{"report_id":"68f48b6f-5d95-4104-9cd7-5d5b49af5e8a","version":0,"status":"done","tags":[],"date":"2026-08-28T13:34:38Z","url":{"schema":"http","addr":"cs2go.money/","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":0,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"final":{"url":{"schema":"https","addr":"cs2go.money/","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"title":"CS.MONEY - CS2 Skins Marketplace","dom":{"size":785410,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (43934)","md5":"8f1af4ddba47c2f00f1e8f55042c7153","sha1":"83dcd025450ca6a1a10ddd943e2e52a1fbc55c70","sha256":"994a8293e0b97c7b7ea7643e249fa6c2fb0dab7e444f009a08b474a74c5618bb","sha512":"1f32da4d8d6ae6389263547bc2fc66461f2e34f467cdfaac383791df930f7627ea04fd4ae8f543856a6d5d5943ca83361c9e150686bc6869ab1fb06fb9e3b988","ssdeep":"12288:+C4x8Pf+i0QiS3C8QWqikhgC/jxhEqmelzyaBah8Ln8Y1cOA1rn/dzDe7SttEAtp:+Cft3C7Hctm+ZmhfmmmTR","tlshash":"b4f4766145dd68ae5205f51bdc08be0e3def01fe3fa6436215b42dbe36f2424c27a61a","dom_hash":"domhash2e0d2888f56da4e4f76d9d0a68ee7211","first_seen":"2026-08-28T13:30:26.13666Z","last_seen":"2026-08-28T13:34:54.641884Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cs2go.money/","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":0,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-02T13:34:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"metrics.cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-23T22:23:59.870946Z","alert_count":0,"request_count":1,"received_data":13319,"sent_data":531,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cs2go.money","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-20T03:52:30.220518Z","last_seen":"2026-08-28T13:30:13.367202Z","alert_count":244,"request_count":252,"received_data":7423747,"sent_data":139617,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-23T22:33:38.023236Z","alert_count":0,"request_count":1,"received_data":517376,"sent_data":474,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"metrics.cs2go.money","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-08-28T13:30:11.0613Z","last_seen":"2026-08-28T13:30:11.0613Z","alert_count":2,"request_count":2,"received_data":0,"sent_data":1285,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-23T22:20:52.902616Z","alert_count":0,"request_count":7,"received_data":454591,"sent_data":3999,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.er145q3ubq.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"65aa0d1dc87608892abbefc1bc632e5d","sha1":"25d23bfe74606597a75a139b9ece39090cac8b51","sha256":"819e29fa916dc65ab6d175dc861fb278e158b91c616178d09ef1895a4b09aad9","sha512":"51a9972294fd60317022b7b9adfa7571e2ef1f32003986aefdc93cd83a0e68373e7a211a68421ec5c39c9c4134baad1b64ca98d7a902d2203dc21291b777a679","ssdeep":"","tlshash":"7811eb6649b0887a8038a7edd13950032262183b478e97baf77c4d3a5ea3986472cf46","size":996,"data":"","first_seen":"2026-08-28T13:30:26.262664Z","last_seen":"2026-08-28T13:34:54.824335Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jgtwan9txk.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4c58ddacc60dc8db3c77b73b78da8008","sha1":"9a9ec71180c7515766a506a0f13283d3ab2011cd","sha256":"501165284eb1e5d6865f2c4034f85c3e813c9d4931e656953ae8f0628cec10c4","sha512":"617c31b31698bc1bddfb664b6fc9b84fcc24477b073a68bcf3313a3ea01c1fa67326a858c8f4283db603f982bea63f55a45ef2e67dcf2de6a4600cf6742e7665","ssdeep":"96:o6GCLDelG+2qVC3CJ794nA7gZFLf3pjXkFJtPSvQGvpHkHRvn:ZGCLt5yJGn3FLqa4GvpHkpn","tlshash":"a59174edbf748ae4988823f9d75615c9ba5da8ff47930934c29c0d19b0536ccd91d883","size":4260,"data":"","first_seen":"2026-08-28T13:30:26.171754Z","last_seen":"2026-08-28T13:34:54.64406Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.cilm56heeh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c27b0a5a1fc8936c3957b27bb0205b3e","sha1":"8bd06a74fe641e9b0afe76bc427ac4c4c55752a3","sha256":"ef71952e9c16c6e746a57a66f2e00c415d4415aa8a0dd7cf2ea17bc0a2d38dc5","sha512":"d529e2d90823f4469bd4579cf9d2a7116417eabba61be2baa1c6196682ea258aea4f009e483afcd85f55fba7a7a51a2b9bd5aa8c708ab6c5a5722693a6d95810","ssdeep":"","tlshash":"d5f04c510bb04eb9902a17ede1b7260333c54537578d0b71d2798d396a25ac7825c2c3","size":580,"data":"","first_seen":"2026-08-28T13:30:26.358982Z","last_seen":"2026-08-28T13:34:54.895986Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.omvn9pswpo.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6072499b5741042bfac6b58e71aabc63","sha1":"1606517af4519697e69589d88e430a765cbac65d","sha256":"adbaff7fb2909e7143a68b20cea6fdd3e2dd63cdfa863198d2bcac019feba803","sha512":"69015a698f34f077f0c40e61cae008f94091d531190ac2e59109d003f84d0367301f1211ebb0e8ae060b0e9fa84a0c78fc9dc0f8eba3bdb6b2cd8a30b96a32b9","ssdeep":"6144:cT7oElJ/LDORy3bT1L1ksH43cRQ8ki01BzG+W3fVl/C4WA0jIArrAnj:c/9DZr6B8ki01BzGFlKfA0jIt","tlshash":"0bb42bc9b296b17447a791b9d03f1006b33e3999a84d8028f67edcc97c29548e237f79","size":533349,"data":"","first_seen":"2026-08-28T13:30:26.481396Z","last_seen":"2026-08-28T13:34:54.719764Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.n4esh39tsy.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7f0b57ec43927166c051089a38f8fe1a","sha1":"df6c6c6c5a9f537db0e3e9bf5975d037d5f74fc4","sha256":"65ec99377871b037b0d1a50df29b71126345d7501b8bf228c9977bda64509ba6","sha512":"785cc85d07d8449d20537fb8f0b0f1b7fbbceced4aca77a683187db515144a654d2a6e12c58d9e0d0a560a6a44dfafb43ddc52fa803c6a5af0b3c0589fc0b3c8","ssdeep":"","tlshash":"8c51668433e044ea460507bee0395a0bfb9974bf971d8f51923cc5bcbcb8181d9565e3","size":2454,"data":"","first_seen":"2026-08-28T13:30:26.234016Z","last_seen":"2026-08-28T13:34:54.796983Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nqjwc2n906.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"77154e4be23ff40ba139b584de48c277","sha1":"010c5c1d633cb63ffaf6f67323585de8822b4367","sha256":"ee3c190cf105def7e5f8e686cae660ee4aeb70f6aaf41b0f45365475d73e9ea4","sha512":"8dfd3486d01e3d8e3cceb4dec40d57ef64a24b5a22391cd07696ba4d25079dd386b03153eebbff35bcc1f7225ed4e81ff4b7414d292bf708e565eb33920045ef","ssdeep":"768:6bXD2fQbdmEi2MGs7J28Aimy99h57aEiTrq/XlEh9mFuK:rYx2h7J28Aimy9v4ST","tlshash":"7fe20885b0d2703462b7567bd03f420dbb7a2d4ce90d9410b1bad8cd3ee9989c227f69","size":33229,"data":"","first_seen":"2026-08-28T13:30:26.703806Z","last_seen":"2026-08-28T13:34:54.929202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.hwho5z7gji.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"289eefc2c6dbe01cb090d2d8c5e2697b","sha1":"b16c2f35d9c13d96c86f78c0ea7be2047fdc3569","sha256":"3f937c842c40b83e63a96b144a41b6637c9ec9033c7f2f7be19fc423aa418a6d","sha512":"73aeb86a0d041722bb7587d94cf042c5f07d0130465c299aeb11d80743b1c423aa59d24e7aa752c83726ec6976ae98b7e867bf5a8714e03e4db68ba19b2adc77","ssdeep":"96:zmmsOrADnMKC8iD4sxfmt8jREGb3xAWaTviquiurhnL2Wdl1sixi:zs0ADjXQdjREGb3xAWEiLiurhnL26jI","tlshash":"9ca1ea7bd26098639081cdfbc405a3b61673146b67c1c778f0ee5bfa1b206a1d829a77","size":4845,"data":"","first_seen":"2026-08-28T13:30:26.564655Z","last_seen":"2026-08-28T13:34:54.679423Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o5cmqbu59u.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f5ce8b05d10bbeed3bda8f37d4517c3c","sha1":"67059814453cb801ad3aa4046691018b4fa2c342","sha256":"3499a98cec08b445948ffde7151d081c7af06f5f07bfa077731c5d26090a6005","sha512":"07bcadb2040144ff63cb413cd6677faf450b7fa586c751f19c8260d7988d32fa674c993ba7f710f9fc65cbae99f363e5aafb2095c029c435c66eb2e66823e866","ssdeep":"","tlshash":"cdf05ca15bb04666802917fce07a22133695843bc7cc0bb3f178073856619c9818c7c3","size":461,"data":"","first_seen":"2026-08-28T13:30:26.160086Z","last_seen":"2026-08-28T13:34:55.022539Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.dewue2b1o5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"14a7ba4402ccf04c257609eeb244ef18","sha1":"847588d8c3405101d3ade538734031f0dccd4b46","sha256":"ad8e0e48bbd59ec239eb8fb0b6f4d321d5af9c4d73a038807595c0199c25d724","sha512":"807f8ecf271adfb1a5df0fcc5e29f0892f4079c77d243f89af5be2db96599987a06554dd9d0c77e194c6737860afb1cb7f4669af44529d15ec6e30ed9bf5023e","ssdeep":"1536:jWVxczsyNfrdPBcaxPALW8nIRN9dogLlxN06ryp0208Lmd:psqPAS8IzTooxNUp0Riu","tlshash":"54b34c99b1c1f5350bf6d9b5c03b0101b33a6d46784590a4b3aeeed22d794ca9327f3a","size":110840,"data":"","first_seen":"2026-08-28T13:30:26.228863Z","last_seen":"2026-08-28T13:34:55.024543Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fohukbbrfu.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3a4da2738d40f9a684cc03f7f27995d4","sha1":"212b957d605a504e618f1474df211547fbf7a42f","sha256":"c3604a1c102191de0f05519c49547223a4fba14b640857797095ba570ea813eb","sha512":"2cc9f6ae2730c64247a0bb662da73264cf5dabe7484dbb3a9bbdbe76b87eb5369b783d3a43e5f4d3b2ca67356f3e9b81f8aa5901feb327e862d5e971c069b2d4","ssdeep":"","tlshash":"4051a5da7ea1ac3016a907e5667b9382308a3138a7458970f8fd9c3d7735d478c29e8d","size":3092,"data":"","first_seen":"2026-08-28T13:30:26.155299Z","last_seen":"2026-08-28T13:34:54.725135Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.o6gjkfl42q.