLNRYFwLyYvxJlOgV5rOvS3AUEG9z3Dx5NJgFgHeIRgIv8Fc%2BI90vi3foeO0ZK6kS7%2FTIMZ9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646cffb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3845,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"d57ce03b98a4f3b6e63d67d1326a2f70","sha1":"3fd8a2161f312f7c0c7c5baa57387a095d50f132","sha256":"847c300a06478ce428d9cc720994028f7d4128122f6d5cb9e45cb5d59455257b","sha512":"a1a4b4316ed64dac2e880d9de57df6822882bd10f7f5f5069590e60eb8a151056f43e83f69d5721b38066f79107e6ea3d7b9cf3fe1d1efe718bcdef64595626a","ssdeep":"","tlshash":"2b816db4b602e6045e6fcfb9b5910ce174560af96066bcc8a789c3f69db21a00c5869a","first_seen":"2025-08-05T19:46:08.67485Z","last_seen":"2026-04-18T14:18:26.59704Z","times_seen":7,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd3e5910c9c.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd3e5910c9c.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 94042\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:04 GMT\r\netag: \"69c59b48-16f5a\"\r\nexpires: Mon, 06 Apr 2026 09:51:14 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270071-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.396225,VS0,VE114\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LKY51KX5jnq5WrBjEE2WsjZEMV9Dv6kq5jy90%2FjPqL8ndYAtKibIR3e%2FGsX03plhAl7tLwtJtiHGrgd3C%2FM52AsHM1TrpeKxOz4k5OgqqozNuvmGjEXwR8dYuoIX5Vw2YbQL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b17b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":94042,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"81cc762f639a79ab337b62327e31e405","sha1":"97bf25160559c45e950921d4e464a9771475e087","sha256":"1cfc2b5ca841efb2b98bad5e579819c0bf3d773fce65b07658b75b9ddfe0401b","sha512":"fee01d991a394da47442b28abe20cf3b6e110d2f716972b2f744a4cdaef0c6542ced8abc3629a4ef5cf5d3464ea471e253d27203dba1fefe11c01da8f78f6085","ssdeep":"1536:AJy5TkwAs9Ncy18yC+j0EXauldUfgI6/D7kbecS4ZTEseP1pLjY1rGbkkyew7lzp:AUQhCNcy1UxuogIgkbemZ5y1p4rGACmP","tlshash":"499302f8108f50b3fbef514f37e19083894078a7e91a71aa0e96b774270945562ebbc2","first_seen":"2025-06-27T04:58:45.938764Z","last_seen":"2026-04-18T20:11:58.222616Z","times_seen":23,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-5GSG2TPNHT","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.74.8","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.466Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:35:08 GMT","end":"Mon, 22 Jun 2026 08:35:07 GMT"},"fingerprint":{"sha1":"7B:71:3D:9A:FE:85:53:DF:44:BB:90:D6:C4:82:1E:58:A2:A4:4B:F0","sha256":"CA:E9:C5:B9:FA:2B:F0:20:19:FF:0A:2C:CB:22:9F:C6:8B:41:0E:09:94:8E:E6:48:22:CA:02:F6:BA:10:B7:A3"}}},"request":{"raw":"GET /gtag/js?id=G-5GSG2TPNHT HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\nexpires: Fri, 17 Apr 2026 09:57:10 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 157057\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":473479,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"e183a741b1249abe78d2c920b4b0f392","sha1":"276d15d4557eaae7422a1196036431e6fbc85f79","sha256":"268b2a44d332ba4f8e6ee43dd6538fe317d481c211ddcad344d83380d8c13e8e","sha512":"ce095f6b6a3138765295181d6583ea5c265f2cf5fd4adcaf549738b19b5dfc1d19dc39457fe578724d3704a5eb8b19a7ba4f18ebac3078c3c3ac6481cbe58bd4","ssdeep":"6144:8J4OjKg7CA4MRBRfrJPj8B3v0yIjwcHCpLUgW6w01V91XG:i7t4MtfrJL8p5WOW","tlshash":"bca409ceb3c674665396f478903f018ba57b28a2b44cc89af189cce42d7465a4277f7c","first_seen":"2026-04-17T09:57:45.332961Z","last_seen":"2026-04-17T09:57:45.332961Z","times_seen":1,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":146,"dns":0,"connect":7,"send":0,"wait":31,"receive":26,"ssl":174},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793ef9f34c1.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793ef9f34c1.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 5172\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:07 GMT\r\netag: \"69c59b4b-1434\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270054-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.474160,VS0,VE82\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2BLTKxkzv5baHdVXjRzYuhot9MSNBGU4Vg0N06WLVQAxL9k2BbUHbi%2FJy60kYVal1OEFgZ3659VhgivmgzrAlatMaFRykf1%2FIjtNPxBZvWBmwOh9kQBdaPFZbe85K4g4sAiJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cdbb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"7156d826f27343837b129e80bc9414d2","sha1":"0c44a6ac814f3fcd0f40b29acdf2cbecd5dc90bd","sha256":"23afc2effded8a8817e02e5d4570787243ace5efe488f5db098149f45d1e3901","sha512":"89223bd5be7e5e9593007f565adf019f3a17ccdca1cca5eea373f3c909940239be069edb9220216047588309a4bd94147e51d15b7f1b58e1a388194196e5bc26","ssdeep":"96:viZEVRT/178iRH6cFkxy5/7OBedQixkDT1P2Z1ekXaDvxfFSRmK7:KZURTt78i1JGUCedJ2D5U1ekKDpmmU","tlshash":"8db18e509b8a4879c4de8f030f6021289dedc0e16b297982921c663bf93b01670a793b","first_seen":"2025-08-05T19:46:09.018831Z","last_seen":"2026-04-18T14:18:26.6465Z","times_seen":5,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-63f250e31986d.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-63f250e31986d.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4860\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: \"69c59b3a-12fc\"\r\nexpires: Thu, 16 Apr 2026 22:44:54 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270029-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.258996,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dyTb%2FGc4%2B1joDsm1lR420CZDoieM16GvrnXYt6%2B14hGiUjnEDXMEHdxSnnRtHubmlQxFPAWaJUftNZJDuk80c47LFjcdAuwUnW%2BIc6LKmm7saUwWhLezqdJYFo0o%2BHXcnj2T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d01b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4860,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"2ea2d6aa1b3bf8f8148eb69642f48dd2","sha1":"675d07c56806e68d0d63d90b03f1b9fb4764275f","sha256":"833ee3beed8baf530528a7bb65e54f400709d8ab64379f8d609b2959aeba9092","sha512":"1074b1715db408fd4b8a3b0341464848316262fb3d460d40727a7f86b26dca8373e0472422916f28fcc126eac1998b686dffbd8463371179033290922c819dc6","ssdeep":"96:0GcwNPIGa3AWkc5YiSNbIg0++IcGLEoa9vjChg5wPvdyvE5ogDP:0Gc4Iya/gzHBba9bChg2ndyv+o4","tlshash":"60a17dbf7ed430f24ac35eda2bb319b41782739128998164cad8a45e35b98a41011732","first_seen":"2025-06-16T19:50:55.681572Z","last_seen":"2026-04-17T09:59:08.7818Z","times_seen":4,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/visa.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/visa.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1919\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:56 GMT\r\netag: \"69c59b40-77f\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.270061,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOf0q8LwHRPiImSKQexWKYrLFnFzlSQ6VHDgmg5Dt%2FvJBYrLr0psSDHCADfSYdwN9uiIeRUD1px3PxG4tYzRmEYKGbhZP5SF8IoRYXkn1LUQIR8KB%2BCc4RdrsUHVNPlFC16F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d0bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1919,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 50 x 16, 8-bit/color RGBA, non-interlaced","md5":"1e0239cf745d6aa181e5775d610d39e7","sha1":"3f74a6afdeed9e57e674db2dc4f57349f706accd","sha256":"d5892934372ed9555441d05159ad17a97d1a1dd0730ecec1489590012a7802ad","sha512":"ad102939426f6c7496de476cf719f6889543d635f6ed684c1fe0ff84b6dcbc9e50ee0cea81d4b7a1fc6c728afa2f3bce3a22a5e0e5d15a1aa62ecaf624368c81","ssdeep":"","tlshash":"f4411bb66f987cbd1c8400156dd425e0d27730d2c3c7fd455f8a4bd3f21ea0551e28a8","first_seen":"2024-12-02T21:43:54.419265Z","last_seen":"2026-04-19T19:19:23.506551Z","times_seen":40,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/logo-bg.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/logo-bg.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/css/style.css\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 9217\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:04 GMT\r\netag: \"69c59b48-2401\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.943385,VS0,VE120\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qOF3RrT%2FpAJ9HqqziI87TPkyC%2BOk8JNPeN1ARDMuuQy8R%2B6VpJFnvLZobBEeuGy1lbfx33F3Z7wXNhCkyA9pGHPUQP1cR%2BrEPzw%2BlYv9FSlPvYqL1Di7%2F9kDALExplt%2Bm5Dp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90673808b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":9217,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 181 x 26, 8-bit/color RGBA, non-interlaced","md5":"8fb94dae12514b52f2a96a7662f4b51a","sha1":"cbf451a47539c046638b99caf524823622bc48aa","sha256":"83984862e6cd579a65d5cc3b649bf32bfbffb7d24347d8df4538b81c9ed4c902","sha512":"06713387bcd00bbff8a47c380be7c9d3038dbf53476b98ccd0bcf9f51d44bf68e851f137d4c2883c8cf35ed05bb1e4c746c22a59cdb8f3b00d9f9ec1e28f5ebe","ssdeep":"192:KEelMtRr+20CT5eARmFTr7rKU0T4lalm2xXZurt5FxypNPMi:KEaMtRS20MwffP0T4lQLpOXy/","tlshash":"ab12bff276044bd09dc850e649a4e93a9995f4b103772d49eee2813f4973329f90f749","first_seen":"2024-12-02T21:43:54.585235Z","last_seen":"2026-04-19T19:19:23.482508Z","times_seen":32,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":158,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id.vk.ru/button_one_tap_auth?style_height=44\u0026style_border_radius=8\u0026show_alternative_login=1\u0026button_skin=primary\u0026content_id=0\u0026scheme=light\u0026lang_id=0\u0026providers=\u0026uuid=shbmrd\u0026origin=https%3A%2F%2Fcase-battle.mobi\u0026oauth_version=2\u0026v=2.6.5\u0026sdk_type=vkid\u0026app_id=53423210\u0026redirect_uri=https%3A%2F%2Fcase-battle.mobi%2Fggdrop.html","fqdn":"id.vk.ru","domain":"vk.ru","tld":"ru"},"ip":{"addr":"93.186.237.1","port":443,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vk.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 Jan 2026 16:54:41 GMT","end":"Wed, 03 Mar 2027 16:54:40 GMT"},"fingerprint":{"sha1":"9A:B2:15:9B:DD:A4:3B:0F:D4:06:A8:3F:3D:4F:42:8D:99:F4:47:71","sha256":"4C:28:49:A6:F1:E1:02:92:0C:39:0F:F4:1F:AB:0A:41:3B:CA:14:12:E6:A0:F3:7A:03:03:04:ED:13:D8:76:DC"}}},"request":{"raw":"GET /button_one_tap_auth?style_height=44\u0026style_border_radius=8\u0026show_alternative_login=1\u0026button_skin=primary\u0026content_id=0\u0026scheme=light\u0026lang_id=0\u0026providers=\u0026uuid=shbmrd\u0026origin=https%3A%2F%2Fcase-battle.mobi\u0026oauth_version=2\u0026v=2.6.5\u0026sdk_type=vkid\u0026app_id=53423210\u0026redirect_uri=https%3A%2F%2Fcase-battle.mobi%2Fggdrop.html HTTP/1.1\r\nHost: id.vk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: kittenx\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 37817\r\nx-powered-by: KPHP/7.4.126432\r\nset-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.ru; secure; HttpOnly\nremixlang=3; expires=Wed, 14 Apr 2027 21:03:50 GMT; path=/; domain=.vk.ru\nremixstlid=9089905129036021694_jhFudxozA4ZGyQdTXOqLfzSOk82ljvHUDamfOvrQfVg; expires=Sat, 17 Apr 2027 09:57:11 GMT; path=/; domain=.vk.ru; secure\nprcl=98c0dd4b8a7240; expires=Sat, 18 Apr 2026 08:57:11 GMT; path=/; domain=.vk.ru; secure; HttpOnly\nremixuas=NmJmMmI5MTBiMjhhZTk2YTA0YzNiOWM1; expires=Fri, 23 Apr 2027 09:23:28 GMT; path=/; domain=.vk.ru; secure; HttpOnly\nremixstid=1040988296_es9zx6Jzs5Fk1lTmNlw1MVu2sPBPvJiKkl5Z80ofoCP; expires=Tue, 13 Apr 2027 06:17:45 GMT; path=/; domain=.vk.ru; secure\r\ncache-control: no-store\r\ncontent-security-policy: frame-ancestors 'self' https://vk.com https://vk.ru https://*.vk.com https://*.vk.ru https://case-battle.mobi https://www.case-battle.mobi\r\ncontent-encoding: gzip\r\nx-frontend: front920400\r\naccess-control-expose-headers: X-Frontend\r\nstrict-transport-security: max-age=15768000\r\nx-trace-id: VF73qhamdT1fHdC8ueTFEOtM1Ju5Bw\r\nx-trace-id-v2: 019d9adf7ea0787d9cd02cad93df5bf0\r\nserver-timing: tid;desc=\"VF73qhamdT1fHdC8ueTFEOtM1Ju5Bw\",front;dur=97.361\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"KPHP:7.4.126432","description":"KPHP (kPHP or KittenPHP) is a free PHP-to- C++ source-to-source translator, developed by VKontakte.","website":"https://vkcom.github.io/kphp","common_platform_enumeration":"","icon":"default.svg","categories":["Programming languages"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":182781,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36588)","md5":"d17599c0e25d2cc9c4eb35b525ba7193","sha1":"83dacb02ee7d008ab981f862977ba51fef471c53","sha256":"deb7c70321c03df80ced786c7c7ef62304ab9cd1f8b34423602a1c8fb8f2a657","sha512":"393cf5d122db687af843ab263c03b1e2cdca4674695d2a2cf31b25992bd43861486ea6801359dd8a2a019564a85490e3af7ddc443c01f93654744a8d2026919c","ssdeep":"3072:DzrETV+IQ7iRhzJ7D7gy6LjWmp6w94ArlNlyZGtAVTEXEypZ4AqHgeAZ0YjZ:Dzrv34NJ3Y9lrl0VTEXEypeM0YjZ","tlshash":"a124bd0195f418a5b3af8816f8043b462da9d1fd4fddc92602acaf3d94e67d0c2673da","first_seen":"2026-04-17T09:57:45.33896Z","last_seen":"2026-04-17T09:57:45.33896Z","times_seen":1,"resource_available":false,"data":null}},"time_used":682,"timings":{"blocked":230,"dns":13,"connect":46,"send":0,"wait":138,"receive":42,"ssl":209},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-6154293216365.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-6154293216365.