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2d59ae2ba62c55d17a960d1c648ba14b","sha1":"45960fd1970816091b8dad4244d0c3d9974cf495","sha256":"66e9552447b6c6c43a89059665b2d608b8afc3f704fb4de7652ac95bbd9fa21c","sha512":"af56ab45ad9f26c1205519026352a9e40a65fbad03fae3bd3353169fae68722fc73b800a0adae23664aa4ba899812027f9519450ba0f27d8c2bbc8d39aa4363a","ssdeep":"","tlshash":"6b31c9bbd564e96b45c89efbd12ac1321076043b13d4c7b2d1ef0b7a1b210bac419a43","size":1661,"data":"","first_seen":"2026-08-28T13:30:26.506417Z","last_seen":"2026-08-28T13:34:54.877981Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cygsolncnj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c24975747c987b17d57968d564d4ab94","sha1":"2ae09b911afc3991699c70e1cbb797a7e0efc14c","sha256":"76815a7c9198c6c75fbbba9524c9e24635919e6bff30a9a7f05aba059fb4e3ed","sha512":"fb6e3447006ae467a2d818e8e23842ae118cc3ff1610430ba957b11e891b81e25bcd66a63d5d0928f64f36f9acbc6a13d71e358a03172dab765dc44ca40673a6","ssdeep":"96:zFRqkUmKisjNvin6FkEcpMupLqiowHek6GrzZU+5vBUqtFsM:xCmKisjNvYYkEcpMupLqi9HelGrzZz5N","tlshash":"bf919375b2b4157a414fdafee41d0063f3192c329a991148f6dd8ffb26238888236f75","size":4270,"data":"","first_seen":"2026-08-28T13:30:26.604654Z","last_seen":"2026-08-28T13:34:54.674501Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o78l6llc9p.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"03026496a10149cb3ccef0d5877a7b6d","sha1":"1c25ba1932dfa696522ecbf846febedc6f970c0b","sha256":"b28edbb98ca09444f5e8af2f9f3ce4e82c048b06247b4d0c5e17ef602721aa1b","sha512":"665c7eda8c2f8658c07edcb1453590270ffb1cedee0de5c8fdfaf4948b906aca10732d9deb95402a32a295e38e3a65945feb7cc2e891d64b9d17c42eb695e3db","ssdeep":"","tlshash":"d0f0ec514bb01b25406913edd16e450365e545378bcd2bb1f2794f3d2b179cbc5296c3","size":448,"data":"","first_seen":"2026-08-28T13:30:26.556271Z","last_seen":"2026-08-28T13:34:54.728297Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hvx7bvleb0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"34008fd4f05478cbe0aa1610bbb820ab","sha1":"61e6f391948b0f54b3661cb40c060839f048b74d","sha256":"06cd23cd9e61f51c50741bac675c202325d6c5e400cdf9cf85d1ebf419b3cc85","sha512":"91fcb129883bc018a93f85d06d61a2f0a654aa48289edfffff96f405b009ca975cff67819a98ae57778fb763d30e2f217f4778557e7d9c896ecc477ce287c93e","ssdeep":"","tlshash":"1f21df50167c854d411c13afb9757a8ebac42b7f93fa052090dc8d2cb677ac0761c6e7","size":1349,"data":"","first_seen":"2026-08-28T13:30:26.679229Z","last_seen":"2026-08-28T13:34:54.938261Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nldkdc1f1i.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0eae0744bf5f0e43682ea747b0c73466","sha1":"4254a0d5cdc185d05d7871d8db9ca8b2f8e8e6b7","sha256":"b898a417e9c432d23efa232f4cb4aa5785f8a8f3e88641b8374a2c8b2cb8fa7c","sha512":"4e50b02b0083a8e99c3306920413266ccbfcff93b7c50da2499f7581cab21df513f91a5fc04d6a80345f381b46396725707efc745f22c490449e770c66e6ec54","ssdeep":"","tlshash":"1231167bf5f2dcbec41e224dd6ee0405dbb415afcfd92d50a1bc860865313918659b43","size":1747,"data":"","first_seen":"2026-08-28T13:30:26.143723Z","last_seen":"2026-08-28T13:34:54.657591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nyx4v01nz8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"80776c941a2abc19a7e543b96c1812bc","sha1":"6e66b85ee8ccf71309a185d7607fcbdbb767796a","sha256":"4208050a2448cddab161847e83c4bb8fa47e48d81538cc3445ed8562752b1536","sha512":"92912540cd4873b07955c32a88ffed17ea3585591794291ec62a535c25dc2e8b4195efde89d87129ce492e33d4182839bad6c2cc3ed25931d50ef9278dbb4a77","ssdeep":"","tlshash":"e63147cc7be3f0b9432a90b940af0407f07a0e370e8d4155e12fd4617eb5486c12be99","size":1719,"data":"","first_seen":"2026-08-28T13:30:26.702555Z","last_seen":"2026-08-28T13:34:55.001978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hrvprlucne.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b813b291ec09d21ccee53551638a0fa2","sha1":"f86299637826967b4381e5b56b4193bce6891d82","sha256":"204396ba5be18357361e2fd590bfb11afc141edd99b45f29bf5a3ee8bc75ea76","sha512":"4304f1d162cdd50a197ec7e2b76889632f00891c0516cd2fff80ab5535bf0e447c106fb5043585107dfb68534d0ad682878f1e93fa89638e29b00a07184f3955","ssdeep":"","tlshash":"5d01f19d66b029b6101e7bfdd126010363a4043f53584772d0be4d3d2f3a999842bf87","size":812,"data":"","first_seen":"2026-08-28T13:30:26.642675Z","last_seen":"2026-08-28T13:34:55.025385Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.oxamrkcgsl.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"10b5b12476dc0cb460bb43b53a1ff705","sha1":"6cba282627c8ef3c5a31e84fe9aaeb882200512d","sha256":"389b0bbdc6070f838903ead7f1541a374f45c4bedc82ddc9c2a4d1832d1072cd","sha512":"72fc6fa172ef31eeaff592273d1098266c74320035c439a1520be5441c0a100649b115c9f88ba1ee51494e5acbd22e8d86b03afd84b61191c1b360b2960ce806","ssdeep":"","tlshash":"e851d47843bc9130602e62fae8af07a0c31b8917d7b211d976ee47b602269d4c735fb5","size":2675,"data":"","first_seen":"2026-08-28T13:30:26.259619Z","last_seen":"2026-08-28T13:34:54.949578Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ikumnipz4l.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2a4416d3489475e98d1f04a8153f36dd","sha1":"f2f9a99313b79b4b03114965c2e74b3d5d0e46e0","sha256":"6fa7d13f2f9a9d5f2e330fc2e455a2211ad30de7cf28382f0829a792d87be88e","sha512":"0176dbdcf1cbaab12e8c58b4e8d06ae1da8ed2c341cf52641682e07132b273e6e0817338b7b8f07d9a0faa47a21e1f005982b911b3a5842358f2c82eff729ecc","ssdeep":"","tlshash":"f851510c0fb4fe3d7151135c9e9b120127f9993bc6f9c96d92a48354c4d2eb5896c37a","size":2822,"data":"","first_seen":"2026-08-28T13:30:26.332719Z","last_seen":"2026-08-28T13:34:54.88367Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.3c7dshfnbg.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"fd00edb438ed4a49ac5f04a7bf582425","sha1":"7927863882612167ddb3a867ebfaf56ed7f76b08","sha256":"6b72f1cf616799f7d4cdad29bde578ff0229d9b2477353e4561ecb5f92b713a3","sha512":"a457109967d0a035101a81cad60a11c6b80d8bf2ecd08662531aac808237088165d0e41fd399953dadf15d4f27f6413537791c338f7710b5c38576889fa4496d","ssdeep":"","tlshash":"db410fb5127c4a33486859fbe6609243b8142437724e207bba7c58fe5cacc834b74e67","size":1983,"data":"","first_seen":"2026-08-28T13:30:26.336451Z","last_seen":"2026-08-28T13:34:55.027692Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.h8t2w1xgvn.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"64d11ad81c6544cd099190e19454596f","sha1":"699c8a21e2670c61295c9603dcf01592a146901d","sha256":"24b26e0489e5b00a184bdde48b1163c3895d6f02e417f131e5ed649ff9650fd4","sha512":"6f23451287ffee360e5a83f577b855d438e94cb4fc9d643b0f81c1d6bff1a1969c5cdfa90e5af4f697c7fd8840c8ffffb8ad070cf8236dfcc58feaffc8809d43","ssdeep":"","tlshash":"f65120976311b811916421e7f2355707e30d3da7518b056ef3a48aef2b0f9227868f7d","size":3075,"data":"","first_seen":"2026-08-28T13:30:26.5603Z","last_seen":"2026-08-28T13:34:54.950755Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dvzhjae0o3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"35f50bdcb867e8a2dae2b860f2b2423f","sha1":"648e7544047ef34865d8e43d6c927f8e886562fa","sha256":"3b0ab05e4f535de40d682aedf80a9d5632e8bf48dcb711db7463d52970b0115e","sha512":"a757d817f82f46889a9b95439b9e23ddd41b94c49ab9578df1011936d6d59dd6178532be2e764947e2f6b151eaebcc360ae0f6e87f5514440a6c977b53cfc4dd","ssdeep":"","tlshash":"90211ec937e421a943920979c1afe507f0284a6742eec36ad26ac634b9a9056c212f1b","size":1139,"data":"","first_seen":"2026-08-28T13:30:26.661232Z","last_seen":"2026-08-28T13:34:54.74864Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bmq0t2f9ws.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d34cb8d2ec1a45473ec3a0017eb510e4","sha1":"ab481aeb7985ed4e0562642bcf55824553ba36f8","sha256":"c414a03313afa199e774196da1fc50b445b106a53b7f42107ad643e24b6bbadd","sha512":"c529202f602d53af9c35a4f06e3a6317dbfcbf445d3665607e7af538b88a8179ba194413ad19c8832f72270653824d0f9e69c5ba6fe532c9d3e871c067e08d0e","ssdeep":"","tlshash":"b7f09e966bb01605802a13acd57e1103b698147b4b8e4b72f039893d3b208d682287cb","size":497,"data":"","first_seen":"2026-08-28T13:30:26.299691Z","last_seen":"2026-08-28T13:34:54.93589Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.c7nd1p1ei8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e5ac02493d9edd8e06588319a3932c97","sha1":"845c79c32ae32e14a55ad8340788249713b46738","sha256":"c4a26e5511db6eb83f6249dd2c3d836b7ebaa2d9f12f4ed706c3fbdc3f8b9348","sha512":"4dd8d19fbfdce51243b649a3250d043a3e9ccaaef31a7f05b2377490dde9cd070b5012814defca2128d006abd70149fe4a0404e5c00122ea27202c3ed4f5c8a4","ssdeep":"","tlshash":"37f081090ff00b15716923aed2268102bbf4403b5fae0f71e13d473e366ca854349ab3","size":574,"data":"","first_seen":"2026-08-28T13:30:26.248542Z","last_seen":"2026-08-28T13:34:54.891955Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.oihbp7rja5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f69d2cecabbb8f9fedbea82295301d52","sha1":"a091ac620afe2627679d52c3f8a22976f352aad9","sha256":"806f0efe71c74e115e4fc6ba15f771e5536c3aca8137ef24273e25e3653eb513","sha512":"876d77ad9fa039af76c69726f6a82f2e58240b58e5eeac8f1ae834c1b242b76f472a0481bd2eec9d058f4dfb5760094c091714cdafacfaa140f2aad844bb8ca4","ssdeep":"","tlshash":"36f0a7966bb48a5a401913fdd12b5103b2a4003b5b8d5bb1e13c897a677abc78568ac3","size":470,"data":"","first_seen":"2026-08-28T13:30:26.56981Z","last_seen":"2026-08-28T13:34:54.98387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.e1e3ate3r7.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b1611c9d50277553af8d46603b77d819","sha1":"6b8d90d3bd44e2f6363f2ace0b4a833fb8119dd9","sha256":"5d7ce179792fba7e12aca224fe402cca9f90772f829bec05c91bbc40a1061faa","sha512":"04e3c6d0089ae031358673088d53e41dda9c3567e793106bb3c1a7630ece518512091ab6f92e7a89a9860971ba1e39669c07973a58f764f2d61b025840679f3a","ssdeep":"","tlshash":"52f0acc9aff019a6402a53ecc02e0143b958097b1b8d4bb5d2394d397b7298a45a8e87","size":603,"data":"","first_seen":"2026-08-28T13:30:26.67662Z","last_seen":"2026-08-28T13:34:54.97439Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mrtovgibpd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"82a8fe1c0471776cacee3841ccda1228","sha1":"57132dd54c40498ba3ada812193643c4c7503762","sha256":"239c313765a622c4544a936e7241a162072dfda5575ca097acf0384caa6f657e","sha512":"d69bee5091788ef9165f41ef76ba332183d5b17877c947f2dbb93f1e2d3c313e0015b4f7f241654c4f0bd70b18aee8afc087d763f7c29ee2273e6376b946e93b","ssdeep":"","tlshash":"a321f09ea1305a79450f4beee82f20169060013b8394c7e6c1bd8e351bb699b816ea0b","size":1266,"data":"","first_seen":"2026-08-28T13:30:26.354567Z","last_seen":"2026-08-28T13:34:54.913168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.e7phbvbyu5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"71966bc3fc603333fa671eff24fe2b6c","sha1":"9e9c22e137b296128ec92925a198f55c98cef2b2","sha256":"55930125ca36e9717369cd54b68f151d4957cbd8e11d737e93f5f13c9348418b","sha512":"dd5160c31a842df8f1159e814f8a3082fb2f0dfafc2cb2a033b4cb861dad04051bf71556ac889f5910a04fdc8c7892b3c4a4ca7b62759c6b1162a845eb78146a","ssdeep":"","tlshash":"f2f0e2c687b005ab80ac37edd13e40036290453b4bec4bb1e27c0a392761bce865ca83","size":491,"data":"","first_seen":"2026-08-28T13:30:26.316161Z","last_seen":"2026-08-28T13:34:54.927726Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g7i76i7fal.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"38976477438d811a574f5e89fd05ad08","sha1":"d9db8f866176c4283ef0ce333a3ab30ab9b0cdee","sha256":"75e74daad04eaa1aeaf99ec62bdbb466bd9a1e6be0a876a4cce3222ca2b3f983","sha512":"7a78d9879cf3a5b054c2c5b483e1bcedfa2f87adf4e4faa8fc8cfb76e88c2138d9c04ccc5200a980885c66c0f136a6641d3fb4b0eaca03bb30cabfe89093732a","ssdeep":"","tlshash":"cf01d3d926f015188029179dc03642077259493783cd0eb1f17c8a39abb7cd6c55cbc7","size":659,"data":"","first_seen":"2026-08-28T13:30:26.568588Z","last_seen":"2026-08-28T13:34:54.668819Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fomxmu0ozz.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c6e7a73038e74d7b04cfa7edaea2010d","sha1":"96610092a95673e15dda2034b3fd9ec51314173b","sha256":"bd5f516ac02b3b6ff0286679d8dc593b36afc7ecf5dab13dd1451bef11ed20ee","sha512":"aff3d6088f43ea6787d2b36d2587fda0ea586163aa63b74e027f328e7fd77a510322165d8d4a2034f5aae1cb177d606dde2ef3a14e9e3901ae7d279082048f2c","ssdeep":"","tlshash":"9701af8dab306a79d02d17edd02b10025210487f635d0aa2c17c4b3a37365c2e659f4b","size":850,"data":"","first_seen":"2026-08-28T13:30:26.407428Z","last_seen":"2026-08-28T13:34:54.845059Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.n10wlbmc1t.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"131c8d8d7c1f5038edfa3296f99fc258","sha1":"13c7ed1061bc9c3f70ed3b13dd4a44d960beac79","sha256":"47bbae2cc93172335a86b28f51e7ab3c8f20f0e2ec994a8ffa66a2185a0186e3","sha512":"45d174f0b53f7c57f7aa835bc7ab1a97c8efd9e7e3b20e7e2932b6ed3be6fe2fe7848d0d30ae91f4387e6e297f135336270cdaf7910452ec376079805d3842e4","ssdeep":"","tlshash":"c911bdc4b6e0e459975553f9c0bf1516b15805338bcd1bb0e07989747e3609ac215fda","size":928,"data":"","first_seen":"2026-08-28T13:30:26.692406Z","last_seen":"2026-08-28T13:34:54.854229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cj5r3010b6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"5056a21ee034a3c95f0639ae86443cc1","sha1":"91ec4bf0a09d5303647b5b6722e57e4d3b8fb027","sha256":"293ff0f77bbb3e9c3d7a61b85294d31ddf0e5ab58b8a47ce39e7963863d14eb7","sha512":"b041be916f2d0e05166e68db49a12cb6520d358d71af063f9cac218f3534ad7f453e8f8c2ecf9264fd118a7c7b027c043c21206baeafa572de7f9a87f75bccb2","ssdeep":"","tlshash":"8f01ced126e98b166079627ef0273353b10408b31b4c7573b83f69b5e9146834b507e3","size":806,"data":"","first_seen":"2026-08-28T13:30:26.649727Z","last_seen":"2026-08-28T13:34:54.877037Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gdohygj6s0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d9925964a17ea562184912863616cd9d","sha1":"270c00342792ee054d2f294a0bf116a9e1726522","sha256":"287b04ce3e58aba8de560942e84631866fa8b31d9b5d97ba009b4bf332921d90","sha512":"2f52ba50cf2fbe83f9842eddfe7e34540a1729ed99a115023c9344ec08afddf3e7f8eed2ed6b82c82592c953f5359ed7085942f84c2e85b49ee4cf5212a37e6b","ssdeep":"","tlshash":"2941f0c9b2d9bc62895723a5403e4263f32d1df21b9c0164d5b82cfb3d61dc58267b92","size":2174,"data":"","first_seen":"2026-08-28T13:30:26.636246Z","last_seen":"2026-08-28T13:34:54.945814Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6HJ4YYRYDQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1eb6391117af089b3afd1e3479ec757d","sha1":"4e2aa7da6316f72fc5bce51985d5827ed6b76499","sha256":"9869ebc10177c91e73f5b6066e72dac332b82f4a162e246a97cea7c50364677a","sha512":"fb2f1b8b07162a4fb7f4ddb6ba689a96d6321ab8b95def114c609fed785708c465555143ce583c3759bddd71aa81dfb48d350c35540ea00d22546d059e12eeac","ssdeep":"6144:rBsK6NcAu4706mInkRDuccUQ/xEkY3UchxEvO/iQcVk5P0jSHA:r+i1BPIUHxEYiQcAM2HA","tlshash":"26b4f7ce73c674229396f178903f018ba57b29a2b45cc89af289dce42e3455a4177f7c","size":516772,"data":"","first_seen":"2026-08-28T13:30:26.512591Z","last_seen":"2026-08-28T13:34:54.683894Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gevdbmkx2v.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c5a259bcf0200e70f59184ba39bc2318","sha1":"9d9956c098d1722746b6b37aa27e52930d758646","sha256":"3df729e0f2ac8dfe293e71bdaca61410f6c802e8b0f40b0eae008264787ddaca","sha512":"c63109d28657842996b40fd9751a3a4ebe39d4ee9d36fea8236ddff4992fa5af91b2d9ad631fc614f13b1ffdc73eda05d85264cfc639b990c3cd3d97b2e7e42e","ssdeep":"","tlshash":"32f0e5d187f00676a05c2bbcd13b15076680543b47dd8bb1f2394b392a656ce8999a87","size":448,"data":"","first_seen":"2026-08-28T13:30:26.185479Z","last_seen":"2026-08-28T13:34:54.85056Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.f4x87szd6k.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"336616ec4492ce44300034c7f9e983d1","sha1":"35af8c8cb5ee22e0ec34ec988057d8354d424003","sha256":"460489da532b9b993335896f95c2981e1f9c318d555cd9d694e4e30c160e45a6","sha512":"c7512bff3556a95ee033b406c1e23f4a99ab185a3a2f2e0f6b20a6b6a8e6c2c4c4a20a7148b50a08c83a995fb5d7f3c1337c7444b9139aa57cbc27f2aed23b9e","ssdeep":"384:8R2zxe4q5Dh2bPRFMg1nEiF0K2HBKzVSJPs73:80zsthjiNeYSBsj","tlshash":"34c21b31f064f6fa46e6b5fce52f5101b2392555e790c190f0ffa9a003e5882b63eb69","size":26365,"data":"","first_seen":"2026-08-28T13:30:26.37221Z","last_seen":"2026-08-28T13:34:54.924529Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i45i6oxuyg.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"5f88bbd89293c3866b6572dc3f5f3d44","sha1":"412b652b2e46dcd9f9e2f404bdf7314b0a12c7b4","sha256":"7e9c06747c5146ff538b446c2ef46d1ed5d75becb7fb078c289271766d3b19b7","sha512":"20952b2335f4603c00c36b50ecc15a809daed609cdb3fa071c00bd438e5bbcc853f6877bf25644a6b2433c93fbd6c23b6fd52d155f844be9e2aa0fe60981be50","ssdeep":"","tlshash":"6e01b8846ab065b1041712ebd06a0813a3a8193307880e70e27d1d3aaf36dca822e783","size":744,"data":"","first_seen":"2026-08-28T13:30:26.287853Z","last_seen":"2026-08-28T13:34:55.00031Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i7xfo1k0uz.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fa04db7283614de1b4712c6d28828a37","sha1":"208e321b493253e595c7ef9df84da2d76c3caf98","sha256":"f220db342bb8480e0e04bf743ea04a81346dd4d8629eacf9a566b2a2c8866c06","sha512":"8465ed7497b3d4afa5d8124ade86f98a5338889ec888c333327c4b5ef51fbfa11f663ef47a36e2ee378c59a1f492dd542f5cbd9f78bdfb1d41453b93e9f7ab4f","ssdeep":"","tlshash":"4d71a9e6f160e634905b46ff812e551137253a3da2de4a90d37c8d1d2f31845ea2abcb","size":3490,"data":"","first_seen":"2026-08-28T13:30:26.669712Z","last_seen":"2026-08-28T13:34:54.866982Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.enyyfsxihi.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fa9ececea356ce4b069ae9189375d461","sha1":"eddc83df61b66001677f661898ec083122472702","sha256":"9557fed572e60c786c365930d643d89c2a37c7359895ab7c94683d30e795e660","sha512":"ffb2de1f076ecfd490b60a74ec0b9e4b96a154ebb5a6d70ddec7854f4bbb11d34f3d784595a69018e37dd257afc5921748422836d3790feb810ce7320eed6921","ssdeep":"96:z1i9tk9s8wei7R0WMPM3BiQBlDeFZ0/dpKzjOORclYxakBPTZCIff:Ri9tk6PF4+oQBlDev01pKzKOGlqakBPR","tlshash":"e191a64175b494f1819c37f5f4ad1c0247a5a224b9d680c6b9f94ef78bc2cc4d928e32","size":4377,"data":"","first_seen":"2026-08-28T13:30:26.166755Z","last_seen":"2026-08-28T13:34:54.84015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i5mkdzg0xm.