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4977\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:07 GMT\r\netag: \"69c59b4b-1371\"\r\nexpires: Mon, 06 Apr 2026 09:51:13 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.254208,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6XsT%2FiGwWEYELqKFJih9ECyyfCy7hlby6l7nYEV69ehj4nHiyHiHNCZ38W3NH0uuDNMIZ0%2BCMWHEU9cZ%2F266tYqFBgj8Qm4jG1OHfuUeZMGeCP%2FfZrID6hC7NZBLXpS5ULo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646cfdb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"52ca345a4ebd4dd0e281dd454051c35a","sha1":"def2bbccaa1a653df9decc85141a19321a068469","sha256":"cbf4799d434174989c1b07ee9f7864a388a47c955f908ed324fe0d3723713320","sha512":"b2588fdd610a20f7208a521f69b34dc980ef4fb65d4033194d9db349357060b4b0e99fd3589e7ea30fcaa2933ba320274f2b12132f9e37c7e04f09231dc248fc","ssdeep":"96:HHiFMFqmObxbo5EUFRdQW41dOpVFwt4dnzuLZyPJ+/ZxP:HCFNmObu5xQb1gpVFwt8zu4Bwz","tlshash":"0fa17d91848b34f5f1f7e9924e67c5c7f6f96e9027c400a6a40cabb1b8f9c16120d57a","first_seen":"2026-04-17T09:57:45.3404Z","last_seen":"2026-04-17T09:59:08.79538Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 10:07:33 GMT\r\nexpires: Mon, 12 Apr 2027 10:07:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431378\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-04-22T17:08:29.182866Z","times_seen":8462,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":149,"dns":1,"connect":28,"send":0,"wait":23,"receive":6,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/icons.svg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.248Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/icons.svg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvia: 1.1 varnish\r\nage: 2024\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1776419831.269625,VS0,VE1\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9CA9eIOu7E5fz5Msk75d2%2FGigp8PMveSYdx4BsYtRFwG3W3Z7HUqNkbTTx4vfnKNP2BLidK%2Fmndu8ww7LzZXP4bn0YuLEff962dltYSpCrUAFnKyKnxB8FUfKMBGqcDsEd4L\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9eda90693a2db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-04-22T14:42:24.831274Z","times_seen":16847,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd581438047.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.399Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd581438047.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 11579\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: \"69c59b3a-2d3b\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270020-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.398786,VS0,VE111\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NHvTJeSPj%2FwNWsGRpnev9K1NjS8Kf%2FNHHRtxfBXXvilR6pHAdEotIpJWW6liCBEn6d1%2FpjW0QrlFTlqB3wiIOhF31aGwRp9%2BwCUu1%2BMXDaluDjE8hd%2BgTFyZhHh6covqy7q7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b19b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11579,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"d2a39b046a7a8e8310c7be4fa529067d","sha1":"2832935cbda4979682846774c33972372294eeff","sha256":"c300e4b0c23e374738a45933bb8d606ca996dfe97a3ca99689226801544c105c","sha512":"309018498121532d63d6e2c65e3e73aacf2a25d624644040adefbf1122ca8aeacf28fd69e9a456144024a0c20fb35caebae3561afd7ad00e3d6a937a67898407","ssdeep":"192:KSdPWuBjosbzqw7gBsbY1b7jRoc7rlpzxfSKWNsfijxnwdYuiwJsQEe4doTr5XNG:FdvBUsbzh7wXTRp8sKjx2YlwbEedTTG","tlshash":"6632bfab0d78a9e8c7a80d1d7cd70543e97d9a06c17dcd76d9aba64d86da2d00210b12","first_seen":"2025-06-27T04:58:45.9011Z","last_seen":"2026-04-18T20:11:58.230971Z","times_seen":23,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c1665d3f253.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c1665d3f253.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 89775\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:02 GMT\r\netag: \"69c59b46-15eaf\"\r\nexpires: Sun, 05 Apr 2026 17:41:35 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 235239\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 1\r\nx-timer: S1776184592.784827,VS0,VE2\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWyPcoS8ykRTaWHn4bfZtN8wE1kkq1ZUUc0IZn%2BCAA3Hif8%2FqoPEGuG6CFLvMtS3Y0m32Zz3BfY4xotpkuGYjEZjDHjHK4wx3Ex3E00HXf4RsgTVIRiOhdqC%2FpyAq5igVeS4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b23b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"43bd543b4b45cf06084518a38cbaf3a6","sha1":"16f85604335e0efb9a7e441bba3bf38b8911e808","sha256":"fec1fe643498bdd651c621af0bd54fa856601bad0bd91fe6270df5718364412d","sha512":"5fb9bc7ec069e18d426b3514d843642ebb8be02cd2b216d8dcb61b808aec13c36ad4c0979646747fea3718cbdfced5112a2f9471013d85a4d2fd5c21113e49c0","ssdeep":"1536:KOT0l2Mxwp2FgPXScJwE21I7cx83wb6bhuB6hnkpPnRrL0ie4XT3pPe3DMKQJ+8:zT0l212CSIpQwcNp5PFX9G3IO8","tlshash":"4a9302ae4b0e03d98b3346f3ceee62f5241e1166f064ce18052fbad99f9f9d10592d91","first_seen":"2026-04-17T09:57:45.343195Z","last_seen":"2026-04-17T09:59:08.765529Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612b81f820703.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612b81f820703.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 86935\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:05 GMT\r\netag: \"69c59b49-15397\"\r\nexpires: Tue, 21 Apr 2026 16:21:14 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 236157\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419832.712429,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FURWCeIiqExY3HTe%2F5CMkUfT8bldaqyRkCCBhDQJrocEEi3ci4%2F517jEYfsLUPYviyq4az%2Fmrxh0ly3w89J%2FBA%2FIvdM0qRQtC%2FCgwA7JVWnxdlhP24IjFi%2BB3vTD9It6GEC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906bfd0db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86935,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"cb94030dd0b3fb2005c125cc7171836c","sha1":"2b06c738b6b481720c5dc3b04fc58939cb730a00","sha256":"9b0cd106be80923ce5fb6b638850fe383ac5079f109bca632f257c492a4d1780","sha512":"bd44ef14fafbe76316442d3c679c39a0acb7b7371eb75d77a0a67f7623c5bce3d5f92298a36b5c26eb0c305415a6dd29f266d6ec14587cf0cafdbe4a11aba84b","ssdeep":"1536:vsfcDJ3mDBlaiApu8k5dZm8X9XzAksK+wNSaTjS1eLllc+T7YPuyKJngKPQ2Ydc:v9DJsBwlb8LspwNSaCALPKPe5z","tlshash":"b18312eeea4007f114df62d4258f4d2ab3d1e9cababa1313744f447d5ab36c26ed0891","first_seen":"2026-04-17T09:57:45.34449Z","last_seen":"2026-04-17T09:59:08.794303Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612b80c9dd40e.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612b80c9dd40e.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 89256\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:01 GMT\r\netag: \"69c59b45-15ca8\"\r\nexpires: Thu, 16 Apr 2026 07:26:28 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419832.681263,VS0,VE29\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6xezj%2BlWF4Ynet8QhrsW0V9fa1aOTg5%2FDZy50EabVkAC4Xjg7Loc3KwkA%2BXNx1pku0Ok2GOnBauA2whH4TBZ2X1%2FdnpWbKJ6IasdfvSuWh0b38Wgc%2FyyW7eCIHIXRR2wzSy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906bfcf1b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89256,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"fc576eb4c283602e75d853cdee93d214","sha1":"7ac2e2e44e6b44d54ac595b8323ef814ee88eb37","sha256":"88bbeb4d770f7246aece2d3ed5e366ea564c9b7a0a5255a9e73b8754ae3edf06","sha512":"739c5bfad24f8b9bff7b176cf29a2768345ba30e8f2d341fbbc3ec5bc0141e09583c550a45d5bf8f36378e45afa0215cc1581c3d9b9f85b09042901485a59b63","ssdeep":"1536:NZdx4CQM0T0E9+1eosHuZlIDl9/FVcCh6QAHqrHfkYF8g0qCGBgWyrMlmRR:r0Zh9+1sHuZlIfXPh6rsx8g0qCnrMlmr","tlshash":"e5931247c7f050583ad832c2d2a6cbc628baf2f7b37e058a321e5e5254f6411b1ed65d","first_seen":"2026-04-17T09:57:45.345853Z","last_seen":"2026-04-17T09:59:08.763388Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612b817d64f0c.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612b817d64f0c.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 84699\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:54 GMT\r\netag: \"69c59b3e-14adb\"\r\nexpires: Thu, 16 Apr 2026 22:44:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 99716\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270041-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419832.709367,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWESyXZZBgZO%2BvgQ9HfesP4WaQ6S%2BswxrBBBkMKopvlzQAEsYoQWlOTrilyGODIKWyLP5Ndk0dOCXEO6p3S3NNooegOpMucjPkeWUxhdg2o83G4xhECgSZksnFte9XaLRF4%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906bfd09b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":84699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"a6af9c56e4893f2bfc1ebcf93f9bce79","sha1":"a47382e628b9288ddcd66328d98b132b4578810e","sha256":"3a3996badd8717ae409ce1c163630b40be64b1eb5b586bd4c0b8826e10e2141c","sha512":"5dac37fc3c41204a8206e406797019156ee808cbb7b98692c3b38c3b86836ae021eb167e97b639c7b56d4da681202a1fa9c25b7ddb5c4afc37d1f71ddb584f3b","ssdeep":"1536:Z5OU6+6rZ13hLiBg+ccQAo3ROMkZqQ0Ls+FlkrW12kywZ+H1B:rOU6Nr7YrcnAzMksc+YW12SZ+VB","tlshash":"3483023db2ab1affa374d08b1843b4138d3de95ddd94f1a1cbfc599242cae7140a815a","first_seen":"2026-04-17T09:57:45.347369Z","last_seen":"2026-04-17T09:59:08.767736Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/steam-login.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.475Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/steam-login.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4932\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: \"69c59b3a-1344\"\r\nexpires: Fri, 24 Apr 2026 08:46:42 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 4228\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.459012,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DPKxKJexLzOtuAd8D0OIFOr%2BvhwxkL%2FGFUjXxNtOrEatMkqBdsclT%2FeqOAR%2Bdl%2FSPfOGBlTMRJ3sRn%2B%2BO%2BBFfbhYSPWB8rH0jYTExSgqwKdbJIhPjOVmJvmp8wA57nbYXCrD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90643cbdb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4932,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 127 x 39, 8-bit/color RGBA, non-interlaced","md5":"93c055e9b41186982f1dda43b482eed4","sha1":"27b601899fd3ba7c98d68671ed05545601242132","sha256":"4af78e1af1afb39c847995190a01234e211ad3bccbc498b2149852ead1c4b9b8","sha512":"775f4726b6f21267271b58964abbe90ac4e3b6baaf3be8087c86e3a45bb23f4bec70362588ef82995a956c7636bd26432a703690d45a89c8960a2cfdb2990dec","ssdeep":"96:DiKrUlfyR3wUCfOXPQLis/b+KSefaUd6cuupGg/48xJhAOllgNBMH9zumRt9:DRrUlKR3dQLixKtfiv5g48xJhzQqzu69","tlshash":"81a17e8d4c83f0aaf4565f90ea0a967e81eb9610fc8b40dc80061b4d21dc8b956dbfc5","first_seen":"2024-12-02T21:43:54.411985Z","last_seen":"2026-04-19T19:19:23.549857Z","times_seen":40,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@vkid/sdk@2.6.5/dist-sdk/umd/index.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@vkid/sdk@2.6.5/dist-sdk/umd/index.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://case-battle.mobi/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9eda9067aeb356ae-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KKZVJR4N4EXJJSZBE8MEFQEA-ams\r\naccess-control-allow-origin: *\r\nage: 787518\r\ncache-control: public, max-age=31536000\r\nexpires: Sat, 17 Apr 2027 09:57:10 GMT\r\nlast-modified: Wed, 18 Mar 2026 06:54:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:tL9SpPd2XRGay7ne8RvgUwopTYG+0Ntgw8SXnEchMdA=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":169847,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65324), with no line terminators","md5":"e1cfc6acbed6b5d1f895e03846d8d18a","sha1":"82ec238a9cf9b264004e6e53f763e226518ab62f","sha256":"b4bf52a4f7765d119acbb9def11be0530a294d81bed0db60c3c4979c472131d0","sha512":"8fa611dd0227f799e62b0713cb26bfe282efac6eb7237696767734c9a133c4c17f62df592781b680edf0244509500d50c3840f0fd6688e5359c72474293790fa","ssdeep":"3072:YD8VE96PVVqVFRQ/SwSBsWrA0SYs6NQ5g:EaiMy2GJSsa2","tlshash":"06f35c5875a0b03952c396b4553f2106f23834b664a59880777eccfa2bd6d8f81f6f3a","first_seen":"2026-02-11T13:13:18.339767Z","last_seen":"2026-04-22T06:20:58.469808Z","times_seen":189,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"id.vk.ru/vkid_sdk_get_config?app_id=53423210","fqdn":"id.vk.ru","domain":"vk.ru","tld":"ru"},"ip":{"addr":"93.186.237.1","port":443,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vk.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 Jan 2026 16:54:41 GMT","end":"Wed, 03 Mar 2027 16:54:40 GMT"},"fingerprint":{"sha1":"9A:B2:15:9B:DD:A4:3B:0F:D4:06:A8:3F:3D:4F:42:8D:99:F4:47:71","sha256":"4C:28:49:A6:F1:E1:02:92:0C:39:0F:F4:1F:AB:0A:41:3B:CA:14:12:E6:A0:F3:7A:03:03:04:ED:13:D8:76:DC"}}},"request":{"raw":"POST /vkid_sdk_get_config?app_id=53423210 HTTP/1.1\r\nHost: id.vk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://case-battle.mobi/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 7\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":7,"data":"v=5.207"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: kittenx\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 82\r\nx-powered-by: KPHP/7.4.126432\r\nset-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.ru; secure; HttpOnly\nremixlang=3; expires=Fri, 16 Apr 2027 19:15:28 GMT; path=/; domain=.vk.ru\nremixstlid=9085120054431934625_yP87YPIWJOCH9I7iePolgMqZ4Zf7NcRCIXCBneLMHZL; expires=Sat, 17 Apr 2027 09:57:11 GMT; path=/; domain=.vk.ru; secure\nprcl=d530a343f80420; expires=Sat, 18 Apr 2026 08:57:11 GMT; path=/; domain=.vk.ru; secure; HttpOnly\r\ncache-control: no-store\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://case-battle.mobi\r\nx-frame-options: deny\r\ncontent-encoding: gzip\r\nx-frontend: front920400\r\naccess-control-expose-headers: X-Frontend\r\nstrict-transport-security: max-age=15768000\r\nx-trace-id: vYYjQH0Egoc0xSvt87xme9aKXO-gMw\r\nx-trace-id-v2: 019d9adf7e987262a0f95a16829393bd\r\nserver-timing: tid;desc=\"vYYjQH0Egoc0xSvt87xme9aKXO-gMw\",front;dur=20.334\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"KPHP:7.4.126432","description":"KPHP (kPHP or KittenPHP) is a free PHP-to- C++ source-to-source translator, developed by VKontakte.","website":"https://vkcom.github.io/kphp","common_platform_enumeration":"","icon":"default.svg","categories":["Programming languages"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b3aeacf4189c6ed2f37ec0861fc83dc4","sha1":"cbe516e1f2e2b6ca85e6ea6c6f46e9687a66aa49","sha256":"e9d9d342aff23a22e8d5f3a6d345f11b706e011cf01429138ebfb1cfe8d3bcee","sha512":"5b92716a55793270d4eb39d38c42e6e093127a4d3e8d23c62896512dc137fc9640bf0474534b8dc1d81031d1aacc595e2db7ce52b2e7771583fdc0d1ee3bee70","ssdeep":"","tlshash":"6ba002915dc411f682a9384660604e9234a838e047186ad0d3ae82594b8cdcd66c6216","first_seen":"2026-04-17T09:57:45.350044Z","last_seen":"2026-04-17T09:59:08.752782Z","times_seen":2,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":207,"dns":1,"connect":40,"send":0,"wait":62,"receive":0,"ssl":178},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a5db1bd8c45.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a5db1bd8c45.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 78465\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:08 GMT\r\netag: \"69c59b4c-13281\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270063-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.412538,VS0,VE112\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RDk7bH%2Fx9oFyuvlNJxO92496PRM5PhXsn9GYq3h1eejrmN5MqDj7IDjzh8SFYM0C2D2YWLhoPjFOHWucFhMFjWmYPB%2F0N7cXvytE%2BZIsav8oVXOLsYRBBSfDNny8lOcHaeXj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b46b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":78465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"0765e5eedc9ec06e6da06e2ba95067ec","sha1":"20f60102e37b221eaaee170ef0358a184ffc7f6d","sha256":"f3ad5dd03679ae8ccdd6a1d6c8be5c5f0cea79acd5ea38d80a4c72d6d446b851","sha512":"fd77174f529b79015599e7c4fa388df861401d530cf8dd97d8d2fb8aa59d2f56d54eecaf53f43ab39a14314f30ec77caad71a49f1b5061de23876a8ed139c489","ssdeep":"1536:/CyzgEYHDa3ks4qY9xLZwnIaKgiZhjimPH6USip+7T/5N76vGzVLaefTD4v8V8:Ky9kCpCxLZwnIOicmfNS1//4G5LaefTk","tlshash":"c7731206c1347a763c938b01580a4055294cf1d1dda29e6abcf9e878f52bf2ba5f2d18","first_seen":"2026-04-17T09:57:45.351279Z","last_seen":"2026-04-17T09:59:08.754034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytopf.com/js/dyn-goal-config.js?ids=3636264","fqdn":"mytopf.com","domain":"mytopf.com","tld":"com"},"ip":{"addr":"79.137.156.169","port":443,"asn":205830,"as":"Digital Transformation Plus LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:12.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mytopf.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 29 May 2025 13:49:18 GMT","end":"Tue, 30 Jun 2026 13:49:17 GMT"},"fingerprint":{"sha1":"6E:F1:03:10:39:8D:4F:69:B4:66:03:59:B2:D9:B4:BA:38:F3:E7:C8","sha256":"9F:26:5E:45:90:75:A2:71:B4:28:C2:F6:48:01:20:32:F8:48:25:B7:A6:E1:CB:91:5C:F8:A7:97:A5:BD:6F:CD"}}},"request":{"raw":"GET /js/dyn-goal-config.js?ids=3636264 HTTP/1.1\r\nHost: mytopf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: FTID=1RMYgQ0tkIId:1776419832:0:::\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Apr 2026 09:57:12 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nexpires: Fri, 17 Apr 2026 10:07:12 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS\r\naccess-control-allow-headers: *\r\namp-access-control-allow-source-origin: *\r\naccess-control-expose-headers: AMP-Access-Control-Allow-Source-Origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\np3p: CP=\"NOI DSP COR NID CUR PSA OUR NOR\"\r\ncache-control: max-age=600, private\r\naccept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccept-ch-lifetime: 86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3573,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (525)","md5":"e3635e7b735940ba60629e73f5136026","sha1":"9cb53ecc9e370f27adacdf522f47688a9a0590e6","sha256":"0e7e3045519beaff2095d4a64b8dfb1b581013eb5b8f4b3549983c69abe7139b","sha512":"fe65a2043d22e0b11bad462ca623f20caa6effa160c4496c2f8848c3d7b0c5aff5c4618186e495fea33ff07ba894462fc3362242ca86dbffd1109604a55acb17","ssdeep":"","tlshash":"277185c4f3dd3fd71ae3567298ee028255715c626c45af52412be9503e32e94707be88","first_seen":"2024-04-18T08:47:58Z","last_seen":"2026-04-20T14:19:21.571684Z","times_seen":946,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/bcn.svg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/bcn.svg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1463\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:04 GMT\r\netag: W/\"69c59b48-efa\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270044-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.268917,VS0,VE1\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lGQ8e3ORl%2FH11SRGURehfTqBShfVLU5HFjYIgQzUZO9m9T%2BA6TI2MCuLQS09E%2BGwqAqtTmzkOAZPmsgpvDdaGdoFjQUCTA%2BQNWflcWso%2FE4msDesm6gMlZMWDBIBQXWPeeG2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d0ab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3834,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccf796a303d08cb705635ac35982202d","sha1":"231ce5a1971e742bfd9b8fc4633fa697021c3d0f","sha256":"d96e3c77513c78deb1f64c6c9bd76df93619ebaa559bd17c131dae8dab1577e0","sha512":"fe68201fcbf60fe3e2da666ea6013e5662b0981fec7ea9323ad0737a949bdd1651b7dd90fd70e4061ee51e1a5eb794ab85041df748b9fbead09cf147110d0cc1","ssdeep":"","tlshash":"91816127d317d6abf5098184eee83016b2a0f9abd4e0d6d0a367792af1cc8d1150c3f8","first_seen":"2025-06-27T04:58:45.860802Z","last_seen":"2026-04-19T19:19:23.513433Z","times_seen":36,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd3af2b35f6.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd3af2b35f6.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 93285\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:57 GMT\r\netag: \"69c59b41-16c65\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 149216\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270048-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.348928,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HrfOFq%2FOAklG3ToTGK87kOjM%2B%2FHLHkmfohf0%2Flxfq5%2BJBp1QdSReg5RxQ%2FPwZeiEcNt8IeEeGVf3iu4Pc6pbM00N75ZGEjqst1MoW8rkOll4IJh05E01saTfmp6RRI4GbFwS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda9069dad7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93285,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"0b4b1a3d1a79661446ed1b34e508b81e","sha1":"07f361983a21aa94a0882748d72fcb56c8308309","sha256":"34957decd0af9423557c263e7adb80a79d3a3905bee3a15c707b8856fb34beb7","sha512":"2265d1c0c1b8c1b5512b275bcdb9ae13a371df0dad7f694277c6beb33fc3d8e9a986ba4d3b7b39e5266b81ca9de212e45d9056ce651108eee78cc64b3a49779b","ssdeep":"1536:5i/s9A7fiwsB+x8svjv7I9hOAwibFnxBj5PK8USzir2:U/Zcgxtz7I9hOAnxB1PK2zP","tlshash":"e5931252bd5827e9657aedf50c2fc0b1f94d92148215d65bb0c2da321c54b4effb8e80","first_seen":"2025-06-27T04:58:45.857513Z","last_seen":"2026-04-18T20:11:58.243179Z","times_seen":23,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a332915e2da.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.414Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a332915e2da.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 82592\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:07 GMT\r\netag: \"69c59b4b-142a0\"\r\nexpires: Tue, 21 Apr 2026 13:08:39 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 247712\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270067-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.407846,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gRCz7%2FjikrWuBB8DIAskDkOyeRhW%2FD03ck1qnDY9rdXEttLCFWZJlxWf2nYcMXEW7fsbZhmMFxrfFURA5PHfMg1bIJMcO%2Fvh9VuZGlvDgTNwuEXLNR%2B8iD9MHG5ZK8eKKmay\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b2eb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82592,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"05f850cf8d1b7df301b04a051f5cb414","sha1":"0ee651b542c39627905fabe5eb30d2abe17ffca8","sha256":"6d6f55e0e6f8e8836dc7fbd505b7d221fc485b7e87dbbc0f38d223c271a8ace0","sha512":"0325d6b78d4dc2759c0ddba29f3b7b81a93eccc84c924eff3fa9643e170d990200d8436081af31652a71a3156b4b570902a37fcd7332776758fe40576f942529","ssdeep":"1536:gdrBvd2EmHwBzM5RpTH3inEUgMeojrRwJnl9Sj3t9ZA9l/zX:g1niweLInE3oXRwG2/D","tlshash":"a383125a2e204abcc9c6550913f1e53b9d1d91afcab1793febf60928178de038d41e6c","first_seen":"2026-04-17T09:57:45.354432Z","last_seen":"2026-04-17T09:59:08.78864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a363a7723e9.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.415Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a363a7723e9.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 15693\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:04 GMT\r\netag: \"69c59b48-3d4d\"\r\nexpires: Fri, 24 Apr 2026 09:57:11 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270077-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776419831.406657,VS0,VE139\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C00VFGgUZE%2Ft2F%2FutGs9yttpKWTK91GtDOZvZhZlqTyKMXQ6pAVJr0n09Jtj03p04PKsX%2FeuKw5hwtKj6hODynkUEP7ksI9nQxwL%2BAntAYl9ScmCE5PCWTN01YCfxrzzdQil\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b30b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":15693,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"56a83c99a2379cde9c3c18ca87ebf3ab","sha1":"001417d7354bb763f031f2d02feb05109cdec449","sha256":"e568fe1c51be0a8c79a0fa75fb84fa5b9e26d2451df7b3b2e15435cca3f29fe4","sha512":"eeed880b422af58d648b95b9aa1626f966caca4f2bbc51d210e40c91a69122013b0fc74f3f9029a5480fcb2cf18dee1f3b53088761a47d8e01679a88c8ded51b","ssdeep":"192:KSGgr/3/Ie1E73NGm73rqy6Imga3LUgbR+m2OTEC0F3uhsqc9YYdpxJke70HEes+:FTr3IeCzpl0nUgV+DkM3Ksqc9DZ7iB","tlshash":"5562d0d69371c8929885720f55f03acfa9d338bcd2a4ccf82a8c77314be99495e0a1e0","first_seen":"2026-04-17T09:57:45.3558Z","last_seen":"2026-04-17T09:59:08.761952Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.317Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 10:07:33 GMT\r\nexpires: Mon, 12 Apr 2027 10:07:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431378\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-04-22T17:08:29.182866Z","times_seen":8462,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c1b9ad31b80.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.412Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c1b9ad31b80.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13335\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:05 GMT\r\netag: \"69c59b49-3417\"\r\nexpires: Mon, 06 Apr 2026 09:51:14 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 30682\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270053-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.386783,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PE0DhBG8F6eSFbLGY8ZBnxZX5l67uGtH2Q%2BZ9k%2BZ0pqp1QwG34ukIUBxahzwKknXUOp%2BJ9N7tCFObSVBWbKJhkG0uWNrm83CXV5n%2B%2Bh8OUHxGIp6JKnpso%2BYgL1QPyF7Qbvi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b2cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13335,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"141967dfb12edfb7bf02f43c0cb0fa31","sha1":"ba3b5a2a2128c0eb5a6b244d2769d7dc19f74142","sha256":"8eebae7a4c618340e3092a399a2f3431518f2df9c94fe48cb2d68838167093b6","sha512":"55d075195050430b6a269feaa3906b03815390fb4b84c8122b888db15e1724fa4d3496631e28eddc8b6391589f59217b53e5f189b8233bb892e5e9c993adef22","ssdeep":"384:Fr9aFJ7FtqDvKcLSO4sULp6LSetVyN0ZvC8I3c:1YbFooLYLS8YY6nc","tlshash":"4f52b0a84d3859bc1f322f48f926740c827e5c03c891c45aa78eeeb1369cd4cac54b63","first_seen":"2026-04-17T09:57:45.357198Z","last_seen":"2026-04-17T09:59:08.774057Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/favicon.ico","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/favicon.ico HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/x-icon\r\ncontent-length: 1350\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: W/\"69c59b3a-b2e\"\r\nexpires: Tue, 07 Apr 2026 14:18:29 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 14470\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270050-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776405361.104685,VS0,VE1\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ybp3Oh3lov5FSSzAT9tcMYdQE9ZYqm%2Fhb3SoAsrZ3PgHZrM8gy7ERw3qoSd04MYVy1Su2yDrR1VOZ9hsonu2ci839y2HPVog5LV30DVIh1MShM%2F0hGGojBnMe38MP6adVlK%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906d9e5bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2862,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 24x28, 32 bits/pixel","md5":"b9d37824247c04c6b0eaca9c1c0f0235","sha1":"112b95b37a82c33b71d469f39119fae283ff8975","sha256":"804be6be529ff9139e869b29694d6a60c10fa78913e027989e90aeac0960ab93","sha512":"241b9e43d9aed356ba4c5da5f73fd64d9d6593df1fbff5ff2c9f105724c8766f560e00b4a962890cf8f85a89e37ad808a7543c6ffe0200a1355a70e5a4dd1196","ssdeep":"","tlshash":"0651df95b1ea29e0cbd0602bdfffeb70d0160a5589d62f0e1ec5419ed8acd666626cc0","first_seen":"2024-12-02T21:43:54.578691Z","last_seen":"2026-04-17T09:59:08.797042Z","times_seen":532,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793ef8d7d0f.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793ef8d7d0f.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2820\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:04 GMT\r\netag: \"69c59b48-b04\"\r\nexpires: Tue, 21 Apr 2026 13:08:38 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.464818,VS0,VE113\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x6YcOKjMXI0OaHWeozgHoqNnbi0hqNk%2BP2T8q%2FE3kCP2H5qprFbRqkTphs03Ds7Q3Q%2BVgvkjM8nxN7nqOB%2B6JaV%2B1dUYAo2a3BTi8YW%2FI2uFEeO00zn2x0hpQQaEZZykFNqm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90645cf0b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2820,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"02b059d8815d5fd48a9766e5b9947bfe","sha1":"dc70eb470cba0a37819586b608de155006b44e5b","sha256":"11bece5c0488413b7a05e1b30f97f55b7cdaf10e4f5ce038ab279f811e2bbad1","sha512":"892f37b667dcb070fefca957417df3e9500ba50a9b58c53ad07ded42c2c622a2bcb0b9359fa073810fb189d6b3b98e0b71dd9bd7456520c6c63f988bc2cfd0fd","ssdeep":"","tlshash":"bf511856de8bdafc803263f94a4792bf69e54bdc0948b678e0720a32155f09ca15933b","first_seen":"2026-04-17T09:57:45.359445Z","last_seen":"2026-04-17T09:59:08.775851Z","times_seen":2,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd56f27fb11.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd56f27fb11.