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a63de4ea537e195e85c88ac3c18d3cdf","sha1":"804b77cf4671e4a853ab1b4f487c5b86077857ba","sha256":"215e7a58b0c81627ff5052ffa01d92df563379b37ffc3cf4bc72ccef3d0e02e0","sha512":"7a169e5239ccb44fe63b4193bf4ab8ce037cac0cb0682c7b3a31bddfcf7aa6973f19c06455ab59184978b5075f182211a3bf4beba0aef5ef65a4c8e0adc73d5e","ssdeep":"192:pgx6XHckjPjUeBIGWZeBLHVvpREYFHzLsvKTUk44R0RuLz2:U6XHckYCneYF3sO44ni","tlshash":"4132a8ca35b0b028177543f292718493e3ee1154728db0e0a69c92ef2add855497bf7e","size":10988,"data":"","first_seen":"2026-08-28T13:30:26.479515Z","last_seen":"2026-08-28T13:34:54.822099Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ohk0xgtq8l.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"41fb39a8d938c8b4433d0d8a9bc21aa6","sha1":"e16cf982141e97eee094d581b456947234e94afd","sha256":"02472a46238953c4d93b5dad7de8770f3e9920f3feff5e6ff5902f8c5990ed25","sha512":"724a27c1053b76fbfcca459744e73c8222663409a441d6bb4763889bac9063b89d2e3ef57b45a6ec7d865050480a9857f82069384aaafa9b611e05af7454cbaf","ssdeep":"1536:iSshSg5D8mB4xsv3fOCptEk09iU4np2a3GjD:iSsP5mxsnjtEk0h4p20i","tlshash":"6a6370cdb2d2f0a143e7a1b6802f110bf33a7a55184c8168f666e4d57c7845e92bbe3d","size":70514,"data":"","first_seen":"2026-08-28T13:30:26.182671Z","last_seen":"2026-08-28T13:34:54.662561Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cnvroxnuyh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c11cc276399d9ffd609ca9a044607d10","sha1":"59e847edb0c671977a178e27bf2c8254c97896be","sha256":"ea4e113319c8f0d7798891e8290c3f6a227edcb9a2e464b7ee0c5671a54fb718","sha512":"d69f3cea18fbf2311f894cd7a6504fdfec81453857a5c73ec8d37acf0fafa5af8804981fa75a90a847d296c2cad2d5d44d712f3cd4b9e3e48d8c944bdc6c4da3","ssdeep":"","tlshash":"514133c271e0a265e15505fd813b842ab321393e718e12b0e1bd4c593e712a9eb27f8a","size":1886,"data":"","first_seen":"2026-08-28T13:30:26.59156Z","last_seen":"2026-08-28T13:34:54.802902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mlkelnio3m.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b6718e9cfb2b09b5c287a91fb89758fa","sha1":"5d5b0308775b947dd617dbf05d2f7e3c4af9dd0a","sha256":"6a983c55bb00531db0f3de91f2b72903786b689646b2c1127543321623c04865","sha512":"ba14f1d06c0d7f59162772925ab2a3dceebbef77e7dccac27d31ed0e022bcdad59e541d731ec473a815233cbfae5ccdac404911a7e7c7b712b8f5033823c7882","ssdeep":"96:oaUkHK9zGU5qnPlL86FAsNyGCpIGeheom550vhZU0dp6tGduecrRrpcj/FitnM6j:lHK9zGqUL86FAEyGCeee9dpDduF9pcjQ","tlshash":"51b194ce71f0999a111a21cfe03a4906ffdb18bec6183dc1d26cc5f9b9971a0984da77","size":5429,"data":"","first_seen":"2026-08-28T13:30:26.593223Z","last_seen":"2026-08-28T13:34:54.948352Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.inwrxkvwmy.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"db45987b16c8543c998d35da9008d0c3","sha1":"f409cf3bc7057825241a0f46bfad549f69eb7bb5","sha256":"1ccb74fa9bc86dc36f94c559592ca869302441d065ca7154b5a16878c4badced","sha512":"bcd6a4213019192ce8d0e453c4dddee9935151a7f3d2240f5c0c0b099f4130b809e552c04dbbadb5973bf0a375970099e4e2de52f9a8751c6116543bc3d9948b","ssdeep":"768:kqYGYS1Nnm6b1NKhMdbKu5gbYse4Qmz5DfruhLAGsqFlbXnAdZdVItx75Q:kqDYS1Nnm6b1NKhMQggbYse4n9fruh0v","tlshash":"e60309cc7591f0f0867b52fa403f521eb3372a24614e9510a226d9dd3c74daad23be6e","size":39040,"data":"","first_seen":"2026-08-28T13:30:26.689668Z","last_seen":"2026-08-28T13:34:54.961215Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g2ksfk9dx2.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"83d07f6ea72bbb5347616e9b0e3b177a","sha1":"a4b26e49e99d7426e3c542d7d14e8eb8b9cd9fb8","sha256":"5eab12aac41db8e20086e6196bcb5f25d9296c7a7263914ebb1c90cce99993ba","sha512":"b9ce34643ab0697f917820d7d59c42dd9bba9954faef12fd873fc8e48e0d700b3b2e12970886a80bee8f8933a8f24ef63514d4c465ba61757e364a4e8f763f0f","ssdeep":"","tlshash":"36f09e9147f02a62812c27fdd02f55036755847b478d5b71e13c0d3a6779adace68e83","size":527,"data":"","first_seen":"2026-08-28T13:30:26.436601Z","last_seen":"2026-08-28T13:34:54.898003Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.l4gq4st3dc.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e76940dc64102392b335d756910958dd","sha1":"04fe22e0bcb63258788080735cae151cf281c1f3","sha256":"e94ca6753c872d2f7f8b91b1145d005a92b03672cdc1360125263a803d39d892","sha512":"d7b3f05732f68008efaae30ef0f484f7a3da822916aed74b3c09d652a2b89df45a8b7ffa5da254e4e6915ad5e540fa30428a1e961ddd8524632073ea7034165a","ssdeep":"","tlshash":"d0f07d4a0bb09725a11417ae81ad11835ff8807387fc0eb2a239473961958cbc5587ab","size":635,"data":"","first_seen":"2026-08-28T13:30:26.680505Z","last_seen":"2026-08-28T13:34:54.939374Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.f5mm3lji7a.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a69d12b63a8431730c4ef89752db799d","sha1":"7d5adf53ac90259fd4628a35287a72af3eb08c7d","sha256":"65549de23c06a2279269110d87e9d31d3b49271e948b0c32e918832c24d1ba5d","sha512":"f200a9899765b8c6d6c71661bb8ce894a50d05aa0fc88f19c9b4785717aa9ecdd869d8e42e4d2672a9b81a0ff28b0d8b43a2c00740bb6c0fe24f2f9f8a627900","ssdeep":"","tlshash":"bc3153d223f0a232422d1bddf1b59313f7a01873611d4a60902c4c76aa5aecad1a8f8b","size":1496,"data":"","first_seen":"2026-08-28T13:30:26.717731Z","last_seen":"2026-08-28T13:34:54.955382Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g732ojnkk7.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"60bb69623207d124238816d38eddc560","sha1":"2da4978c0fb3cfa287743c2ca3cad791f6594afb","sha256":"5f5947fc600ad0d166ac3c2e698eaa834add7c7ab813128de87df8ce7f188193","sha512":"ae6f075d0e04273a006ba568c3d462918ab671edb0db8e98bb988b5025719ca49fdff297eb40c9af063a0623de6f7a624a3b5831e9b4735d81a4266542c6e04c","ssdeep":"","tlshash":"e12114d9abe04299c24a1b7ce136652a765434ffa75c0b20c1b98f39b1369c1cc4c5db","size":1190,"data":"","first_seen":"2026-08-28T13:30:26.618391Z","last_seen":"2026-08-28T13:34:54.838729Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jhhfrwip1n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4e66637cc2a1c6289330ef54c95a52db","sha1":"c605f41f8972c555faa682a9aa21f186ce9273d9","sha256":"1251a8f5201a3489fcf3a83d3bead80af1aa5027188e1c2d7aed3cbe2ffee83f","sha512":"edeb37d69cc014ea58463ddec2de1e61a824c844d9dc04c173781eaba76eadb63c5a3276c58ea9d4e2ff0f579e05a6ae1aebe9c018db12337efdef7e8679162c","ssdeep":"1536:4JC+6dJ8ZM7zwnCTUliYPLEj1NQVnIWjC:L+U8xnCTUlxLEj1Nzd","tlshash":"28632dc839d2f016876370b5007f048bf23e6fa968aca608d1a0e4ed7db855de577e58","size":71592,"data":"","first_seen":"2026-08-28T13:30:26.320409Z","last_seen":"2026-08-28T13:34:55.003968Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.odzqybxv3z.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3818253c3dcdc35a4297d5f78c249713","sha1":"eff22a8350890f6c2d851331ff0063eccf315ca3","sha256":"e1862b222cd5a8995c8f9b8f6e0362e7cf5b3ecdf51a091334d424aef44b5827","sha512":"e750e67d513f8584db402f59394a724485fe9a10b34f823df98907e3b7e279bb59dfed83a00095b6edf58933d70d1acf977b26437992793e58d95e2fd1d6183f","ssdeep":"","tlshash":"f671b492b272947302cda6dee006406257dd2976e71b45adf87c8ee706b9c8cc03967b","size":3588,"data":"","first_seen":"2026-08-28T13:30:26.274746Z","last_seen":"2026-08-28T13:34:54.869899Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.e8h1fjozuh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0265a955cfb62f223146cf743e12ab90","sha1":"65a4529d9428071602e5c61b50f678d19cf99e2f","sha256":"9cb541b97514c99e51306f7cc17b3b321a9a0226430a16ce6f5a61b7a40615ec","sha512":"33593442da633afee55377d05e40c6cb4ea1856792cc8a3116ed82a5959bfde83a52348699e9f3b3460673896edd47265ac98a5d0474c26e0c69ae21457f8906","ssdeep":"","tlshash":"ad3156d554ab907c519dd7f6d4255302232403f31b6886e4feb84db267728c3c62aae6","size":1739,"data":"","first_seen":"2026-08-28T13:30:26.493191Z","last_seen":"2026-08-28T13:34:54.865752Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lib723q6dm.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"403eb2de88d44dceb7ac31ef22c1e5f4","sha1":"707d2e8d3b12e2e8c75498f3099b895a1c0fab75","sha256":"09522a164d0847d637cfa7305eff3511c39c0ea9ed0d841bbe0b7f08ac1874ee","sha512":"c1a5ad3e09f80b4fd0b8b8c0e933e9c7e3038b3667f1be581ab672d41e47f8b7fb206c1d57d033a57b779025fa7b2976420453ec33626e6e52db1198612797ae","ssdeep":"192:zAjpYea5UAY1n/nsUEORCCoOf9Y/CZnlDevHrItupanhMlVuVaVExTqxvd:oCv5vY1n/n9EyCw9Y/wlZYV/6xTqX","tlshash":"2042d880f02a58ba8049e1f8a4540e221339a6d5bc1585bdfd6f0df7975ec0cf76ae39","size":12094,"data":"","first_seen":"2026-08-28T13:30:26.32865Z","last_seen":"2026-08-28T13:34:54.70466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fzyrdbf1ul.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6ae66d9616e4fa0cf8f467eb6d2dd719","sha1":"1d141ff3b1de8bcb19cb115550e8cee5fa9ab84b","sha256":"926d8e539cc4dda9397c4747983c93ca53fba83d04a8f1ce9fe3ca8cc695a79a","sha512":"db2ae368af538aad4853e9a24c8b2af96c6d47f289c3e30ac3696880c7e2ccdb2908c484c43c6191afe35841161dc831b01bc4f82c64731ccf69d330cce6f1a4","ssdeep":"96:oHzWznCyi6PlqyKeheom550vtZUhdp6tGQUTuQ/kOqfVbkttSevn:uzWznCy5qyyqAdpDQKuQ/5CVbkbSwn","tlshash":"ad81a75033f894e61219829ee03fd906fba865bed62c8fd0931cc5ec7868544d91a963","size":4191,"data":"","first_seen":"2026-08-28T13:30:26.644429Z","last_seen":"2026-08-28T13:34:54.68803Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o0ou3fxp78.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e62c7826b7baa63317a5179c3368c26c","sha1":"d67e4a83bc2f7ffa47f872b667d99fb657624d9e","sha256":"ba27491c328def52e6d49edb30a7633b22f2f0f13da208467deab0a36106fe9d","sha512":"b1a6b22a12979e0928f09c5a0b8658cbcd66d1b8b3a51ed14d1598171034fab81d833c9e066725da6c27da96e9d2dc3c7fbcadfe868af5eab3946451db5c5fcc","ssdeep":"","tlshash":"3a11ccacaba0e734917e1b7cc0b7480373f7803347789660472507aa946368a84992b6","size":880,"data":"","first_seen":"2026-08-28T13:30:26.64605Z","last_seen":"2026-08-28T13:34:55.026918Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.d4zwzm6eaj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ad33dca1a9a936b91bb87d98b8ab1685","sha1":"7ceed9fd733c1d7855887cc541383582586d9902","sha256":"0859baa834d828f57758b082c9129da6d7772b9bbcd69a464c7028ca237b4d88","sha512":"6b7bb0fde370c90f43e18acdc46ccf15aa34d7b0b4d98a3e2c08ea8aec9b291fb48096f9aa68f3c757bd8aaed995720f89c774659b1024e7107d37564fc9e0d8","ssdeep":"","tlshash":"c54128f5d7f00298520a57fcd95910136ab834fb57790e50027c8a3cb2595c0ec1c5a5","size":1887,"data":"","first_seen":"2026-08-28T13:30:26.279973Z","last_seen":"2026-08-28T13:34:54.930849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.pfgwroww07.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fab9bee59c405fb9b6a43be2c2a30ced","sha1":"1ae15da5269fb9a36669754ab91c8f226cb53422","sha256":"0c306e1fd8c9bbdefcad9ceac68be954b404644232b77241f52e644af8a5f191","sha512":"bfeccb32c71fa690f53595f49abc1aa9f0e1186e2f59a12c368eeb5af74f902fcf91f65f8c6aaa7d015ddc22290bcab0137690aebe2c774f93d6c0cc23b8edf1","ssdeep":"","tlshash":"484152c631d0e875c14905edc93bc02ab5351a3e328e5aa091ad4c2d2e7269ac822b9b","size":1896,"data":"","first_seen":"2026-08-28T13:30:26.175126Z","last_seen":"2026-08-28T13:34:54.646785Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.n4vlkd4wwe.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ea6fcc04e38661c4fca2c55e28cb1e58","sha1":"d14f055e25d5ded65ffdf590d7dbee65c849e241","sha256":"ed4d24a7e148bbf6288705417b6d75275c47649658c39b7a850527999cf4cf65","sha512":"a852d0530a4fc45cb4cdc3f193f671459097dfeb7d06374ad9956dc44c756a16bc1287ec086325973354760c262fe0a8da158c80636226dcdf3acd1fd7d7a48d","ssdeep":"192:N0rnkJeDu3sK+6WMYn795ccLmUsXkP86oy5VycY7q2o3995ELukc3Tg:2kE3F9q3kD572C5HkZ","tlshash":"49f1b80ba381c43b47e681ecd5a34052662d14913b554a6e3cbcdcd6dd22e48fa6eaf1","size":7767,"data":"","first_seen":"2026-08-28T13:30:26.252851Z","last_seen":"2026-08-28T13:34:55.02955Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fnb54a62dx.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"92359926dd5410fbc34d6c9053648dde","sha1":"995bcc8e6350d489ea99b1775f6787bc0bb03701","sha256":"5dfbaa5f4feddc2dd9cad7abcdd5030b3a4e8ff44efb284f1bfe7e7986d81457","sha512":"8ad199cfc15793f6280add2d469ba3f2fd151e3a2cf78daed8154767d77d1b14897df759332a41a78c9161159240e87b1afde233357a3b46e3fce1eb23fc670c","ssdeep":"","tlshash":"4ff0ac869bb056e6852a16ecd06b60033a6a187b834c0bb2d13d09383636a9e424a6c3","size":571,"data":"","first_seen":"2026-08-28T13:30:26.67774Z","last_seen":"2026-08-28T13:34:54.975744Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gw3dphk24n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c85d21a3faa01c581ae12d008e2f9233","sha1":"4247298012e31cb6371c0c507c80d6b22696c4d6","sha256":"bfeb9e78127a6518f118751672376d1ee689a1c26b04ad90e976a35ef050c365","sha512":"0175f16344f049b3f743f1f41d0f3b8a43990d42e87935113c67fad7fb35ea9c16cdf84a2a28813bbd685a7a6e63f6a5bcf88adca564eae9a5f9fe26c66f6bfb","ssdeep":"","tlshash":"311135e596b007aa411d07a9c86925075f621cbf538c8f34d16c0c797b2d6c6499ca47","size":1027,"data":"","first_seen":"2026-08-28T13:30:26.611245Z","last_seen":"2026-08-28T13:34:54.846563Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.czkx6zts7p.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6e3e1ab90b093367f9c4abf3f6653ab7","sha1":"37cb22da3f424fcf9d9a51e9fd8f3bc21a6bae39","sha256":"d4cc2083f5cee99710581bdc9ad6ad04acd0fd8d20abcdca33ea8efa536ccd0c","sha512":"9a96b4bcd6702621bdd9db53bf240a52f2a9c16102dd2b7b594d05df475fd80272ab7f76ead0e74f3126b914b71269ec8c02bddc05fe079d78516f675c4fa246","ssdeep":"","tlshash":"3ef0b48847b04d56c01913fdd267050267a4443793ed4ff2e2784b297a65ed581987e7","size":505,"data":"","first_seen":"2026-08-28T13:30:26.509295Z","last_seen":"2026-08-28T13:34:54.882784Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nm4tg4xvyf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"be95fe105d04a5d3e2d367981422ce97","sha1":"afb6412ac734d28c57b701c435c52b838a33d7e8","sha256":"6e5ca04530259cc622b7c72240a4e211545f97ac74b6f76260a0ce90be87f891","sha512":"43b4d33d424eaaa96a2bb94b5bc4d01e52d68d85fa523a467b2f77317d789280a46c2a1bff402352e554d122717aade5b6225f73e9a06663d96edb0bc165768a","ssdeep":"","tlshash":"16f0a7c647b006d9952923ecc02e5603e655483b47ec5bb1a2794a3a39aaed981486c7","size":452,"data":"","first_seen":"2026-08-28T13:30:26.240426Z","last_seen":"2026-08-28T13:34:54.711387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nr5pj74ghy.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"78362e8246bfb270fecd05c03118395c","sha1":"834e10c5cd9d31f80ac077a95034a4889acf025d","sha256":"8b1217e4fca80aac0c6e5277e4cbba8153daf7333a9189ed7d4b6d27e2647edf","sha512":"44974c1fd57415b2f1ae81338d4586e48eb9e0acfa880bc7d5dbe11c11d3e9f6693ac54c8d6702f370d5d0bcb5d01d313b24bd9debd7190fb52e7ed5c3395480","ssdeep":"192:gnT+AyaMehiqYdCCLrSSo9D62XJeSnsiGrt89bnynFWXs9Vl:gZyOfIX2XJeSnsiG2nKgcjl","tlshash":"fc22c71f4bb28d397281837e898a50002bf5dc13daf1da9b1649438dd0d6e9290d8b7e","size":10222,"data":"","first_seen":"2026-08-28T13:30:26.674785Z","last_seen":"2026-08-28T13:34:54.830049Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.j8v47mrspv.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4e0c3f5e7b4608a78f3d2b77b160cb70","sha1":"bae4ab1df43550bc984e86f82a99843e26db467a","sha256":"d2f37468210334c9d8a48cc96aa0989a1d2a7dd1be509a817946a42b4bbed968","sha512":"58ce0458d6634dd42e33cf1b2fe5fc8e2face9e794575e8dc906983a1afd3c0c91b4b1ccdfddf3379078dcdeaf68913aeb225f73edd82e65468b4397729079bb","ssdeep":"3072:p/eByOPDkr6w6lFMRZGTS0Z6cjUb3szTLe:sByo4rXhR8mO6N3sHS","tlshash":"fec3c6d971d2b03207e716a5903b0106f7395e90300bc5a5f63ddade2eba44aa277f2d","size":124805,"data":"","first_seen":"2026-08-28T13:30:26.563177Z","last_seen":"2026-08-28T13:34:54.706827Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iuoc5nhm7h.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c999d553664078829bd0fbf3e67ed03e","sha1":"325176a182482dc750eb108a4f676e38b0f6a4d7","sha256":"12100c9974b1f61755409648c77967d2f3154746946f30583ca5cadd735d839e","sha512":"cf2d46234439f3bab394fbe9519800efa5562dd8e6faf8ff4bf31b8909c225473706b61375e252a13b4c6073c9e1fd2f682d1b3c0662b34542359c593e75f948","ssdeep":"192:haRfCi0hSbcQ9F7kR81xMp7G3mYFLqa4GvpHknn:ha8iKKhMR6Mp7aLq7Nn","tlshash":"06d1b5dcaf70dbf4a48423fae6110489b999acfe57814a75c2ac4d08b1561dcde0dcc3","size":6471,"data":"","first_seen":"2026-08-28T13:30:26.311262Z","last_seen":"2026-08-28T13:34:54.894964Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lrcn6997q5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"5a821ad29b5c53e0d08531cff186558a","sha1":"605aa6da01c30758d24691df527270a1c49c4f21","sha256":"a6c5a0581f505cf31a0355237d6e5439e54eca5901f31801768a4579e6e1d836","sha512":"054fa7835eaf4a34fecab8d112b8e572cc80ede0b12ec923c4a257e675fd7ad4fbc1ea37aaba94cefbbbf3c48a35e5002d66d90cdf444cd141ffc5ff15f6740c","ssdeep":"768:ipu2geeijHrwDOlyM1jF+/llRyXhP4IMA3Tsz5MYqsZgtEOD3G55jnt8y6wR54tc:i8krwDUv+/iwgsZA5TQ","tlshash":"8603e7dab381b47247fa59f2d07f8103e2362562384d85e4f29d94ea2c37019d1a6f3e","size":39154,"data":"","first_seen":"2026-08-28T13:30:26.631685Z","last_seen":"2026-08-28T13:34:54.907175Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.e0130zcaa0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3f190e9672bd92a86addc2708f20d7f5","sha1":"02e45aa987e7cac4b1870aedc40e181353debde5","sha256":"045b01388e379131a080f77d04b99851658a1a7c1189dceb7092f61cd11c07e0","sha512":"642b7ad4cd59d5b0f0c79d2291f1f7b1b006f427ff2f89644d891e450b7eb29aa13e9d4bd0954009a8c077d8c84b8e92c94383d6079f6c67f1872d27762312ca","ssdeep":"","tlshash":"8651dac02192453b82b50efbf01451855a24583f1ea1f4f2feac8d1be62a847871df9d","size":3077,"data":"","first_seen":"2026-08-28T13:30:26.306378Z","last_seen":"2026-08-28T13:34:55.033488Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lttyv0nzqb.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a57d36bd426df44a06d9d91a2212037b","sha1":"939b4d692cd850b55a625c7cf9a4fa3a468c4d2f","sha256":"56cbfd5d258ef222ad3b8a501f30cfdcb9c5c00b98c87c2062ecd31088eda787","sha512":"ffaffcf0d358c45ee57ac986b12621c5b543ea3e7a514f0c02692e597bd82b6055096c8ecadb676808f4324ef602d01e9632441e2fa081b0f91cc0113745724e","ssdeep":"","tlshash":"e6f0a28aa7f0a551c26b137cc46b1043b558563b579c8a71e138c6387e75a8f8619fc3","size":614,"data":"","first_seen":"2026-08-28T13:30:26.693615Z","last_seen":"2026-08-28T13:34:54.649388Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hg4l1rawx9.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"89f44737c1b86df93d3ff7cac192c829","sha1":"d8f5ed847b2eb0b9e41dab4ff91bf3aa2f1d440b","sha256":"cd28031d831edbb3e381f0efbf842e1d360fe9cfe43b4a06221c72d72b9576f6","sha512":"a2871dccc11691d870d179a26c5d758082158a9d649995c19e1c3159c1c5523b120d688fee426a11ca45128bddc3c6bd8dda12a7738184320d1b92133c1d686b","ssdeep":"","tlshash":"9c1112c512f63562676f2629c17f8103b16c2433a78c47a0e23ace392aa99d1d251b97","size":858,"data":"","first_seen":"2026-08-28T13:30:26.266132Z","last_seen":"2026-08-28T13:34:54.994451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nhwiyuxg8z.