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 20684\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:00 GMT\r\netag: \"69c59b44-50cc\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.371919,VS0,VE112\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WTgAp8DrPu45F6nPLT%2FNbunIms0IfAYfdnKja21Kky2yi%2FAm7pAxvlwn16nNac0pRo%2FFkKKGOmUhMeuDfAawdFubXmvL40cJk%2FigBZErwHpDwwr2ahg3S7NWLfcSIATKzJa6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda9069dae7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":20684,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"0f1f57db0b97a96be4d0982cb1fa0914","sha1":"f9def7e093decdd81b5de9e33d46406fe4385e01","sha256":"3f59aad88e8bd21af9bd4cad8c96e916fcc88eee0c334ec50e48c62bc5dc8f10","sha512":"cf862bb04804a2060d7560263f492fd66581e2a7bb4ef8f94988ce194f8573e255346130b65c1224fee8ec4c3b00917472daedf72e5733d86b9d82f231eed043","ssdeep":"384:FOJkOq9Cc/3pXo449VBD25raXFBNdb2e9deK0sSdueJeZ/oM:Skn9L/5444DUoFBNp2qfSMt","tlshash":"a992cf9a82debd6de95b93025ed4bec2c841f8c624e3b3c036dfbc590057285b97224d","first_seen":"2025-06-27T04:58:45.932095Z","last_seen":"2026-04-18T20:11:58.258971Z","times_seen":23,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id.vk.ru/stat_events_vkid_sdk?app_id=53423210","fqdn":"id.vk.ru","domain":"vk.ru","tld":"ru"},"ip":{"addr":"93.186.237.1","port":443,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vk.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 Jan 2026 16:54:41 GMT","end":"Wed, 03 Mar 2027 16:54:40 GMT"},"fingerprint":{"sha1":"9A:B2:15:9B:DD:A4:3B:0F:D4:06:A8:3F:3D:4F:42:8D:99:F4:47:71","sha256":"4C:28:49:A6:F1:E1:02:92:0C:39:0F:F4:1F:AB:0A:41:3B:CA:14:12:E6:A0:F3:7A:03:03:04:ED:13:D8:76:DC"}}},"request":{"raw":"POST /stat_events_vkid_sdk?app_id=53423210 HTTP/1.1\r\nHost: id.vk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://case-battle.mobi/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 563\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":563,"data":"events=%5B%7B%22id%22%3A1287763484%2C%22prev_event_id%22%3A0%2C%22prev_nav_id%22%3A0%2C%22timestamp%22%3A%221776419831081000%22%2C%22url%22%3A%22https%3A%2F%2Fcase-battle.mobi%2F%22%2C%22screen%22%3A%22nowhere%22%2C%22type%22%3A%22type_action%22%2C%22type_action%22%3A%7B%22type%22%3A%22type_sak_sessions_event_item%22%2C%22type_sak_sessions_event_item%22%3A%7B%22step%22%3A%22vkid_sdk_init%22%2C%22additional_info%22%3A%22lowcode%22%2C%22fields%22%3A%5B%7B%22name%22%3A%22limit_settings%22%2C%22value%22%3A%222%3B30%22%7D%5D%7D%7D%7D%5D\u0026sak_version=2.6.5\u0026v=5.207"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: kittenx\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\nx-powered-by: KPHP/7.4.126432\r\nset-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.ru; secure; HttpOnly\nremixlang=3; expires=Mon, 19 Apr 2027 18:51:55 GMT; path=/; domain=.vk.ru\nremixstlid=9055565181877584730_ERBWlMLmITXjYhzyVB0biOTzpBdUEqgJsSkUVy5iC6s; expires=Sat, 17 Apr 2027 09:57:11 GMT; path=/; domain=.vk.ru; secure\nprcl=7448a04456705a; expires=Sat, 18 Apr 2026 08:57:11 GMT; path=/; domain=.vk.ru; secure; HttpOnly\r\ncache-control: no-store\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://case-battle.mobi\r\nx-frame-options: deny\r\ncontent-encoding: gzip\r\nx-frontend: front920400\r\naccess-control-expose-headers: X-Frontend\r\nstrict-transport-security: max-age=15768000\r\nx-trace-id: 1b1K2vutDMCLgdzicRCoKvFAZl-HrQ\r\nx-trace-id-v2: 019d9adf7fa57dc182ac8405f9d4202b\r\nserver-timing: tid;desc=\"1b1K2vutDMCLgdzicRCoKvFAZl-HrQ\",front;dur=21.106\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"KPHP:7.4.126432","description":"KPHP (kPHP or KittenPHP) is a free PHP-to- C++ source-to-source translator, developed by VKontakte.","website":"https://vkcom.github.io/kphp","common_platform_enumeration":"","icon":"default.svg","categories":["Programming languages"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"83e5f533d7c9e10f0c98734c9147bb0f","sha1":"c3a52214559e549b8bc3a4b5df3026135e575a3a","sha256":"fbb5c7a158ac0b272b5ed5529454946b4186f8ac87f4ed019581031ac97a783e","sha512":"815494029e1a3230ddf7add224b56b398a86775d4bac3eb88e15099ab67a52c87ed08bd8d11330e16324e63f7755434214cc6a531757539985c5c7d087a8d41b","ssdeep":"","tlshash":"4760000a8088000800802000a8820300a82200000228a0b288008080a208a002880a00","first_seen":"2025-09-17T07:43:58.332882Z","last_seen":"2026-04-22T17:03:11.660562Z","times_seen":459,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c16743a3b7e.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c16743a3b7e.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 87305\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:10 GMT\r\netag: \"69c59b4e-15509\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 105039\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270067-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.404494,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yddGe4sXmITHx4%2BkeNsmqkvqHbCCzvQS9QO2YSXWXVCb1ugJu7FDdTEz7a9HYKNzlVR2fG8IF0dy%2FLf1KXeLgBQaAI%2FbtnKuYoRL5Yj7cPZ%2BEbRqPyAOOHK06Rhxr8HpO2K%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b27b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":87305,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"ff46ea0b78c194f8c2e4779852a120cf","sha1":"fdb7c93fc3bb586aca2a159d522cd5792552a6e6","sha256":"26713d9cc7f2eb5134a9bb04eb6483aad74769640ab423880e39a0dd7a0a1fa0","sha512":"5215d5084ba93df364e918f15f600fd3ce1e0422d1d607a16d5b0ad27f84eeb5c8e1f5e855a9f009f50a432051e5f9702d462f569c3daf01e16e7f0abe66c73b","ssdeep":"1536:i9ly28C42p/zojL1SMKLH1tcnjF5w2Jkw9FhVx6SF04mDiHptgA6vJNVAFSnXDS8:AXO2xof14LV+F5w2JkwJVFFpwiJtgzv9","tlshash":"308302ecc7183bf83026a5868947d127cb6cd9fb77664db336663cbc8690986c00d49e","first_seen":"2026-04-17T09:57:45.361704Z","last_seen":"2026-04-17T09:59:08.769899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a33494f2dfc.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a33494f2dfc.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 87019\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:51 GMT\r\netag: \"69c59b3b-153eb\"\r\nexpires: Tue, 21 Apr 2026 16:36:31 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 7342\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.408556,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BrHrTSA8iXcs24KNrNhqRdPVUGBQX5p%2FujwqlDslqGHQDahPR9lpcSZZFjwcY%2BUkYyP0S9oglCGvMr2Q301uYOOueUhwqd4EyOQ2epEFxGCkvlZeZmvr7HQ2bU78g3mccMkA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b3ab4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87019,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"bb369acab087dd0d0f74f399b3179324","sha1":"8ff800d7fd4a2a93437138db09c8498ed2ae4a30","sha256":"593a8407b4a247d116d163a3942fffec5013351eafc8faad86500b08f7be80da","sha512":"2970e320ce1e534330cf288c6854e41eb46540dce5031ab6425bbc4428cd160b1121777ff424345ca78cd87a7329298faecab60c321856ec2a238aa6edc21b4f","ssdeep":"1536:T9EL1Yc6pFU5NR692RFeECeZzf4A2/4r9cDyonRzOWkCRQXYAasdGgDFYnr0cdv1:pO1YcFNR6sRIelfi29cbnRzOWkEQXYA6","tlshash":"2a83120254d3f396e61736321f35776de980f75a84087da870aa2df8b94ef8d2120749","first_seen":"2026-04-17T09:57:45.363565Z","last_seen":"2026-04-17T09:59:08.766682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612b813885ff9.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.691Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612b813885ff9.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 88679\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:04 GMT\r\netag: \"69c59b48-15a67\"\r\nexpires: Fri, 17 Apr 2026 07:51:25 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 7343\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270077-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419832.684121,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aG8N9CwggFX%2BEAFcYYdhrQJhj0p4wiW92T1SwODh3e8chPLR4wytFS%2FbzkOksZRN8SjEnC6KNh7bpmYiy5A0JaO9j2rFrMNNmrNzQ4VyHIYaYtHJku6z2sbCp%2B22T5J5AsN2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906bfcf8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":88679,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"3e896cff742a9c9660bccb7b67901b74","sha1":"23279c6f4b09e49d020c21eb8539a295bd277c7b","sha256":"04ec8f20a41c1bce9aaaccd02e964252765dbb0b35a76c4442b04241a511f752","sha512":"9f22c7b2029536feffc8cd974032288cd88b65dd3c7edcb4da4e0af2ad6c9f6dc5f6ab98c2f5e0d4ef7f8cd2c600af80fb8f1797e37e42354a8c005f5603f976","ssdeep":"1536:2tnj18qxl8iqUY4xwl61JCHeGumqtpxOkNfvT:2YA8iDaUnC+GmtpUmT","tlshash":"5c83023fe8f5cf5c092215dd2db830d47e95b2744fa30aa89cc31ea65841e725d6c27a","first_seen":"2026-04-17T09:57:45.365396Z","last_seen":"2026-04-17T09:59:08.772116Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.315Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 18:12:08 GMT\r\nexpires: Sat, 10 Apr 2027 18:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 575103\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-22T17:09:11.950811Z","times_seen":218792,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c163c0e7b53.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.400Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c163c0e7b53.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 91213\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:05 GMT\r\netag: \"69c59b49-1644d\"\r\nexpires: Fri, 24 Apr 2026 09:57:11 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270077-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776419831.397340,VS0,VE86\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmnxvJ5OzmOioJsQWHQXvvPb5HNCBinhVNUei6q2eEHxvr5y7ttX997FZjzYhowBADqJ%2Fsyw1NqPD8%2F8NTgXtGpCKxli3MMsAovdlks6zW7TxvDG0Pld9eRN2JNJdDz79SlN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b1bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":91213,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"958a3da19eac28ece81f67fe70beecd2","sha1":"b51a29a9ff75d7ff49a1fe579d4dbc8924a04f38","sha256":"a5d23a7e46380ac2eb3152b0d4ee85a2a9ae8821efa2fecdaa7ecebb23cf73cc","sha512":"0e7ed3f2b5d61a9636ce45818c5248f5479325993aa2266ce14dd0a0a09c309bb35c1663169d22fa0b98ccec7bf85e8063639b8a7bfe0ae94976b8ab8d765870","ssdeep":"1536:EcZD4tb9ePlgjkBhO4Qmqj0qoQwz5YN//X1NvXVn+rq23QzJz66QaC640wHzPxLj:EcZD4t5ePmkB4TxbwzklNvlnD23QzJzS","tlshash":"d49302b6d900e9681fdf60efb39fe4161085abf5842e91ce31adc664cec64bf014716a","first_seen":"2026-04-17T09:57:45.366998Z","last_seen":"2026-04-17T09:59:08.74276Z","times_seen":2,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a3355ed2703.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a3355ed2703.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 85414\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:03 GMT\r\netag: \"69c59b47-14da6\"\r\nexpires: Thu, 16 Apr 2026 22:44:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.391486,VS0,VE113\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9i3iakM%2FtM25V1i2h1Vsr3H%2FCyp9eK4AqjgD2QTutcylclM7nqzOHGlLkzk93I9WDiPTYdnNlQvH9ILeCFK6dl6K26GeqhkdOXxFboiSCk5%2BKFklCh1nGw%2FoQTyTs%2BmPIBHF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b42b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85414,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"cab7aa3255dcd408cab6f82fb22f8e4a","sha1":"725f5d7b833f0b953c80c9ad6959c575fa4c516d","sha256":"2549b2909679182dc0b6c185f5df2a9c1e3892ab3d91ab4fe695059c17843b8e","sha512":"266ae41e8d9b40b6f5dd2b3c96ef0285b959c8a28822a5ac9bc006bce12eee76b9ea3737574893838744dbdc8673df43c9371cf2d8965f90ea4f6a3eb081fb66","ssdeep":"1536:bUiMdKh2aIS9W23Tth4244esLpQYXM/Eym+4mQJNc0GtHKaz4kS6eGWwMY3TvNrU:QvdKca1j/F44es9xXMDFQ80cHz4kS6e1","tlshash":"748312acc0e30571bda295fa7ad7240649f1e77b89ae583138ffa12158cb0f50cf2656","first_seen":"2026-04-17T09:57:45.369005Z","last_seen":"2026-04-17T09:59:08.784294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793b3166429.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793b3166429.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4029\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:05 GMT\r\netag: \"69c59b49-fbd\"\r\nexpires: Tue, 21 Apr 2026 13:08:38 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270074-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.472399,VS0,VE111\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vPf%2BYXXW7AugqgWqTk0pkfVYZiU%2BWh3sY0%2FSBIWyiOwdGCC0vT2E7AZOSMI68roaePLHni8Nhz6zqJbf5Gact0i9cbb8%2F3nmckwnSy8cwFWxGgUekbbgLBvM42YfLq0D4aAD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cd3b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4029,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"3c6992ee4c2b2abcc29fd6ef38dac0f4","sha1":"a30a4b9c053325d5ef813456bb7278b52215008d","sha256":"37f7c0e6affd095cc920bc22eebd75f287c6cf99e572caa143ea0c423038cf96","sha512":"6df5daae010f03aa618df6c4e8971a5f307474e22ba3a93fdf70166ae5e32facd57e10b700a06e845793fb4bbb05a83a7ecfee33a8214ac0c9f94e83ffef741f","ssdeep":"","tlshash":"a6818da10ae6f4906b7b4efb3dcb2fc844f650de59ab079e3294484722d334c4a43788","first_seen":"2026-04-17T09:57:45.370848Z","last_seen":"2026-04-17T09:59:08.790432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.933Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 18:12:08 GMT\r\nexpires: Sat, 10 Apr 2027 18:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 575103\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-22T17:09:11.950811Z","times_seen":218792,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":146,"dns":0,"connect":0,"send":0,"wait":25,"receive":9,"ssl":127},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793f843e77d.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793f843e77d.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3712\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:04 GMT\r\netag: \"69c59b48-e80\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270064-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.255374,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ln%2BqmGmZuN91nFSViEZjfHnrEKDTpRc4Oz1JJ4IIQ5Hd204IIpK%2FP9YdC11lx1ULGtXM98tQlx8spmozw0LVucW24FDbyHWiMcnOxzCmbA7E5TIAnqDC1glFnkagJIhI%2F022\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646cf9b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3712,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"ceb1f84d8ff8cd8bab3b6f925fef9e81","sha1":"db11325e173a9daa44c61513577f6f9160fd1b16","sha256":"ce16576d63d54d908eec7f369bd464c486c9fc103368c9c0ed52e2751d1b5af0","sha512":"e4831e6c5999fa2a2d203b7b985df971eac6fa8e73cbcd2b78813243c51b15b15e59fdd0088414f917eb4517ed73ed76db58912dc5e08a64bcd3ecef7dcfb48d","ssdeep":"","tlshash":"aa717ecb66d95b4ef17b20c56279c8d0e322ee4e891e71e30d5df48d340204a128750d","first_seen":"2026-04-17T09:57:45.372733Z","last_seen":"2026-04-17T09:59:08.776506Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c1b6ac3f2ce.