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2d436d1cb591acc44c5f4b8908e66b62","sha1":"c75736215b3a7657d1f8d069d144639ecd22b162","sha256":"b041112e9ca2c8f05ee53431f24ab0ae9326f2143e259459cc5000f1eb672178","sha512":"995b2935cab96c64fbaa0f93d9af59201d90f39ce7b76cc07a6e6529089e9622e00e486fe41ca5744cdfa1c9097e3b7c2e7fdbff0545d62f96a4461472d37fc7","ssdeep":"6144:wGhF8L8A3o9KphpbXkbrH0wK53K5D+xz8hiisEAnnmjKTByipO/zGdq+Mxvs:bFzA3gKphpjsH0F53K5D+esPOZA","tlshash":"b3942a2aa1057f7544632269f94e2a9ae77c2184c3f0c4335dad885813b29e7d2bf7dc","size":437650,"data":"","first_seen":"2026-08-28T13:30:26.639438Z","last_seen":"2026-08-28T13:34:54.887814Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.n81y7cbb1h.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"003d2f38efb05d94c8154011592508bb","sha1":"d54ea2795a3c47eeee0a517b48c8e63e6e1421c3","sha256":"ad36125ec317bc4cb361efb8f2db6569adedcd20f7bc2826d8017c33dc22ad64","sha512":"adcfbb10602941e768f1752c911d5b0621e970fb76c750d5bf81fc81b84970edb2c53eae5f123fb8160c8be5a172944596a3b1a1e38cfa74b57d74cedd1245f8","ssdeep":"","tlshash":"bb6186a5f1f0d2ba9128121ec42b1109f7801d7dcb38ad62c75adfdcf62814cc5c8b2a","size":3390,"data":"","first_seen":"2026-08-28T13:30:26.665729Z","last_seen":"2026-08-28T13:34:54.944531Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cbbrvhzsl5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0ebbc28a3238620ba6d64a6e4ec6b531","sha1":"d2bae579d9401dcfb52ffeafa3a0f4306425a6cb","sha256":"620e0e8b328b9153fcfdad854a342c753082535585a679f03ae1192613fd6c23","sha512":"18c4970a013e70d8fdf5bc7442870e7707fe4f6b266cad4b9b21c1539a77fd56f4e10eb634dc81dddbad858c7b4ab0d63bbe7d96179f19db2a310aeb68f472ea","ssdeep":"768:UQlDYN1NnmjbjNjteexAB4emhs1f0CxMKm87FgSUkKE7v8ZQxIdNB3Jao2UR:UEYN1NnmjbjNjte5lmhIf0CxMS7FgSUN","tlshash":"c30309cc7591f0b096bb52fa803f420eb3372a64614d9510b125dadd3c74e9ad23be6e","size":39160,"data":"","first_seen":"2026-08-28T13:30:26.254907Z","last_seen":"2026-08-28T13:34:54.98697Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k8b80frar2.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4d14ca1c9f23556f218813fa288fb261","sha1":"10ce7bacbc8c92783cb326c29078c887cdecf628","sha256":"58e5c563aebd9082146b1c33fb1df768d803711b14f24337982f66fdd4541e6a","sha512":"4eed008da875637721907f71684fbb975021f48e4baebbbeaff7c21032350024cd5afa351bf42142775a9544542c5865a2c6311e98ee501ffb55b172a7dd4d9b","ssdeep":"","tlshash":"291144d107f006a9842c53ede926080377b114bf43890aa082bc8b3c76ba5d4ce1c9c3","size":920,"data":"","first_seen":"2026-08-28T13:30:26.555005Z","last_seen":"2026-08-28T13:34:54.767395Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.cq6l8031i4.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d22a842e933945ada044a9f6c4fb45ca","sha1":"4f7080c4046c725e32bf8eea76f05eb9922f73d9","sha256":"a90a0f7f9f4efb99f6e294405c1c060d67745d12247f91d402b44311e48b4f6c","sha512":"d5d3c169d1e4c5733155a8472d76410d4b294c9a3b08370274bf290b3cfeedce7f84686c98017de7516efecd03d4ff1d75bc209a22aa84144cb61d848bd1e417","ssdeep":"96:OKXk8Lr4HMD/fotR0f5hxN5fMwPn0eC/9sddzyNrfWi:5kS0+nRhJMwPn2OcrfWi","tlshash":"2fa1fc3be010d9b7a8a59dffe41ad0362137156b93d483b1d0ef8a3107251b6e21ab4b","size":4845,"data":"","first_seen":"2026-08-28T13:30:26.465218Z","last_seen":"2026-08-28T13:34:54.847995Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.doypyfa7i4.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"40d643cb6cbcb38cd4f4e6d7d7e0ba2a","sha1":"fd9155e63ea77df8c4b2f632a06abe5ce481c815","sha256":"caaccb0ae2e2a2a2654a3c9bd8fc3d55d56bdaab42457db9e5a0353e3e6163cf","sha512":"b8c60ece7321498fbbdd4babf92c01b89f00472bc197dce7690eac0f2b926c2e804e550eba59cef5ec16c383f4bba4652462c301bfe5a047c986c2f06266a089","ssdeep":"","tlshash":"f9f0598947f02a2a852917fcc12b14037694443f57cd5b72e27c493967a6ad68a18ec7","size":527,"data":"","first_seen":"2026-08-28T13:30:26.545087Z","last_seen":"2026-08-28T13:34:54.890267Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lqj9c088wd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7dbb1d5150384e9b8f1f5c14965046c3","sha1":"9ce357ec0f7268c2a4d217065209ad67bef4d0bd","sha256":"c0c107e36b3d6cb8bf3af91a81b7b8eea20f436a41b2f59cae16d16e4fa866a6","sha512":"6aefc0f2994b6def2f6fcc436e3f7ed86caab2a064867046c6ace22361378bc7258239768fc35733021462ba51e5204ad1dad838950a4e3577d5f53748ef3015","ssdeep":"384:kkAY8Jiuz8pyp+zKCjlEc/T25OeIFrvTbs1NURit:kpvz8pyp+zKclEc/TXFr7bs1NUU","tlshash":"8c52748af5f0ad6e731f658ef05a3900efc66e6dc014bd80e17dc8edeec11964459a22","size":14119,"data":"","first_seen":"2026-08-28T13:30:26.495881Z","last_seen":"2026-08-28T13:34:54.880812Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k6iry2k74w.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"5d3533c3eed4104a04beb681346ea153","sha1":"805033cf10e7ba4086c4220fb3178ca09f0656c5","sha256":"721872c0883c6268018f6882812ed376c6855ad2f6bb95d57f18a7806b32541e","sha512":"8519bd106c3c9e44ac6d9c007c931674988736b1ad460181424d9f70ec72ca257d68ac6d05e0b588540bf6e622924d579279a91ba126066a4e1f61c36e35eeac","ssdeep":"","tlshash":"9511c245a924a7bad02e5afdd12a5013725504bbc79c07e1e1bd59301776187e10ab8b","size":1007,"data":"","first_seen":"2026-08-28T13:30:26.410034Z","last_seen":"2026-08-28T13:34:54.707812Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fl4amx53sw.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3c9a97ce32dc83491524b672143b688a","sha1":"e3967f302b80dfc7aae547a2c3e2feef5f04ed0a","sha256":"c5fcac109a7ce0cbc26db83656ebd71e57e7f0ca06d80981c79c7983f6a0846f","sha512":"8fa7c5ad2e67fef083d84d886b28ee442200e0a33987f92b82e121263313c7141dd917a0b423258a3f8c1b0393751faf0a9720963a9f347e71ecedc722022f54","ssdeep":"","tlshash":"91110499a6f01276d13525fdc13e455332140937278d4660d039563d77f15e78625fc2","size":920,"data":"","first_seen":"2026-08-28T13:30:26.426306Z","last_seen":"2026-08-28T13:34:54.849392Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mmx2yevjgf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b6207bf08fa0cb75bb07cd8a2c1d010d","sha1":"790acee2f155680285f39fa3efa6f68627aa64eb","sha256":"5bcf42c2896e55bae670570849214e926649a7ffc0782eb609a80c16cd582a14","sha512":"7420f0e8874b2713759c818e4d7cb35abe8e7694212feba6deca68c4140a4ac8b8a422aa03af294481114e6bfe4ed65a22b47555975c5eb8f11899ebef22f30e","ssdeep":"","tlshash":"fc2111f977e0b0b2939d36ecc07b0106f2645c623b4d1658e17a8a5b7a309a68259f0b","size":1369,"data":"","first_seen":"2026-08-28T13:30:26.291264Z","last_seen":"2026-08-28T13:34:54.756567Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fyj1z7dmb8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"cf2272d415d59f24943a29f5a78e9dc0","sha1":"fae08297d66399f9f098496b1a019679aa8cd888","sha256":"5d33bada34699f6f43d06ad87703a37f95a42c18e80a94a1e55d2128dfd31643","sha512":"c2de117e52ace028bbf7e7910d1d67a855f80b3a03951036ca6897167dec556d0b5d2ff4689e7df2032b40c8d92a74c6e15f530157fd3122e9be723e76a9f905","ssdeep":"","tlshash":"fff0558197b00d6ac11d23ace12a0203729200378b8d0b79e33c4ebe2661ac5c65ca83","size":448,"data":"","first_seen":"2026-08-28T13:30:26.384136Z","last_seen":"2026-08-28T13:34:54.761374Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hqup59qpwl.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2bcfe9320307394dcc3999b4de5c9fbc","sha1":"17b15a21f2af0dcd872413e16e7600583549ccda","sha256":"0102df2531504dfc0fbe2b456eeb231e6f7764d4be3c87ed980f1b63c60ce52d","sha512":"baa25331fc9462c75e25999e040603a8c431b2631d2278cb87c9c472450d67df8d9b85eae508afeea086ffa6dc0ca9d3ece7b5d83956b143c248a7cd704ae476","ssdeep":"96:o2v2Kw4yGC9rIB00s9K0HVqHFs29qCXwz+TGm1L:ZwIuUD8K0qlF/Xwz+TGm5","tlshash":"9e91c6d162829d3445da659db23ac3206777191a328e5440d0ff8c282f72fd69a7bfc7","size":4283,"data":"","first_seen":"2026-08-28T13:30:26.535182Z","last_seen":"2026-08-28T13:34:54.857119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cvpzxajlre.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"76c1f92a53eea32b96a16a7472ca3cea","sha1":"1d649003c2682da54c79f593ade4a8b8fdac05de","sha256":"c0604b674a9b04c92b7bed73dbb5c34e13e8901d1a36faf3e4eabb84e4810a8f","sha512":"2ca2268f72f7dfb6777c836e70b262f7967bc2e849c3a95f91d58ded363608b221df65ae882afddf9c0e5644e6b4d80ea4c0d9f7cfec45e20abc70714174cc00","ssdeep":"","tlshash":"8bf0acd472f12219916f12bdc13a160333a55c370bce0661d13f453c77a6a578b28bc7","size":563,"data":"","first_seen":"2026-08-28T13:30:26.292337Z","last_seen":"2026-08-28T13:34:54.998591Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.j5h7rpql87.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4d795dde6902bca4df231cb5049b1830","sha1":"89cba0db1b443b33b07fa001386d27a1350537a7","sha256":"ff7e94dd009deaa2b798f997000453216fea2950d41b97691bfbaf16b4b9ed59","sha512":"c8bd47a6ad6196cce1495c2f6af6abecd54f13619773e4df8fe0ce0220574c5ea6bc98868498a353da941e47f02aa72fc7946cbaa0062c98d952cb97d2bcd0e0","ssdeep":"","tlshash":"b2212feb47e001e9145a136eda3b045672b5a9bf178a031050a88839f5f45d0acac9d2","size":1400,"data":"","first_seen":"2026-08-28T13:30:26.458936Z","last_seen":"2026-08-28T13:34:54.818333Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ffdjci8p8c.