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.407Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c1b6ac3f2ce.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 18584\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:09 GMT\r\netag: \"69c59b4d-4898\"\r\nexpires: Tue, 07 Apr 2026 09:51:46 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270064-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184592.784916,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=se5tAgs%2BTX5efk1YdQ8gaCm361Ad3uijL9PwxX%2F2ula9PIYuwgpkTvFO4awx%2FaqJx0%2B%2F9D2MfgKIlOYL1fTvFUeJpS8MlEQ0oZjDPAf305rDTyyytkSKSEw5S2Ypnx6JRzWN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b24b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":18584,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"f6934201883f121869cc011ab0edfa16","sha1":"532de12eb461563dea3d0c11f457eb97a035fbe3","sha256":"50963b2d5088298e95fe8b54b7c80464ea5af31af1c995b42bed94c901781045","sha512":"c50d8196f16bf68fce6d0abb9f33b1c4e905a28cc99d2debbca138149961a6450ba81e20881a8d4c7a773661816b1fd610f4550b2d80d67840affccdf62ea4c6","ssdeep":"384:FafR/oDuzDpGitgqarA4S61OG9Az+xF2A6nNqnW4:sRXE+7gof+xFQA","tlshash":"1282dfb0b3be1322a01521fff07edd4a925b0b3b6f4b6f86c5a5155c92eb7096c44e09","first_seen":"2026-04-17T09:57:45.374437Z","last_seen":"2026-04-17T09:59:08.757761Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytopf.com/tracker?_=0.3019769196411164;id=3636264;u=https%3A%2F%2Fcase-battle.mobi%2F;title=Case-Battle%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B9%D1%82%20%E2%80%94%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B5%D1%82%2C%20%D0%B0%D0%BF%D0%B3%D1%80%D0%B5%D0%B9%D0%B4%20%D0%B8%20%D0%BA%D0%B5%D0%B9%D1%81%D1%8B%20CS2;s=1280*1024;vp=1280*1024;touch=0;hds=1;sid=5390ca4d7e991ace;ver=60.6.0;tz=0%2FUTC;st=1776419831271;ct=2364/2374/2374/2409/1478;rt=1478/821/0/0/0/1478/1599/1613/1619/2206/1681/2206/2298/2299;gl=u;ni=;detect=0;lvid=1776419832486%3A1776419847617%3A3%3Ae3f89da607ec229ca1deae86401d16c6;opts=dl%2Cjst-gtag%2Ccnhp%3Dh2%2Ccs%3D19694-48989-20775;visible=true;js=13;e=PVT%2F15","fqdn":"mytopf.com","domain":"mytopf.com","tld":"com"},"ip":{"addr":"79.137.156.169","port":443,"asn":205830,"as":"Digital Transformation Plus LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:27.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mytopf.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 29 May 2025 13:49:18 GMT","end":"Tue, 30 Jun 2026 13:49:17 GMT"},"fingerprint":{"sha1":"6E:F1:03:10:39:8D:4F:69:B4:66:03:59:B2:D9:B4:BA:38:F3:E7:C8","sha256":"9F:26:5E:45:90:75:A2:71:B4:28:C2:F6:48:01:20:32:F8:48:25:B7:A6:E1:CB:91:5C:F8:A7:97:A5:BD:6F:CD"}}},"request":{"raw":"GET /tracker?_=0.3019769196411164;id=3636264;u=https%3A%2F%2Fcase-battle.mobi%2F;title=Case-Battle%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B9%D1%82%20%E2%80%94%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B5%D1%82%2C%20%D0%B0%D0%BF%D0%B3%D1%80%D0%B5%D0%B9%D0%B4%20%D0%B8%20%D0%BA%D0%B5%D0%B9%D1%81%D1%8B%20CS2;s=1280*1024;vp=1280*1024;touch=0;hds=1;sid=5390ca4d7e991ace;ver=60.6.0;tz=0%2FUTC;st=1776419831271;ct=2364/2374/2374/2409/1478;rt=1478/821/0/0/0/1478/1599/1613/1619/2206/1681/2206/2298/2299;gl=u;ni=;detect=0;lvid=1776419832486%3A1776419847617%3A3%3Ae3f89da607ec229ca1deae86401d16c6;opts=dl%2Cjst-gtag%2Ccnhp%3Dh2%2Ccs%3D19694-48989-20775;visible=true;js=13;e=PVT%2F15 HTTP/1.1\r\nHost: mytopf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: PVID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cb8:CAASEHB1h1ipnwYxP9ri6kgD6DsaYLJRZ-BOvR0wG80M_vDHyVuaoetmR_zemnb199M5ql1AR1jhGztZlqagt9NoINOkXFtQ53ATzbtWivs7MwKUCYY5hm28Cxjo3TDFOBLLLG6F4a9NTLi3__mybiqMaeHGGQ; VID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cb8:CAASEHB1h1ipnwYxP9ri6kgD6DsaYLJRZ-BOvR0wG80M_vDHyVuaoetmR_zemnb199M5ql1AR1jhGztZlqagt9NoINOkXFtQ53ATzbtWivs7MwKUCYY5hm28Cxjo3TDFOBLLLG6F4a9NTLi3__mybiqMaeHGGQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Apr 2026 09:57:27 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nset-cookie: PVID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cc7:CAASEA_crF9oEGwtc65KL359FX4aYNAgQ6Z9QalkQKinCF-mRPctRBepHLCLd5DY5iPziKQEg5y4w77qnZOSlEv9SjWkjEvQo8vwhATuIahSTIvBEZFWps1FgmTqruYjCKvW6bv-ZDUKtiYk7DSauTOxC-hxUA; path=/; expires=Sun, 18-Apr-27 09:57:27 GMT; HttpOnly; SameSite=None; Secure; Partitioned\nVID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cc7:CAASEA_crF9oEGwtc65KL359FX4aYNAgQ6Z9QalkQKinCF-mRPctRBepHLCLd5DY5iPziKQEg5y4w77qnZOSlEv9SjWkjEvQo8vwhATuIahSTIvBEZFWps1FgmTqruYjCKvW6bv-ZDUKtiYk7DSauTOxC-hxUA; path=/; expires=Sun, 18-Apr-27 09:57:27 GMT; domain=.mytopf.com; HttpOnly; SameSite=None; Secure\ntmr_lvid=495508aa4b979efc0c3391df57ce5709; path=/; expires=Sun, 18-Apr-27 09:57:27 GMT; domain=.mytopf.com; Secure\ntmr_lvidTS=1776419847000; path=/; expires=Sun, 18-Apr-27 09:57:27 GMT; domain=.mytopf.com; Secure\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS\r\naccess-control-allow-headers: *\r\namp-access-control-allow-source-origin: *\r\naccess-control-expose-headers: AMP-Access-Control-Allow-Source-Origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\np3p: CP=\"NOI DSP COR NID CUR PSA OUR NOR\"\r\ncache-control: private, no-cache, no-store, max-age=0\r\npragma: no-cache\r\naccept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccept-ch-lifetime: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"9bb191c6827273aa978cab39a3587950","sha1":"25d8043336eb799e52b1a0e15ff6b95e09c24e35","sha256":"24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db","sha512":"c3970b9a8dc9b424528274e8d22d21e9990ce956aede61cba13de8d7832a8c896eaf1032662a78e95980ea013090cd4406f32604da3c6f557aa136842d04324d","ssdeep":"","tlshash":"fb900003cac888a2c2a2c0300a0803002bb8a8300228030ec2bc30acec3aba2cc03008","first_seen":"2023-04-05T11:29:20Z","last_seen":"2026-04-22T13:54:19.802667Z","times_seen":2460,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":138,"dns":1,"connect":44,"send":0,"wait":47,"receive":1,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/css/style.css","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 38814\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:47 GMT\r\netag: W/\"69c59b37-50cba\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 32772\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270032-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776387058.233329,VS0,VE110\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBAWbYoulM%2FinP7Sxi9CdKHoYNbdaMJznh1AU2joXgumCBgGVzOIaag6FbfzxdhUPJ2rrRuUfsuRrt42t8U3CdPNOrk8I9PwgdrFXWqDEp58FMWVrmvnwES29PdfQ6MMBFrP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90642cb2b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":330938,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"f3b84df9e69ca578e6706b307dd92d12","sha1":"0b81b4d0332ff99d73accfc384903b3b8baf7dac","sha256":"8ee9de0d6a72e17ca923af361e907451a7fb410daa231f5fe0f2c0a738f4ad8c","sha512":"ee13e6d511d86aef479e5fcfa5377cf69e6c8a559f8235cc393dfb2cfe3642674ccde6913cc649f9b35bc568d7b25064de19adbcc5e83e8a1c544e4ff8c8604e","ssdeep":"6144:QUi2ZD+GZJ/dXaEgZWI/vz0HmUVB19GLF/+:QUi2ZD+GZJ/dXaEgZWI/vz0HmUVB19IQ","tlshash":"0964975a5db30654a61b852c67ee1f183738d053c40fece977cda14d8fcaaa442d278b","first_seen":"2026-04-17T09:57:45.376551Z","last_seen":"2026-04-17T09:59:08.783143Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793a52196f1.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793a52196f1.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 3005\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:08 GMT\r\netag: \"69c59b4c-bbd\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270075-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.252190,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=77lgna%2BD6j%2BDHLdpSr1bCJ86%2BwfTKfa7BQjOiRYSx1YBzVWVObHvaioGDUs0wpXwWrdXGLbpQbDlNSgCK%2BpkPzgI5IRYCN%2F80PO4MoyiOSVXUblIMzWYqSt%2FrNSJNMHsf4UH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cd0b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"67909d4cb0bdeb194c0d693af082a245","sha1":"b0758c52ac10bb7fefe881e7d90a74e19f7e9e26","sha256":"40ff7a395349bc1d3067207a0da953f50a00c913cb33a76f1529349d22eed0b1","sha512":"99eaf0c31d3f87aa42b70f9c641eaa14e5136b8ea2b5817f19447c0411f6fb119df01d5ae9441aa612ec8002fdf7680eb3560477af130d8e97c05913854b48b8","ssdeep":"","tlshash":"1b514abe2182427ee7085934313939f6f013364046f310762093e1b4567f452ec0376a","first_seen":"2025-06-16T19:50:55.675118Z","last_seen":"2026-04-18T14:18:26.707669Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/promo-dots.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.251Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/promo-dots.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/css/style.css\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 189\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:08 GMT\r\netag: \"69c59b4c-bd\"\r\nexpires: Tue, 21 Apr 2026 16:36:31 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270068-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776184592.709510,VS0,VE27\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aOiybEcA7y8jIZOka6h3uHgy5EFfqMzUBZGDQMsz0oy6nsjqgmPXgpb0HigifhfrZe6U5ljsrrutpE3orxO%2B8kUvNZ%2FMkc27jvkH3f3LkhsK0O6keW7XRCJNA%2FbNqkD8atA%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90694a30b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":189,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 8 x 8, 8-bit/color RGBA, non-interlaced","md5":"911ad940a835c458334ae3358fdbb707","sha1":"6fd9e374cd81086e996d84a194ef98c4690ed588","sha256":"059984b576609317df2196b5c7716143421cece37eb14f2e6c0a1247e559cd75","sha512":"ede922ddb2001a9b9e08f6d47bf21e97e9a87e0293b1c1010f6cec99f47073b61d25a07f2d868c7eb28bd0fddd0c995a183d08b083115060418d4de13179a678","ssdeep":"","tlshash":"02c0c0e6d1f0bdd4c77583f71d7e0113a6733c60b9d6817f808008702d106b223200c4","first_seen":"2024-12-02T21:43:54.438515Z","last_seen":"2026-04-18T20:11:58.229569Z","times_seen":36,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67c1b92714f45.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.409Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67c1b92714f45.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 16317\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:09 GMT\r\netag: \"69c59b4d-3fbd\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 7343\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270054-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.385683,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FLbQDpWxl1CWc%2BmVfljPpaI%2F8hotrgxJJaopwDhd4Szjeff9Cnto4yj5XT8O2tulck8NGLmZeGSC%2B7gYqNjEINTD0%2Fz44UxKBPksDAC5Lk7pqzxkzpJKuswu4wQWlM3VT2yD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b29b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":16317,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"ad897aae2954a09d073a326020280fa1","sha1":"31814f27879bd56f9539427460d60f0e60c29b76","sha256":"bdbec873f77d3320cd6e035daa715f6de6b3322d7dad2cfb00d267f99b7e9c76","sha512":"6032351352e74ebb85785b9c5456bdf5ab841965ba8d0b14137108cdd49836a1e701825686578c8d1ebb7c0d768f1ba207fc8f881e828ad9a9d79ce0bcbabbc4","ssdeep":"384:FeZFaOc+m3GhYHquLUjBlDPDeR8YybT/Q/:QFc+m3LqlfPDs7KY/","tlshash":"4772c0f858f2a640edbd601e7fd8a94fd4bc218825fe2fb4e4113f24096ac6c0e96543","first_seen":"2026-04-17T09:57:45.383093Z","last_seen":"2026-04-17T09:59:08.743508Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/giveaway-icon.svg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/giveaway-icon.svg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 925\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: W/\"69c59b3a-6d9\"\r\nexpires: Mon, 13 Apr 2026 20:45:41 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270038-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.843848,VS0,VE1\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CJ0ZfOmfDRXrBY3CzovKj%2FDSjeplHPh4X%2B0EpWm%2B%2Fxc0ck%2FFinSOIV55KPln2iKUdFXWpg3jKorArAO7xjQnmpfdhOff1RkzTv8jvjF7mgsHqbkeh9tBb%2F2Pt3iwfEJi%2BZFz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90642cb7b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1753,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ceae9ac313a7ecb3a8629b0aecceb857","sha1":"9703701e31698a750389917ce6b10dca27a3b13d","sha256":"88ae3070c4a123bdbdee5963f68f8489195856358487bc6e8be1bee7ad4c744d","sha512":"3e91d42305fd340c951a97e11f1dce745bd369778598339dc692d14a3964269f4c29250af7c5ade3d039597dff8f12d2d4d90b52e1929251b5f4c35ca2914e2a","ssdeep":"","tlshash":"ba312d58d384c7fa7de1422892e42c8172b49dbbe474e2e4a7ff1451dd9c0e1651cacd","first_seen":"2025-06-16T19:50:55.77131Z","last_seen":"2026-04-19T19:19:23.531547Z","times_seen":47,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793ac27e554.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793ac27e554.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2837\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:08 GMT\r\netag: \"69c59b4c-b15\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.471454,VS0,VE116\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QztpMRHnYV1fYVBWSq7oBGa0%2F7ZHHEQcOKtg1gHZirek0mfaqq1tbQDjo4xJFjG%2BIhL1adH0NosRPcKqjFhkAdGtZ6puUS%2FLBgYj7nUEo4XHtnuv1oCuGUOBHNOkMdd0Aejp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646cfcb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2837,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"4e784c0602dff81fcbea350ba4e00dfb","sha1":"924196dedf2c5ef3a07b5add3260045aaf8933b4","sha256":"79dc90fcbd26a2d7de0873a761a2e36e7d9fcaa1d8ad88484eb35cfaa1db1d97","sha512":"78ae1da72e08f65e4f03f9d2c5aa88831f310959520faa934d308dd01bdb21218a4ca031b79932792d3e5c1a87cb2f34aa7b081788db9d2e6af0fd2390bf0481","ssdeep":"","tlshash":"6e515ce614d2783417bef0a3d0d034727d2a6f24677a30287c3c947c5a28ce41c1621e","first_seen":"2026-04-17T09:57:45.387692Z","last_seen":"2026-04-17T09:59:08.736717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/first_promo_block_one.