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c649c2bab156ca7add7d77d0835a6bbc","sha1":"905ad13bf34bb38de67879be6b14bba77b1e91c5","sha256":"c794b9118a5d98dddcde696fce69349453e82944a658c1b9ba076e6e2a84f9ca","sha512":"52e0f18a9201f71814ba0ae8c072f6fb77038c041ad16c33b740687b7c306dbd3e8e3c3046673f689a247eeb197be3959468aa69afdc87948f0ed267759d34a7","ssdeep":"768:T3Q9TWWzaQT/kK6ZhV8VvxpWtzovTXniM+wxRrjLg4H/AIOXd/bVaz29lDgkJkrS:+z7abocwxVLg6/DON/hai9lD1D","tlshash":"e3e2d7c9b2a5f461c2a716a7806f800ae37e3d88250dd650f1bdd8d87c646588737efe","size":34104,"data":"","first_seen":"2026-08-28T13:30:26.474796Z","last_seen":"2026-08-28T13:34:54.798801Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ce6z96n6p1.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"abcef30957069cfe3746fcc51db2e4b0","sha1":"2e190b9d526cbfa218877b828587074bb06663df","sha256":"9529ab1fe5dd16a7d4c1a62cb945167faba89d2c8671a15492bf58a5f0cac7c0","sha512":"dda7efae8bdcc61c586e38643fdcb15e09dad1eb2a914e8a12fa7f7b24c3dbea63daba994d3fbf4cd8fa2d3e5f146226b1be72f24b04e9e7689f0ee41ee03fc1","ssdeep":"","tlshash":"b44152a97c6889ba400d4169dc36d3e3b47600fa674b8510f0be9d7e3e50dc60e9a699","size":2315,"data":"","first_seen":"2026-08-28T13:30:26.472287Z","last_seen":"2026-08-28T13:34:54.710496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.krkwfxsr50.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"493bd03d87090f7615d9604e6679d820","sha1":"8a55c6eba62d900687543aa14093a16c8d7ebf13","sha256":"7fd3eabb96996fdff1ec5e70f69ad2beeed6a837774b03e83882da0fb80de227","sha512":"a6e0f3009ca4ad1370e4bd59d6c2449d372b1f88331e43e946af92b785934afae71f23c7383d9eb86f5505d48c5a1073eed02ff189d43608fcd0feb614cc4380","ssdeep":"192:keR6l1ihVIujpo8aimvuGtESiXYn22WVDHTSEy4IAzn0/OYf/s5x:kiqoDdjF0txdWVDHTShhAzndY2","tlshash":"c232938fb464b0410ea36432417f902fb33929b6288dc5b093b2e8f5a9f519dc527b4f","size":11563,"data":"","first_seen":"2026-08-28T13:30:26.341995Z","last_seen":"2026-08-28T13:34:54.792009Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lrip74bpd6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fa24659ade5fb0d9d018ab36a8d824b4","sha1":"26deceb8b40f4f0a93de9f3fb60eab5fe9b80540","sha256":"61faf2138b0ce366c9da53dbd61dcc33267e8740615173336d394fb6a1608b32","sha512":"31e3b918e0922c4c2440ef5816651c5bb82308f9b5c8778e353d463cb553137924644802f1713106c4fb02d03e2fd34ce472b5b1e9cf8d97b2ea0d6dc026d697","ssdeep":"","tlshash":"83f02b9557b04aa691141bfcd16b0407a699103b07ce0fb1e37c0939377a5e68558b97","size":531,"data":"","first_seen":"2026-08-28T13:30:26.360832Z","last_seen":"2026-08-28T13:34:55.017687Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dxffd1z63c.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0557b6ecd232f122117fb74dda42da8f","sha1":"166cf8063fb125f4c097cb5dd9c94309a6062d7b","sha256":"480e4c8646f2ad36b03672cc8dbe93fff1e5adf6ce466e3be39fc827b5c4d827","sha512":"2a282d03c7a62945449bb467b962eb4305aff5dd441a05a8847a57c5ca35f61480d3625a33ef8a388e0de6c5c0251c8bb128dcff4857e611fd5fe437765c77c1","ssdeep":"","tlshash":"e7f05c9047f04a15911837acc23a4303a64505378b9e0bb5f3bc4a3a6a2879b85186c3","size":448,"data":"","first_seen":"2026-08-28T13:30:26.302748Z","last_seen":"2026-08-28T13:34:54.696597Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i010pdqkuh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f649b8d187fb58b779a3fe6764ba49d2","sha1":"7f4a43c0a7b24fd7a733c025ca7ec6cd93e05db9","sha256":"0a7de96a93261c911a7cbbfa22352d331c56990f9d673f7eddfa28f0407a5e7e","sha512":"53481b1903a0555dbda61f1aee9850b9f6cc28927d4f5ebecd9b80820599fa46c2d562334a54d5ca8159c45176fd5a1670b4f9610076c93bbb94aea30beb0f21","ssdeep":"768:DnDK3iv3vIWZnhtOHEIYDAK1MBF0ycVburqmAo3AwMARn:DnDK2nKkGqbQRn","tlshash":"55c21c9cf124f2bd95eb95eec05e0805b6281a4de6288c90e1fddc4c7274991f90f7ab","size":27583,"data":"","first_seen":"2026-08-28T13:30:26.344566Z","last_seen":"2026-08-28T13:34:54.680707Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ch3b6wi8c2.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"63cabfc3736c12a0feadc7af0dce2263","sha1":"b91dbd9179925e81910dfe96e548395a25ba2bf1","sha256":"2d25c377962e50a56362ecd61014de75676c088b9540b1457e2c0bf72c7ca3cf","sha512":"19b5efba0b0f1fea335638d40597a6e106f2ef8ff4d2b343f7045612c54554ce42194bd78d3ede43dd02202d34ace0a92714ed366d0f816737c7c56aa0f5fbf7","ssdeep":"","tlshash":"3b119be962f05ac95a1803f9e27a1103b94e203f13ae5d60827c5a6cf624ab5174cdc6","size":1108,"data":"","first_seen":"2026-08-28T13:30:26.195874Z","last_seen":"2026-08-28T13:34:54.992749Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.h5tfv8fa0o.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1411fb90736bcb2ccb152bc30aca481b","sha1":"f0cc3900351ce63f17fa4f0d1c1722ff46beb8f2","sha256":"ea5cb0b62a96aa6c42f271553f91af5d73393996e1f5bf8c6456857a2d775d86","sha512":"41c9662cc0a84f805cdf0244eebe4944f385cf21248d35f7fcc251d0e549acf4e28ea15538c366e34520efc7ac067f28d58a64b312bd3d75cdb58ae8fe359699","ssdeep":"","tlshash":"4d3164d817bc86e8100e43d5e8334806bbde6d3f6bda4a2182984d5cf56aac0568cca7","size":1876,"data":"","first_seen":"2026-08-28T13:30:26.245729Z","last_seen":"2026-08-28T13:34:54.738991Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.kjxr2311ov.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0e1c111779ee511595c6a05f484ffe86","sha1":"425ce7724951223b48c91696262a279d3b0602fd","sha256":"5d88398f6595aefff18da24ac8e1f3349303c320674ec7142cced24fdf5eac5d","sha512":"fe4805898f4c19fb28bb0d8218d4d4a9e4a7b8dcd6db36338db703bdca3eb4841819b7f24c71b94d81ed65be41eaab58e6c40d378c98fd4dfe28af28f5c1f86a","ssdeep":"","tlshash":"5611ccc672e3f04aa72852f9c46e8006f158493743cd5751d2b8c9393ab508bc126f87","size":857,"data":"","first_seen":"2026-08-28T13:30:26.297694Z","last_seen":"2026-08-28T13:34:54.801628Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iqogp8kqtn.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"9bcb862899988d51056ec869480f106b","sha1":"c8f5040e86b227bd41ac1e92190dd6bc74ac1b5f","sha256":"bfbfabb240a4b08fb15fdf4039e7f64657c0b1970cef64ee8ed3a2f312d6172d","sha512":"803a2d330b65426231a067d51f4141d9f2ede3a12b9a3211a66221fb57d46ee29fb15f2571f4d9e45ff4d403762410d9756b3039e002e7f0cc4c6a46594c5623","ssdeep":"192:7Y6rMmq1o8pdRCOPxrXuMdEIpQv0Vca8MGtzPDpFuz:7rq13lhIHuz","tlshash":"ea12b69c7b50701841b6e2fbd21b1803e3092d91d40a4dad76e8dccea6dd608bc1ef35","size":9493,"data":"","first_seen":"2026-08-28T13:30:26.583428Z","last_seen":"2026-08-28T13:34:54.897039Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.evwfh70q5k.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f56f15f4aa11c7012e6b1c682257bde4","sha1":"1179f2d30f29a08c9805414af43d539787d49368","sha256":"aeb4ab7e5cf35079b1d65dbd278c39e332c379c0845ca42486836d177b5d2223","sha512":"e3dc0274dd81b127b570ea4ae5a3abbcf2c9deb477ba558f669bccb3dba80a0118409534c19b3fbec986362d3cdb102220d25c8e19eac400321e01dfa1328c8f","ssdeep":"","tlshash":"b6f024c6a6b04932852a17fcc02b0813b686427f07dd4bb1d23889392b359e6ca18b87","size":527,"data":"","first_seen":"2026-08-28T13:30:26.225035Z","last_seen":"2026-08-28T13:34:54.908553Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ea2v2uoc9b.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c66f5d607589cd62e1f7d4adfe5dee5c","sha1":"43760a2cc3429ab6a42a2f45f8dc0d46ba123fe8","sha256":"d5d09db84ab2b9cac524e7cd5f4ef4ce0b6a2443de8a495e27b135ccd629b5f8","sha512":"576f6f9f7dde7f00866bbc2972e59889df8a6db1cea4f83702a24e03afe685a9ca4b91896e6be06c94c9fa466eaa089da39d4809d653a9d2c78fb83741eb47a1","ssdeep":"","tlshash":"85f02d8d4fb14a62e004179ed26a450767e0503b93bc1f65b1688739dfd5dd98808993","size":603,"data":"","first_seen":"2026-08-28T13:30:26.527268Z","last_seen":"2026-08-28T13:34:54.977141Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.u29w0jc20k.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a672d1b4a683b2e7cd101c9f3de7bd08","sha1":"7ff2ef03165438e4eb6e5966e35c6c77e2cbebc4","sha256":"7ab20018009774433ad23072c897ff20f1e0ea12e08a78fe944c2ec53af3b802","sha512":"381f5605cd817c589d780e6cdcde5d95b9cebd1f16c03e01939e1c61c76194dd05ce39ff74fc0f14f21b5dadc22a11f4425edafa0cc122a73bb9b49c2272c41c","ssdeep":"","tlshash":"a111f09017bc4a4d414e13eaee352906b698153e43de493092ac4e2cbe79ed019287c3","size":1079,"data":"","first_seen":"2026-08-28T13:30:26.325379Z","last_seen":"2026-08-28T13:34:54.881616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.m75437nstz.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d3fc7efc9bf3d8fc351cf2af4cb53a4a","sha1":"130f8c1a8a488a30e7eed4c2c529c8927cc4bef4","sha256":"bfe85ad7cc22667a849019116391bd39a59506f8b30f3e4146fbf0d9634c0238","sha512":"661718309caaf46cf29ba0b872287883526fb4ecd341e50f89e7970f78fb2ae95ebe2efc84c283091258c59eb341ffe42c38c239939a3471ece14d03249a1436","ssdeep":"192:wrWEiP/0h+Odke80xZ2XPkEqg9sI1+VALfW9aL2EBA:KNW+ukEVf+VAClF","tlshash":"0b42ebddb292703491bb65a6803f6319b33f2962a94d4820e52bd4d57d38dc4c723f9e","size":12434,"data":"","first_seen":"2026-08-28T13:30:26.304454Z","last_seen":"2026-08-28T13:34:54.834619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g2vhpy7y07.