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.253Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/first_promo_block_one.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/css/style.css\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 3562\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:05 GMT\r\netag: \"69c59b49-dea\"\r\nexpires: Tue, 21 Apr 2026 13:08:38 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 247712\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270043-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.271665,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wFhUbal%2BmKJ1MblM2eOSFGdGK39QsL6getPn55vqkbon%2FSIyO2PNJj56Rbm7NHf9ejGB6RUhRweaUXoZGCR1Etq9gdUElRQWImPw9UsWok61KIw9Ckyxwp8fkDf7gejI%2BwJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90694a32b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 172 x 81, 8-bit/color RGBA, non-interlaced","md5":"5dd8d4a7d734b908d0b36a4f201efe8d","sha1":"1b5f3b7f2148eff73e75f648bfd6384816dd62be","sha256":"35acb1bbe452e4dd06590f9c4685075442a6b9b966d31ceb35adb73dc565955b","sha512":"6646612b722d2abf21a2c38ccbd9fde1b4e17fd542a90daf041b4c775d579e12a4010e67dc9bc0a07cccbf4ad99ffcaba47e65625a458fe801844a2922a1356d","ssdeep":"","tlshash":"92715d7027736c0a5c863d68029031f492099bb69c08a9dfac6a5dcd19b2d40e97a4f1","first_seen":"2024-12-02T21:43:54.441339Z","last_seen":"2026-04-18T20:11:58.262778Z","times_seen":36,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a363fb38ebb.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a363fb38ebb.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 13877\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:57 GMT\r\netag: \"69c59b41-3635\"\r\nexpires: Fri, 17 Apr 2026 07:51:16 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270069-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.414357,VS0,VE30\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W4c9%2FbkHzuUEpNre6eAHEfjP%2Bb9V3DCQldHYVCEUJtn1MA7ZqmIb0QYxXOEO0tc%2BXboasZlUQccslBXyyU2JGeD9UN60RNVZ1q8Th%2FoVL9GzYF5wy3c3wUa%2BSjJ3DlHEhA47\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b48b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":13877,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"ec8a9e4e16da68149635bacee0ea0582","sha1":"4a19dbb237dcdb412faef847a6932bcca5b051c2","sha256":"7937cebd1692b246455ba38e966e824f6caca9534aff2064ef9d375ec59a3222","sha512":"700b3bfe7527b8be9f7775129f10ac79254e3481f21702d9870d466e93ddf105dbe0fbad8ec04800eb9494bf11699feab9fc2689c3373e7181a3f4e67fffaf5c","ssdeep":"384:Fy+vVspmse2qtkKgfcQefhUa548tMKReBERZ2ForS:JVsGkKgfcQGuKReBSAFuS","tlshash":"8e52be5974ee565febd7750181023a78ae080c4ffdceef0184f9a00a64e9d1932967a5","first_seen":"2026-04-17T09:57:45.390027Z","last_seen":"2026-04-17T09:59:08.793409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mytopf.com/tracker?_=0.8631122499139576;id=3636264;u=https%3A%2F%2Fcase-battle.mobi%2F;title=Case-Battle%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B9%D1%82%20%E2%80%94%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B5%D1%82%2C%20%D0%B0%D0%BF%D0%B3%D1%80%D0%B5%D0%B9%D0%B4%20%D0%B8%20%D0%BA%D0%B5%D0%B9%D1%81%D1%8B%20CS2;s=1280*1024;vp=1280*1024;touch=0;hds=1;sid=5390ca4d7e991ace;ver=60.6.0;tz=0%2FUTC;st=1776419831271;nt=0/0/1776419830114/////79/80/80/80/95/83/95/132/140/238/1157/1175/1190/2501/2501/2501;ct=2364/2374/2374/2409/1478;rt=1478/821/0/0/0/1478/1599/1613/1619/2206/1681/2206/2298/2299;gl=u;ni=;lvid=1776419832486%3A1776419832618%3A2%3Ae3f89da607ec229ca1deae86401d16c6;opts=dl%2Cjst-gtag%2Ccnhp%3Dh2%2Ccs%3D19694-48989-20775;visible=true;js=13;e=RT%2Fload;et=1776419832616","fqdn":"mytopf.com","domain":"mytopf.com","tld":"com"},"ip":{"addr":"79.137.156.169","port":443,"asn":205830,"as":"Digital Transformation Plus LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:12.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"mytopf.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 29 May 2025 13:49:18 GMT","end":"Tue, 30 Jun 2026 13:49:17 GMT"},"fingerprint":{"sha1":"6E:F1:03:10:39:8D:4F:69:B4:66:03:59:B2:D9:B4:BA:38:F3:E7:C8","sha256":"9F:26:5E:45:90:75:A2:71:B4:28:C2:F6:48:01:20:32:F8:48:25:B7:A6:E1:CB:91:5C:F8:A7:97:A5:BD:6F:CD"}}},"request":{"raw":"GET /tracker?_=0.8631122499139576;id=3636264;u=https%3A%2F%2Fcase-battle.mobi%2F;title=Case-Battle%20%D0%BE%D1%84%D0%B8%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B9%20%D1%81%D0%B0%D0%B9%D1%82%20%E2%80%94%20%D0%BC%D0%B0%D1%80%D0%BA%D0%B5%D1%82%2C%20%D0%B0%D0%BF%D0%B3%D1%80%D0%B5%D0%B9%D0%B4%20%D0%B8%20%D0%BA%D0%B5%D0%B9%D1%81%D1%8B%20CS2;s=1280*1024;vp=1280*1024;touch=0;hds=1;sid=5390ca4d7e991ace;ver=60.6.0;tz=0%2FUTC;st=1776419831271;nt=0/0/1776419830114/////79/80/80/80/95/83/95/132/140/238/1157/1175/1190/2501/2501/2501;ct=2364/2374/2374/2409/1478;rt=1478/821/0/0/0/1478/1599/1613/1619/2206/1681/2206/2298/2299;gl=u;ni=;lvid=1776419832486%3A1776419832618%3A2%3Ae3f89da607ec229ca1deae86401d16c6;opts=dl%2Cjst-gtag%2Ccnhp%3Dh2%2Ccs%3D19694-48989-20775;visible=true;js=13;e=RT%2Fload;et=1776419832616 HTTP/1.1\r\nHost: mytopf.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: PVID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cb8:CAASEL64cFDKk2chkuI3ZiHZhX8aYJM5xe0JEWiYD5juM2meFjA44cq9NFzbpbLcQj3XLubuMyidWaAIBXnv0mPZq2TxeDicH6Q_A3CMET0jCyiMij-kGagtAoA9dZgIDJbzG6rs5A5FE48uGzQwOHy5APFqEQ; VID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cb8:CAASEL64cFDKk2chkuI3ZiHZhX8aYJM5xe0JEWiYD5juM2meFjA44cq9NFzbpbLcQj3XLubuMyidWaAIBXnv0mPZq2TxeDicH6Q_A3CMET0jCyiMij-kGagtAoA9dZgIDJbzG6rs5A5FE48uGzQwOHy5APFqEQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 17 Apr 2026 09:57:12 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\nset-cookie: PVID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cb8:CAASEHB1h1ipnwYxP9ri6kgD6DsaYLJRZ-BOvR0wG80M_vDHyVuaoetmR_zemnb199M5ql1AR1jhGztZlqagt9NoINOkXFtQ53ATzbtWivs7MwKUCYY5hm28Cxjo3TDFOBLLLG6F4a9NTLi3__mybiqMaeHGGQ; path=/; expires=Sun, 18-Apr-27 09:57:12 GMT; HttpOnly; SameSite=None; Secure; Partitioned\nVID=1Bd3142BowYd00003T2xjSYd:::0-0-0-efc5cb8-0-efc5cb8:CAASEHB1h1ipnwYxP9ri6kgD6DsaYLJRZ-BOvR0wG80M_vDHyVuaoetmR_zemnb199M5ql1AR1jhGztZlqagt9NoINOkXFtQ53ATzbtWivs7MwKUCYY5hm28Cxjo3TDFOBLLLG6F4a9NTLi3__mybiqMaeHGGQ; path=/; expires=Sun, 18-Apr-27 09:57:12 GMT; domain=.mytopf.com; HttpOnly; SameSite=None; Secure\ntmr_lvid=7ea6495f479bf0344c36b8097e341def; path=/; expires=Sun, 18-Apr-27 09:57:12 GMT; domain=.mytopf.com; Secure\ntmr_lvidTS=1776419832000; path=/; expires=Sun, 18-Apr-27 09:57:12 GMT; domain=.mytopf.com; Secure\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, HEAD, PUT, OPTIONS\r\naccess-control-allow-headers: *\r\namp-access-control-allow-source-origin: *\r\naccess-control-expose-headers: AMP-Access-Control-Allow-Source-Origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\np3p: CP=\"NOI DSP COR NID CUR PSA OUR NOR\"\r\ncache-control: private, no-cache, no-store, max-age=0\r\npragma: no-cache\r\naccept-ch: DPR, Width, Viewport-Width, Downlink, Device-Memory, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA, Sec-CH-UA-Full-Version\r\naccept-ch-lifetime: 86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"9bb191c6827273aa978cab39a3587950","sha1":"25d8043336eb799e52b1a0e15ff6b95e09c24e35","sha256":"24e480e4659fbae818853a38f8a3036f529f539024dc3e772c0b594ce02ea9db","sha512":"c3970b9a8dc9b424528274e8d22d21e9990ce956aede61cba13de8d7832a8c896eaf1032662a78e95980ea013090cd4406f32604da3c6f557aa136842d04324d","ssdeep":"","tlshash":"fb900003cac888a2c2a2c0300a0803002bb8a8300228030ec2bc30acec3aba2cc03008","first_seen":"2023-04-05T11:29:20Z","last_seen":"2026-04-22T13:54:19.802667Z","times_seen":2460,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/mir.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/mir.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 1788\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:09 GMT\r\netag: \"69c59b4d-6fc\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 7343\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270057-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.498181,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0VUWEj%2FwoGH5ywG4S23gfXj32Gb%2FDxunJtsYONWEiiaLu12L3U7m4uPiYUf8dilXkP3C2KJGV6HO0EPo9LiwP9aTi%2FH27srKM5DVnY6%2B%2B6m6pSg0j5tQG4479mbPDKb%2BSp%2F0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d0db4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1788,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 57 x 17, 8-bit/color RGBA, non-interlaced","md5":"c06abdd6c52f0f12efd85ee685885b86","sha1":"82a4486810b3721cced66039591a16a2f48ca24f","sha256":"83c4c99e053d00e0ac170879e873711f1b1c373885f1729cacc3d10fc17e8054","sha512":"962f9fbfa94730ca14c1385ad4c34d60f1973e1902834c623de871eb3f9d98dba40bcaf159fab14511536515317c2d22b9404466a7775add5c09ac9a4d873a2d","ssdeep":"","tlshash":"293109873bd84cbadb344ab116b94b1cfb519050a7f8a52002f9b91b26179c331e0f33","first_seen":"2024-12-02T21:43:54.421861Z","last_seen":"2026-04-19T19:19:23.550391Z","times_seen":40,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/bg_pointer.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/bg_pointer.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/css/style.css\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 949\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:58 GMT\r\netag: \"69c59b42-3b5\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270036-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.274179,VS0,VE86\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MJonRLK3JLaByR%2Fye4QqQUK%2BQD0PWJ1Tzpvn1wSTSslXhSpdbbtAIF75EoYvSBY22F4FhGB664AaFCWvHBSFZx4qETnWBrujP2h9rpuaau6%2F9AY0YQxTnEQrpsFxeTmBla8n\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90694a35b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":949,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 44, 8-bit/color RGBA, non-interlaced","md5":"eeb0f384646d2743df5e734a0666ff80","sha1":"f919ec770f23542e08c2ffb8ca6bcf021da9ee31","sha256":"94bd0282a0c86c43227228ed4efc11755b939c9c0a7cb1bf022a582108a9d71d","sha512":"a6698d5168eeb2c09ebc6d5b6c21fcade158603dfe0100b52284beccd816ff776853d92a6c7e65f8b8069ab10380aef8cf6e59a40259d772975e06d5fbed416e","ssdeep":"","tlshash":"bf11949ec2aaab7e745670f896851f4049221932e96ca2753253e2338a98b90afd4851","first_seen":"2024-12-02T21:43:54.444197Z","last_seen":"2026-04-18T20:11:58.239227Z","times_seen":36,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a36269949de.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a36269949de.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 18220\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: \"69c59b3a-472c\"\r\nexpires: Sun, 05 Apr 2026 17:41:35 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 41627\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270072-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.409770,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXAdlRejvzps%2F9l16p3TNOcEDwb6owetcGO9X318stBGK1jVJvwvjTP0aAYAipJsGWLyuyQkxQQDeETeBTYcHekC7jcZUeb3PUItOjM7E1t1Z%2BLTmw9%2Fs992emr9pzu6XKGu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b37b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18220,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"7c933a314796b6226f4e5af338369b6b","sha1":"b0ea676ad2b4bc723108f4b9df138b113f263ab8","sha256":"3a6dffff6fe17c985f6a571ed58e450de7d324fb07addd49ac93ea7690963779","sha512":"48fb1f2e956e7b5ed81cc1606f8d570bbd60fbf16c06d69e678f1e99ec2e2af682bb6bfe5e2a408eb66074ed81e22a7d2aeb241559cd7e8a25e7b035e1e808c4","ssdeep":"384:FyavmqECU/XLehkyj4gznpA8jm/WZNBJfCGrRpqjaGiGUMAWVbD:RvO/bKdj4SpACm+ZNBMGrmz5L","tlshash":"a882cf8ac33715ac26856ae9878e4be074dbe398a8b34e971803d15fc1d0ff24ec845d","first_seen":"2026-04-17T09:57:45.393736Z","last_seen":"2026-04-17T09:59:08.766128Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a3638a4d847.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a3638a4d847.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 20629\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:07 GMT\r\netag: \"69c59b4b-5095\"\r\nexpires: Tue, 21 Apr 2026 13:08:39 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270035-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184592.812131,VS0,VE2\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wBouIoTWjYNdh2YQBqWOvrzeDQDSyMmu8vZU0sl7tfA6v42d%2FdZAIdtfU7xEnl78fu8AiI5Ejt9lYHLeeN0GQ754pM%2BlCly8AnOiAZ7HMHnedtM8SInGX8aV8eLtNYWPeHD9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b44b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"0240aca70b9d35d23ae4e0ae9a5bf603","sha1":"675df98f56cbf709a47f9a9613f209e648748988","sha256":"0c5b195101651cc7198b3ac49383c87a655fdc5809df740137813accf5833519","sha512":"e2ec533a0ae5d67e6a882c3acd35069e437a9b6d6d27ca92a68579970f29209d5a7dec9eab908d91da3e27994d92936fbd4fb5defb866792c2bd3a0e7a045ec2","ssdeep":"384:FoJGMW68OrL3iOgpaKnl4AfA16FwX7flv2ivPB01tHKk+uRUFvTL0OtkP5BYty:BL68OrORpjneAfvwX7flFPB6HKk5qFbM","tlshash":"a792d00014abd64d08c25abd8306d277d798da8be91e73190875ba1d0d496bee90cd7f","first_seen":"2026-04-17T09:57:45.395399Z","last_seen":"2026-04-17T09:59:08.760399Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612b80215f418.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612b80215f418.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 89135\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:50 GMT\r\netag: \"69c59b3a-15c2f\"\r\nexpires: Thu, 16 Apr 2026 22:44:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270026-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184592.815715,VS0,VE2\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jBqnTsjnLBcg%2BjBnXsiZqEHVkpKolj4M8QfXxlxYJNY1P%2B6YXaoMBYsQlKikt7yITa7JtfsIWCZi3nUsYzYBWSmZLWRB8DZqvztVNfKESwB2a6UNV0dgbR3L7TU72nR2ZZ2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b49b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":89135,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"f68984cc38a44da59e0873bbcd222355","sha1":"f3b3746b2375a4e2906c49021a96968e4a0c0135","sha256":"4be46a20edb21867f673b2e13d95d7c5673303aefde53c0a90a19348fd57a8ce","sha512":"64982b21342346f1aacf8b0d300f88bc5c401d82f3f9a25f07b7c37daac81744057631396155028aae89fc33ad7bdf72dde5b5fe6fa6528917bc2ea9d6cbec75","ssdeep":"1536:OgCGeNYlz9GlxevX23/spi2MT063CDlgB3EguHHGXXdEDdWWwcwa4Ibd7xiUAZwA:OgCG9eevX2EB24lAUguGiwWwNa4I1iwA","tlshash":"9c931258908e64692a08255e2faa5b067e586c74f5dd9828cbf4c3ef40cbe1dc1bf60c","first_seen":"2026-04-17T09:57:45.397035Z","last_seen":"2026-04-17T09:59:08.762499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"id.vk.ru/stat_events_vkid_sdk?app_id=53423210","fqdn":"id.vk.ru","domain":"vk.ru","tld":"ru"},"ip":{"addr":"93.186.237.1","port":443,"asn":47541,"as":"VKontakte Ltd","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:12.652Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vk.com","organization":"VK LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Fri, 30 Jan 2026 16:54:41 GMT","end":"Wed, 03 Mar 2027 16:54:40 GMT"},"fingerprint":{"sha1":"9A:B2:15:9B:DD:A4:3B:0F:D4:06:A8:3F:3D:4F:42:8D:99:F4:47:71","sha256":"4C:28:49:A6:F1:E1:02:92:0C:39:0F:F4:1F:AB:0A:41:3B:CA:14:12:E6:A0:F3:7A:03:03:04:ED:13:D8:76:DC"}}},"request":{"raw":"POST /stat_events_vkid_sdk?app_id=53423210 HTTP/1.1\r\nHost: id.vk.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://case-battle.mobi/\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 593\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":593,"data":"events=%5B%7B%22id%22%3A986705699%2C%22prev_event_id%22%3A186256930%2C%22prev_nav_id%22%3A0%2C%22timestamp%22%3A%221776419832628000%22%2C%22url%22%3A%22https%3A%2F%2Fcase-battle.mobi%2F%22%2C%22screen%22%3A%22nowhere%22%2C%22type%22%3A%22type_action%22%2C%22type_action%22%3A%7B%22type%22%3A%22type_registration_item%22%2C%22type_registration_item%22%3A%7B%22event_type%22%3A%22no_session_found%22%2C%22fields%22%3A%5B%7B%22name%22%3A%22sdk_type%22%2C%22value%22%3A%22vkid%22%7D%2C%7B%22name%22%3A%22unique_session_id%22%2C%22value%22%3A%22shbmrd%22%7D%5D%7D%7D%7D%5D\u0026sak_version=2.6.5\u0026v=5.207"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: kittenx\r\ndate: Fri, 17 Apr 2026 09:57:12 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 37\r\nx-powered-by: KPHP/7.4.126432\r\nset-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.ru; secure; HttpOnly\nremixlang=3; expires=Tue, 20 Apr 2027 11:08:06 GMT; path=/; domain=.vk.ru\nremixstlid=9087090379270119128_oY0YDeYKqd3jdQjyI4OJ8hGljSCsjaBG4N9ej7rdKEs; expires=Sat, 17 Apr 2027 09:57:12 GMT; path=/; domain=.vk.ru; secure\nprcl=320e049e1759fb; expires=Sat, 18 Apr 2026 08:57:12 GMT; path=/; domain=.vk.ru; secure; HttpOnly\r\ncache-control: no-store\r\naccess-control-allow-methods: POST\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://case-battle.mobi\r\nx-frame-options: deny\r\ncontent-encoding: gzip\r\nx-frontend: front920400\r\naccess-control-expose-headers: X-Frontend\r\nstrict-transport-security: max-age=15768000\r\nx-trace-id: bsdpV2f_hmJc8KTNWLBaxmzqyMwG7g\r\nx-trace-id-v2: 019d9adf8353705eb31781451234840d\r\nserver-timing: tid;desc=\"bsdpV2f_hmJc8KTNWLBaxmzqyMwG7g\",front;dur=18.235\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"KPHP:7.4.126432","description":"KPHP (kPHP or KittenPHP) is a free PHP-to- C++ source-to-source translator, developed by VKontakte.","website":"https://vkcom.github.io/kphp","common_platform_enumeration":"","icon":"default.svg","categories":["Programming languages"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"83e5f533d7c9e10f0c98734c9147bb0f","sha1":"c3a52214559e549b8bc3a4b5df3026135e575a3a","sha256":"fbb5c7a158ac0b272b5ed5529454946b4186f8ac87f4ed019581031ac97a783e","sha512":"815494029e1a3230ddf7add224b56b398a86775d4bac3eb88e15099ab67a52c87ed08bd8d11330e16324e63f7755434214cc6a531757539985c5c7d087a8d41b","ssdeep":"","tlshash":"4760000a8088000800802000a8820300a82200000228a0b288008080a208a002880a00","first_seen":"2025-09-17T07:43:58.332882Z","last_seen":"2026-04-22T17:03:11.660562Z","times_seen":459,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/medal.svg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/medal.svg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 623\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:09 GMT\r\netag: W/\"69c59b4d-451\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.848308,VS0,VE1\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cNVUdhhJGnolnNiSgk50eZCKi8Dss1fsqC5VcOt4UBcOJy3Nr4u6dCarAcp6Pe8GLW5NZxyfsSlnYI4DTugsfQByi0EigJXrbpIpS2xwna%2BgEH4gg%2BlamvL5PV%2FBWk82ji48\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90643cbcb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1105,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"92f7712e9da9769723773822ee28948c","sha1":"6d3fe892934ea70262fb068d850ff9ddf2bd0184","sha256":"e5b670fa9d5f18b6a782a1d7ff5fdde9b308db1b42d3c348f8e5ac6d4886cfee","sha512":"e9880f307c8983265fc4eda6afaf3f5a4bfa59227185b50704eaa77fddceb4f1e12dcddcb26912f8629b95c47dd5bd6f17cc500d1d37fb95b3b91642909d69d8","ssdeep":"","tlshash":"3611c95583ea88b62e8817650b7d96847bb27493f170e18478ff0951ef0cac04adb6e6","first_seen":"2025-06-16T19:50:55.784666Z","last_seen":"2026-04-19T19:19:23.543237Z","times_seen":39,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/case_updated.svg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/case_updated.svg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1476\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:05 GMT\r\netag: W/\"69c59b49-dce\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270022-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.497319,VS0,VE116\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YVbeCSBX1eRD5QNQjjGp%2BV6eYrUTDQpGQQd1n4Pz5yR4Qs0equRafHgO3S25BEW8N%2BSfO7c9s9h52L9kmOeS8%2FyE%2F%2FLHpFseV1mr0TM7DHJWJVwY8eO2fwnVXIGElz4zXWJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d09b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":3534,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c8d52a7da1b57688dbe8ef09de9ea48","sha1":"73b89962bc64c2291504bf286646c390752d0be8","sha256":"5cf60cf79e672aa841d3ee156659d487a6258e07b577bca71ffd12a674e3a6c8","sha512":"fe91206f1b6066ec391c954148e02d69908bf00f8e946df04ebce17cd08bc80bdc4a236dc6bd8f67c95080aea81335aa5a496dc7d557e8baeda6e2aff7d44bdd","ssdeep":"","tlshash":"487175b2e3b858bdd84843d8867414693a10559ff2a283f8fe8d599c2f059e3c05c560","first_seen":"2025-06-27T04:58:45.863773Z","last_seen":"2026-04-19T19:19:23.476289Z","times_seen":37,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 10 Apr 2026 18:12:08 GMT\r\nexpires: Sat, 10 Apr 2027 18:12:08 GMT\r\ncache-control: public, max-age=31536000\r\nage: 575103\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-04-22T17:09:11.950811Z","times_seen":218792,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-62c16af955672.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-62c16af955672.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2781\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:10 GMT\r\netag: \"69c59b4e-add\"\r\nexpires: Mon, 06 Apr 2026 09:51:13 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270070-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.234535,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nWus70ig3GKL20kMwgsZ%2Fsi3I6%2BlC0kZ40jDsz78V3Cdyl1UVEIRO1jYkG29%2Fvxtbq66f84km48uy1bjvfUnSzZggCEM047edTU%2FQsBK33rvtLGCUkXDKVs5Iy45vLCq70DI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cc8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2781,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 62, 8-bit/color RGBA, non-interlaced","md5":"207b3018e08733e79d20c1e6a050ffa5","sha1":"57663a69dabc3b0bb9d2d0a6fd60c3b48af745d6","sha256":"8bbcdef71bd9ef38e91c5bc9f10f3466bd61643973433d5b7641e9badce240e5","sha512":"b2b1ac402ff740bf8e0816806234bed847ec7f783c73e66a477321000f8766ba5b12e02bb27ec820c78e57b5befe06710348f61d1c03a351ea4e3bb87a393a38","ssdeep":"","tlshash":"28515cb1b24d68259132aba1c15d10d0493d3d25160e7a5daf4b7c090c8fbd2cc248bf","first_seen":"2025-06-27T04:58:45.941792Z","last_seen":"2026-04-18T20:11:58.223218Z","times_seen":26,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793f1b50c35.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793f1b50c35.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2998\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:09 GMT\r\netag: \"69c59b4d-bb6\"\r\nexpires: Tue, 21 Apr 2026 13:08:38 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270052-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.250259,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AbmHGWrFqudVdlQAqyTvHKSYU3qQfjc5rCunbtENw1QO1ksu5hJ6ac3SgYbcQchUvG7NAIdBH8gfeq6IrQh1vdpnyb%2F3AnW4ZrccJSPHv4Vj3qietgX10VYi5Tf7MXGAJoLU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cd9b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2998,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"bf7b128e21da503da29e4d96517e46f9","sha1":"bf3ba7b68eec8dc0f38d0115b1549f4470bd9bf4","sha256":"6c709bb3f2cb10b1b1a89fb8fe02193dd16265e30b231b2f056a85f5bf04ea10","sha512":"222034f1fc02e4d67a35163bfe331e04e5a0c33845f60cefdce1d0fb3676b5b20e124b6d5ea59058a60e6c5f21cb9b71bdd8972cb90d5ac9063a3ebdbccc26a8","ssdeep":"","tlshash":"b9516fd96cc29ffcdd857c75389dc948a637b240920b5dc5f560f4a1f1d2b49888ba41","first_seen":"2026-04-17T09:57:45.400978Z","last_seen":"2026-04-17T09:59:08.784873Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/case_hit.svg","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/case_hit.svg HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 843\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:52 GMT\r\netag: W/\"69c59b3c-6e6\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\ncontent-encoding: gzip\r\naccept-ranges: bytes\r\nage: 106874\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270042-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.494632,VS0,VE1\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3orqNPumudteBnRbh9%2Ffw7YRD82PypuqkrJ6g%2Fw1a%2FJOef8TZqQZHoP0P7WE51JHQdSvrZcbvyN8l%2FePWQZH1%2BC4BWFEu3mFcEij6b71nbUdqk2%2FFJ2o4D5hd%2BeGq7DXYnp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d07b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":1766,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"367cff6056805af45a1ad47f0eb7d30e","sha1":"df69877a180a42e51235782454bcf7305896e734","sha256":"37d1e974e5028a577c5be2df60a1b9d87958d8150f3e5c77a4867d99027cdf9a","sha512":"919b8407c6459cdfd6d0d3aed20e26ff61261a9b942c5b08d0c5130d2900e8526eedf5e4c2fc2a8db6753374b25eb927e76fc21e0fdb61250806771a71671f3d","ssdeep":"","tlshash":"c03196b6d2e95c12f48c87e4c968a0a9f90858dbc541c3b5f4dead693f360d18e8c5e0","first_seen":"2025-09-24T06:54:00.233063Z","last_seen":"2026-04-17T09:59:08.782466Z","times_seen":6,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793b52573e8.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793b52573e8.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2709\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:05 GMT\r\netag: \"69c59b49-a95\"\r\nexpires: Fri, 24 Apr 2026 09:57:10 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270038-BMA\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-timer: S1776419830.492623,VS0,VE110\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3zUPO0cxYOqqIZ%2FUyxWkjXVcLKFx%2FdHy8ShYsNpJycal8a5peNvlke%2Ftpe9qVY%2FQNXLbP3oOOCFSVCCMBxzFYEASTZbNu5E54yGK6OOuJh7mmJvphVrPTVrEWprFSdlr6h7r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646cf8b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2709,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"d0e215e31c620166101d4faee6befd31","sha1":"2dcad5f25715de514e9095b0724bd15e44454d99","sha256":"957091f9dc68f9dd1e1ddfb0d0ac873a75cb862281878c37410d7ad1612529e1","sha512":"9ae92953958ae82a3d1ddf92413d38d410c4267ce8554b1a29f3f447c6f60bba03b557c6f3bffdbf900c428f6510a0a898b85adff079e9030adec950afe23b1c","ssdeep":"","tlshash":"a7516cdd7824302390ab5b9d364194bae1fc40888d560cac1c9f88a9f46fee0c3d63f2","first_seen":"2024-12-02T21:43:54.526624Z","last_seen":"2026-04-17T09:59:08.792304Z","times_seen":3,"resource_available":false,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.263Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 10:07:33 GMT\r\nexpires: Mon, 12 Apr 2027 10:07:33 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431378\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-04-22T17:08:29.182866Z","times_seen":8462,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/user.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/user.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 31699\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:57 GMT\r\netag: \"69c59b41-7bd3\"\r\nexpires: Tue, 07 Apr 2026 14:18:26 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 7343\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270025-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.459376,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lj%2FUP9fmNOrZcuqMLuhJg76lBYQK8SnFzZUBKONmwXq996yRplFCOIGPH9xaVcUmQ%2Bl2u4je1Zaf1XY%2Bh8vmFibyGnmjQanEt05x6MNuK0evFEeGZycd1kaz1WIMFxJX6GJb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90643cbeb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":31699,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGB, non-interlaced","md5":"4f8d81d2a59a01e89a75a9356d6163ec","sha1":"212cf32aac2f813225ef9bb1c49a7687ee858308","sha256":"021d9f444abdfe848065c8f005e72f5ee24b7f5658dd1111a522875e8aa70465","sha512":"ff9103a360d036059c03381f1a7cec09e0f49e1080044c5b7e1cc693b138f0d1888d7641991bcf90f54aaf633dc0a8dba72b6f32df4c9de3f92568ea12ec4866","ssdeep":"768:6bnIJRhTPUUB8KDfncxI8Zwz0n0eiwcCBGVqtYa+kt:V9nvDd8k0n04rXB+A","tlshash":"46e2f2fe4b2399b663596b084d79cc987673cbb3048ec81b0d99c5b638f224e141c5eb","first_seen":"2025-06-16T19:50:55.60935Z","last_seen":"2026-04-17T09:59:08.74897Z","times_seen":4,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/thumb-5c793c297ba0c.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/thumb-5c793c297ba0c.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 2221\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:59 GMT\r\netag: \"69c59b43-8ad\"\r\nexpires: Mon, 06 Apr 2026 09:51:13 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270072-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.253994,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTxr2ObiB2tmMvgIFR9SCojFhM5oW3TE3KlyMi%2B8GWpeoY%2FgqJneP7sxlmRLErZnKImU8XDNX2Gs3pgDzxE%2F5KxuXyk5qluZ%2BbPZ5Ol7rX04JxPOBCnUpVY0TVhEW3JBkJ7r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90644cddb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":2221,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 65 x 65, 8-bit/color RGBA, non-interlaced","md5":"a0ed2d943b58213c1f826bfae70fb7e1","sha1":"48cf82dbcdab11bba0f2288744762e728ffac68b","sha256":"3b366c7e3b705445383c4f661bdb111c76311a54d0c65fba6f68b488545beee1","sha512":"f110eb6849f7529363c0a0f6c46c665596b9e2e5bbe22b048cc4a70b238b66d4c8228a5b5a75f9a8569766e31259cc1c99d4e8919a352c34063b618fec9dc152","ssdeep":"","tlshash":"d441d9e1b14def81a4f299b526b70bdce6b30700082e6c98e767cca2744559475c8999","first_seen":"2026-04-17T09:57:45.40885Z","last_seen":"2026-04-17T09:59:08.759842Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/ico-limit.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/ico-limit.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/css/style.css\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 913\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:46:55 GMT\r\netag: \"69c59b3f-391\"\r\nexpires: Thu, 16 Apr 2026 12:32:24 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270065-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184592.690789,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zuf8uoNQCrRCJBwclzbOO7LcGbGT9oI6YTwpKtrpJh6JN3SciMCp8RpbIcqByVfjxOH0ZoG6U%2Bm9cLICOWAZVMEAbpzc4t%2FVVOdZwGTITRYjYXdcGFfgxJcuRMXIF5C9lIzX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90694a3bb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 22, 8-bit/color RGBA, non-interlaced","md5":"6fbc3d657f5ccec961bf90dc0871efa9","sha1":"ab1bf7e7e1eb57d8dfd4750b6716fc6d24e783b3","sha256":"8a9f504e9ed7e9bf15a53097790f4b507a653d8e8c111f74c20fa3cbc12f19b6","sha512":"ec4cf155653f400132cddf823bf8dde926dd667166478e7e74d51c4adf1ff403b5bc313875dd749185c376422aa5d6fd9d49db9d948dfae269c646d40a6226cd","ssdeep":"","tlshash":"2d11b7f3e0946550e220642cc27114f709f300b05722c84e5838477595e021ff71a6ee","first_seen":"2024-12-02T21:43:54.447295Z","last_seen":"2026-04-19T19:19:23.547971Z","times_seen":31,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd56af38652.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd56af38652.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 21552\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:07 GMT\r\netag: \"69c59b4b-5430\"\r\nexpires: Tue, 21 Apr 2026 13:08:39 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 247712\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270066-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.369883,VS0,VE2\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKz3pklSEGdgys%2F0TdcF0NhJdpdW3C3lYMYhT5e5OoWvzUuLXRzvwP1R6NvVFESAEmY1pS%2Bt8fwbUbTpJ2hqK3R%2FeA4315%2Fwxm75B4m5RNGmmlwv1pssMT0Iv%2FKz2Def7XI7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda9069dae1b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21552,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"9a1d54ef390ce98ac4cbae647c2d2f6c","sha1":"e7b903f997c23f1f0276e39ca2e4f8ee7bc2cc35","sha256":"8f1ff48e98177671eca1eba1eb85024ddc2d2460cb4daa82267d8de1ac0edc65","sha512":"e13249db6e2aeec900219aa6ebedc5ae9a24c3266e5c097ad7fb251b5fc9d4669a46258956de2bdf7dae12ac3dca5a91ef910507c8adeb274142626ab39c34e4","ssdeep":"384:F1O8e6m6WFZqIVo+n8voDMqH/Ux0gdtd9gFR1TU3toPXQsFLuht:nTeAIx8yMqHg0gZmf1fFLK","tlshash":"dea2c00de2e9f8b2559b6a644fccfdd4c39d754b94e34a207dcb3e40ab94cea0136015","first_seen":"2025-06-27T04:58:45.948319Z","last_seen":"2026-04-18T20:11:58.254449Z","times_seen":23,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-17T09:57:10.194Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 22:36:30 GMT\r\nexpires: Thu, 02 Apr 2026 23:13:15 GMT\r\ncache-control: max-age=604800\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Eixs4RYLdFvg3MKUCuwvmt4xSuIFzAOQUf%2FyrM89L5G9E3QiQP8JziuiY6JaMdQdcugf9JkcuLnn94gzXqNKVOJojLtN6j3mHCAsuiRziZkKYnq0iJhyQ6ZJR3Lbu65S69i7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 23147\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270053-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419830.235093,VS0,VE1\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9eda9062ca1f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":257066,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (3016)","md5":"8c184cdde6266f5129b868b87db04877","sha1":"caf8fcfdc8a0da3e9173acdc0065156ea5895dd0","sha256":"d5a938c39e84496e7d2a94f2e4d6e1b39aaafb3d11314fd42069c10703486fb0","sha512":"3304529bb118e9700965e8f3286560d9d722aff8b06c59d915cd0ee62fc38172a4776a983854a9fe4c6735749fca990973ffdc0b5e27e0ddfdf1d652ae3b98c6","ssdeep":"1536:QIU6CKaW2Ckfw47BGHOee8ee+eeWeetxbarB8BzZguPGm3u3aIWqr+0KyexqG0Ai:QI0YbarmBzZguPhishLql","tlshash":"f0442e3081f651fb525e91c1a6aaef1a7fd09e13d966c045b7ad3fd20f93c83a913428","first_seen":"2026-04-17T09:57:45.411792Z","last_seen":"2026-04-17T09:59:08.799562Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":37,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/corner-right.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:10.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/corner-right.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 4115\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:06 GMT\r\netag: \"69c59b4a-1013\"\r\nexpires: Tue, 21 Apr 2026 13:08:38 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270022-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184591.266689,VS0,VE3\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpel2EADWG14zhcBmII7vJv5jrW0wy2knTfzr2ESs1GJlXXzSoMIH7tXS6Pgx8Sy4D%2BjA22STAoBwrtD8fVKE%2FyCATFrGpoJmNarDw2mpWO9H40sknGSJIEgbjnit5E2WnzK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda90646d04b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":4115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 49 x 101, 8-bit/color RGBA, non-interlaced","md5":"f2be5e3aaeec42a7145894a26d4a2e0c","sha1":"91654bb92c84643c812fdd0f9854b1c837732e47","sha256":"75942929e40a7a147132f64268555f27894a2fc36f6436c0e2353523ff563bab","sha512":"6db40851c92c708f76fa4a089e5f4a32b04f317b12f72fc0b0156fc8d6db47003992234d8db186de5d5b0dab363f606cb451a3f3258cb4959395c69660239e93","ssdeep":"96:qwJXURsuac+lwQv4uKGQgUYkxQJv6sGfKtfyz/VHu0bMR+X0nD9Ck:tJkPaeQv4uKZg6f/fA6bVOCgCk","tlshash":"0e816dcddf72106b9cca836e516814b518fd9fd5148f89440dc0d746984d8ea00d1aed","first_seen":"2024-12-02T21:43:54.416067Z","last_seen":"2026-04-18T20:11:58.253206Z","times_seen":37,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.269Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 08:36:54 GMT","end":"Mon, 22 Jun 2026 08:36:53 GMT"},"fingerprint":{"sha1":"89:20:2A:2D:A3:02:EE:53:E4:CE:46:31:49:99:9A:9E:B0:E7:B5:19","sha256":"23:47:72:09:4E:47:52:14:EB:06:36:94:9D:9F:8D:66:FD:E8:20:45:1A:16:A2:2A:C5:F5:B8:7C:2A:41:2B:61"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://case-battle.mobi\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Apr 2026 10:08:26 GMT\r\nexpires: Mon, 12 Apr 2027 10:08:26 GMT\r\ncache-control: public, max-age=31536000\r\nage: 431325\r\nlast-modified: Mon, 15 Sep 2025 16:30:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35156,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35156, version 1.0","md5":"062c1f2aaf2d4de07ad2a2f21c17ffc0","sha1":"3fd1f07343bd33a53cd374f7f107dbdf9effae03","sha256":"d5bab8e28732fe3d10dcef4f77b9c248605bbb2a87d289a2539251ceafab536a","sha512":"7ab522d8bc41128be5a15f2cb91f851f6dc5e437afbb90e6191bbe63d9b94a35911f04701fb2b291362b2ae0f0cc639dec2d15e53928afc5769590a2937e81cf","ssdeep":"768:is48okTArkNSgZJAf5jkRcaUNt8wrNPCbJktQV+n+NUB/wo8IEH:5hNTtNSgZJMjkRBUMwrNPC9NV+n+o81H","tlshash":"22f2e172c3787192ae0985760d60cec8986bb2098f7658b0143fdd38ee45345a3f6e6c","first_seen":"2025-05-29T19:30:52.507782Z","last_seen":"2026-04-22T16:28:57.3201Z","times_seen":15908,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67dd3c97bc96f.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67dd3c97bc96f.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 93863\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:07 GMT\r\netag: \"69c59b4b-16ea7\"\r\nexpires: Tue, 07 Apr 2026 05:46:29 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270024-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776419831.371271,VS0,VE118\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1NooSDOMxas8QUj7FrsP%2FCx73BHhGCelbX4lrqKsTKD7XQ55%2BNe%2FjpXo0tVrMvXmdC2qEAGz3WrcXk6oz3JT9qHtwxJYO6y%2FgkiApK6MJtgn8zdVo9VYEGsidqNBe41W2Dnx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda9069dae3b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"f9d0a8bd9d64bd5a56e51a4da6dc5f6c","sha1":"b0de9bb947a1470b6fd49d15da2b1c35b010d5a5","sha256":"a1e200402d0b15a4a1ea65a2655a8ab749bd3bd4cb6c66273f81b661b6049654","sha512":"6f52119a1206bf034bf016a5653707a111bbee740cb750d45581f64a48a16d12b6abc0af2899f163bc146c060324b7d7b9f89c696593564af1f397854c2f8139","ssdeep":"1536:fIk+ItLo5XazsDMaUYK5GpaTUGjmlYxe7Exiy9yU25nAOdFJJanN58ZBe:QPWLmdDK15FnmexDiysU26+HJakHe","tlshash":"3e9302be0ab834aa7056020352476661df7c5e5fdd3c958ebc69062dc2b372d14f82ec","first_seen":"2025-06-27T04:58:45.924837Z","last_seen":"2026-04-18T20:11:58.233473Z","times_seen":23,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-67a333f229ef5.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-67a333f229ef5.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 80590\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:06 GMT\r\netag: \"69c59b4a-13ace\"\r\nexpires: Thu, 16 Apr 2026 22:44:55 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270071-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184592.812050,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=euhodzFct%2BYbdXa0Yzj2fNS8VyYIuqd5L8Y4mjzWGuWDt78RO21WkysVrVoWotBtMD3%2FgiEK0SY6g2w5F1r04Y6uyuwxwAe2YHmwcFrzzBlp8KWOBLQA6fEK2FUCEeLBHmCK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b33b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":80590,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"947ac8aacb1a0bdf914a3a5fe9f5e503","sha1":"c70c5153efd77b6136ba7f8874be6e7c2164015a","sha256":"5d7cc1ae8669eee3394453e14f1066424e38a1478a716043ee7341d1af56da4c","sha512":"1b119f274eb5eead0fe886f42f49cc90792f9c511796060b5772e9d2f83678e24ade8a8a73bc854c26c28f9ab901f70c6b0ca33b1051ef02178e6612c980ffbb","ssdeep":"1536:ZpM6uAvmodPlVEA8IyxemgzB2vHyT/DhZQ00N8mQCdWZtVF+:PRxkAmg12aTrG8mQCaVg","tlshash":"e37302c03095ef660e0cde1f18e107ddd08b25d740a86f6701d6ca204eaa657e7d5fa8","first_seen":"2026-04-17T09:57:45.415647Z","last_seen":"2026-04-17T09:59:08.753435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"case-battle.mobi/img/middle-612e1b3243a0d.png","fqdn":"case-battle.mobi","domain":"case-battle.mobi","tld":"mobi"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://case-battle.mobi/","date":"2026-04-17T09:57:11.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"case-battle.mobi","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Thu, 26 Mar 2026 21:13:10 GMT","end":"Wed, 24 Jun 2026 21:13:09 GMT"},"fingerprint":{"sha1":"BA:FB:7A:5F:C0:7C:13:1C:7A:E6:78:1C:99:D7:90:03:9B:7B:31:09","sha256":"5A:1D:CD:88:1D:44:BB:F0:94:4B:D8:30:2F:B2:96:2D:79:73:75:65:88:C3:F9:43:31:3A:CA:8E:2A:1E:E4:24"}}},"request":{"raw":"GET /img/middle-612e1b3243a0d.png HTTP/1.1\r\nHost: case-battle.mobi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://case-battle.mobi/\r\nCookie: _ga_5GSG2TPNHT=GS2.1.s1776419830$o1$g0$t1776419830$j60$l0$h0; _ga=GA1.1.1228933428.1776419831\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 17 Apr 2026 09:57:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 33601\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Mar 2026 20:47:06 GMT\r\netag: \"69c59b4a-8341\"\r\nexpires: Tue, 07 Apr 2026 14:18:27 GMT\r\ncache-control: max-age=604800\r\naccept-ranges: bytes\r\nage: 235239\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270075-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1776184592.795972,VS0,VE1\r\nstrict-transport-security: max-age=300\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CCUdgNfjiqcs3MGidn75GQ4aUORvpIdmLkg1t8RKdU8H91SDCYguDHA7vdlviHdf%2FM%2FNpl6st0PMu%2BU6nAmH9S%2FvZnHyLRKv0lXIy3RU%2Fln%2FrzRUc6rOXn2%2Fv0NYwWLL%2BvFd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9eda906a0b4cb4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33601,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 209, 8-bit/color RGBA, non-interlaced","md5":"4c4a8b52137ae8fe2dab95fc2f92e124","sha1":"6c7ea7e2736408a5b5b5bb315ab4bcecd11f6973","sha256":"420e84afb6c21d6280fa5ccfdd691f119b88d54f147d6178afe414bda242ef58","sha512":"3a63f3a69d8a0850ee122cc25bb6b688e340a1ba48fc8ddfe0d66b8269fd70f22335749de65270a8fa7093b5e36ce06d0b38a2557f507b49ee2ecd8ee67b6594","ssdeep":"768:uvJTyMwJ5kfKTRiVH+XZVKh/vRRSDwey1IwyOjblPkCyDxcJ5OQ9eFQXZ:mJTyMwJKfKTR0aVK1e8RIw/blPEcqhmp","tlshash":"67e2f17b193239b1c18a1ee843a1faa3f5615ded1f2fd640682dc04fb61e604d78340b","first_seen":"2026-04-17T09:57:45.417194Z","last_seen":"2026-04-17T09:59:08.767248Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-17","alert":"Sinkholed","trigger":"case-battle.mobi","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}