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d5eaf086f974ebd346fe710f3130c261","sha1":"4cdb690ed05c255da9666138f8ace087d80f1d80","sha256":"cab4d9a8feba0b547563382a365dbbe103cfca019618735493f79ba2c98e918a","sha512":"cdfb7fe071bdcf813f240b930ce6d00950b615ecfc32635a63ad39c58b594201008cedf340e406bc4ebe2181ff1b87341e618a11173d09a13eb2c06e96f71363","ssdeep":"192:tOzK4cQWLRDvcDdDEWJdEUpJLan9rEnwIsFT2fuZk58HYF4KV96Hstt9x/PUqeUf:M0CtvJiB1FT9ZkmH25VUqXdPUZNaK7yt","tlshash":"b132978e31eeb5d9039e86d098320306b118095528c8a67cfebcf9f11591d47957af7b","size":11346,"data":"","first_seen":"2026-08-28T13:30:26.295724Z","last_seen":"2026-08-28T13:34:55.015443Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.kja19motlt.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f4781400329d89148613c7a331e4f9e5","sha1":"38474519af7709c26f247413c3212f7aaa591dbe","sha256":"fcb592dd80c80c27451a9ed1984b5605fe241110271e7134bdd1025b27016087","sha512":"fd761e992fa55308cd195cc812039c9605cc94632ad3e3f169b21adf0920d30f20e2f7785b53872206245527a573712d6de8f8dbf80b97dbd43a71f64362e003","ssdeep":"3072:Jil0CiCcIM9tpfxn19iVhK9eHHIMaEXeI3vYFL56rcbYi:Js0CiCcZ9nft1UVh0eHHnaEXe7pYi","tlshash":"371409c672d3f42947e651e9042e0002f36c1d75a84d985cf6a8ece67cb688a9277f3d","size":204978,"data":"","first_seen":"2026-08-28T13:30:26.684654Z","last_seen":"2026-08-28T13:34:54.918714Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mqjmkudxtf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"202d12f008f3b0326911dbdd61591d77","sha1":"4cf0d1e65873f38e954013238a2532b4a0c78dd0","sha256":"164cc56a8fab9cf42c50ea00b4a6d7ff7f88ff3fdb4aa27cf582b06e0c5f0eb3","sha512":"7547750993adcb32336b9ba89ff31dd1e090ae3840d62a02c012240392f05c447a2e5a88900c6dee1d6d0162d3c33bca58abb4acdefbc1de2559231260a969dc","ssdeep":"192:rrGLL28SX+ERPzZUcFgrs+Kc/Nd6TyWU6zctfeeBaf:XD3+CMs+7df+","tlshash":"e922a6a4b185f02c83c9d6fba4a59546b32d0cf13588006df1ec6cd57a6bc8cd06ee7a","size":10351,"data":"","first_seen":"2026-08-28T13:30:26.307909Z","last_seen":"2026-08-28T13:34:54.831926Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iaj19661t5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"394042447c8464ee02eb707e5fc93e58","sha1":"38d99ad6b74fae0e26f24c85d59a3b778f270aa5","sha256":"bfc31c56e6fb081b1497bdaf3d648911edb242a7a41b745f73d9cd228177b4cf","sha512":"a7f6e466f3e890884eaa5145442931edc5b0e96d563a014b5706e07e9bc28e09051ba96ce0ed2fc2ab84c02427605682862fc36b8ac65473688ba3bd62348d80","ssdeep":"","tlshash":"57017bd12eb159e2122e0aecd0ba0402a1501837a35ceab1e0b9ce752636987c249fc7","size":694,"data":"","first_seen":"2026-08-28T13:30:26.547701Z","last_seen":"2026-08-28T13:34:54.716513Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hb9ak5j9k4.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"76f0b4c941dab5c9dc86721a850473a5","sha1":"6d650d6b769714b0131c37cd3c3d34978a2afb37","sha256":"a7990da5e2f6928a76049d065a21a2b1dc886ea854c23828c7289c8b30a30aac","sha512":"0c6846f61a514b469663a6f5e110b6a6bef0669f3b690cb6cff9ef5b944464f831c8afe9d471f44c8e67ce48ce3782b6d160e86214915f980b05c38cca705004","ssdeep":"","tlshash":"b011216c57b6eb1a312527ed805902412bf09033d7bd45e5923c4b2a166acd2844c3fb","size":1039,"data":"","first_seen":"2026-08-28T13:30:26.630115Z","last_seen":"2026-08-28T13:34:54.85991Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.ilvll9hjhf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"304c22c847cd7a6e38e0dbf4fbed9b36","sha1":"b5552c4f7015605773b65f0bf5877d94ab188d47","sha256":"acc0f38d6a95a6f1c20b007106bbae4ddcb88cfe6eb205ad664c0178cdd7fd7a","sha512":"c4fda6cab1e86c34e59977627813b0ab8cd66229c523f8f1ef566adcf89bd68a8782e59f10032e5bef6cd1cfe5d930af68ff31b9137b02cbf21d8c16d62d2581","ssdeep":"","tlshash":"14016b5b9370adb2510a5afec03b4023a165187b23c94bf2d0ee0e3567665a5c41df83","size":807,"data":"","first_seen":"2026-08-28T13:30:26.72171Z","last_seen":"2026-08-28T13:34:54.809457Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ig7g9c103w.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"11a82c3a3ccf524ad470ea41eb1b3ffa","sha1":"5a0b4bfedc3f94b5c768748b87fbe31233cc9e15","sha256":"c0d8953afbf1196746e777e69933b7a9b756190cebc8a26abc70fcad4034796e","sha512":"2c8ed93454a12d8de6b013424ec3f243bfa35b134f6026f31b60395f593bfbc493d37decee38d535d5230e206c20200e3a1e412565b8604d750e931c720cb7ef","ssdeep":"","tlshash":"e1f0a6c922b04969812c12fdc12b06036246157703cc07b0e2b809383b7a9cb8245f83","size":571,"data":"","first_seen":"2026-08-28T13:30:26.485538Z","last_seen":"2026-08-28T13:34:54.920652Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.ebp5f8qjr2.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4abcfdc2b965a66ce360163e369782aa","sha1":"31cdec07580e6c3250c21df16441fc992d8d1811","sha256":"9346885ba2ab2ec5f400b8fc26cfbf25ed818e012566e0d285efbe32368df749","sha512":"33b404394f1c0f86beca08dc5749e6bc0dd2c1463b92bf826a0a76887f47e84374ec6e1544a25b144ab3f5097d0f7999e3cfc5847ffbca45e675577324da3483","ssdeep":"192:LToKTQSz2PYChb88FCQrsOdeA3yxZk4CqBgotSU5Mf0snAAfWMAUeK7b41IUdw:RTXuhb9g/5Bgo4tnAnWfsI3","tlshash":"c972299df051b574a5bbaae6c03f4205733f2a56a65c4820d0bfc4847e39d92d323e9b","size":16825,"data":"","first_seen":"2026-08-28T13:30:26.567164Z","last_seen":"2026-08-28T13:34:54.804041Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.nc0tcvei9m.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"828ec7635c9b5c4dbf7e36e62a86b51f","sha1":"67d61fde4013b9ff3d27bef58076f6295eeb905e","sha256":"455476688dca02eb36fc3372e08bff6a654ba8fb4e7be18020e3580f4e176e32","sha512":"2fe7c4141aceb0ab44a9d7a59bf92e8ed8dafbe7f665048300e701221f22269a07eec5d002b13037f1f811c091e15721db304a711f28c324e1452ff19e66ddee","ssdeep":"384:9glHbFz0CFA8DSsb54UH4WeBZ2cAhSSDr6wGfwoak4HmVDZZX:6Hbx0CFSsbw2cOB61fwzkZB","tlshash":"1f8219edaba28be99484b1fdf1025400746524ff6a80c5b8d3ec5e34a3d2590f6259f3","size":17887,"data":"","first_seen":"2026-08-28T13:30:26.586375Z","last_seen":"2026-08-28T13:34:54.702733Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.m86vo9xdis.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"01ee548fa1825e57eb668e2931f117e1","sha1":"cfcc15107577641e778698a2edddc1e49e5ddd22","sha256":"ff86fc1eb47f76a1108598ac137494771068772040506ea4f83393e0a360ca93","sha512":"80010b444603daec3eeda5ce803bcda1b04c792fba009937dfa40f6cd7340d4953c4282a942d6b7a5be61ed0b8bcd0b9b9b28878c6610e875563316e605ddd85","ssdeep":"","tlshash":"7611af96a1b46779521f76fdd22b70222260443f430cdfb3e2bc4ab41be965ac41d953","size":1041,"data":"","first_seen":"2026-08-28T13:30:26.242007Z","last_seen":"2026-08-28T13:34:54.95358Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.d83se06iye.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4651703e19c89b230ad4081493fce90b","sha1":"b7027cf71f3a118c2b42245a6ed34e3af100b2b7","sha256":"4d6bb41893401e5b6d9be4858eae9ea1f5f33771b2c948882ce6bde5b23e8df6","sha512":"92b8bb174324555489a5342d53dd292aeae90fd30d9c9bdfab3821c7e43bda6f4d59d475a98c9d6eca7bb88626ecaa7ac16b63fb6e1166821bd71df42f447eb9","ssdeep":"","tlshash":"6d11efe082f44ad9811d07edd93a1d0a35a828bb278c06a480f5493db6294d8951ce87","size":1013,"data":"","first_seen":"2026-08-28T13:30:26.497587Z","last_seen":"2026-08-28T13:34:54.933447Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.c0q8c0imhc.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3b4902f6c924d115017897e2b979f720","sha1":"eff6a3d6d5e81c736a3543c6ed69eed2c3a33d32","sha256":"2e47a7872970c776be833f70fb222da003c8edf11620c46ab8e4404c8bf5eb7d","sha512":"a3f5f745cd0fe1e38b11e3dbf3e049ed0288bfc77690aa384813916c0cb6995fab30f7888dfbd3182be3394b5211a555de2bce621bd3d409bfae7f432c551565","ssdeep":"","tlshash":"8bf044d076f27561d01523fed0221503328884bbab4c17b8e23886b97e32d8b8621bd7","size":629,"data":"","first_seen":"2026-08-28T13:30:26.419478Z","last_seen":"2026-08-28T13:34:54.817517Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dza0yegsya.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"132828acdaf1304998ff2331adf87ae6","sha1":"ae53d58d9d1c619816f6b197259ceaed5457293b","sha256":"2fafd49a5b6892b46c64dee9996083ad8b7fef21e4df31cfdc836c17f04c4344","sha512":"3555d6fb65d537af85ba6ca74b0698813ea631f70ad3b683eb25f7519a88512a4d16c2dbe506058d9c927291c36dca61ed7e3fab4eb3e689a9c75a07d6c50acc","ssdeep":"","tlshash":"1811e1c6aa615ab9421f1afce13a12135270013bcba447a2d17a0934077a7c7c11bb03","size":976,"data":"","first_seen":"2026-08-28T13:30:26.510731Z","last_seen":"2026-08-28T13:34:54.783857Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i5549pgng0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"27ab0918b7fc96ba8c461a4a421a5234","sha1":"d7dba545fa5fe1c2c812a94b52d7b6780f235a42","sha256":"f186717afe9d5cc9bd52d2ed7819290dcff40c1aa30ee9cad5f9020b0fcc5de3","sha512":"4801d8b6ad146eedd25fc4c9edffc5f4389378e7716f416cc8374bcc4c69e23be065fa3a15019b8abf232a543281f336efd8e3c30eb2bd7026ba293d817a9adb","ssdeep":"192:dvYl1g3fydZCH8IG4jyjuGFFZHeZ0sNkUjoxZ0eOvO1AeF:qK3fydZ6RGg2tFFJS0sNkUj6A+","tlshash":"ef02d7e361d02d95071e62ecf02b220fd1132d6e6d89485aff6cd9e097348da503e9be","size":8575,"data":"","first_seen":"2026-08-28T13:30:26.339266Z","last_seen":"2026-08-28T13:34:54.760546Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k0jo8w80ck.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ac794f4d471501fef9f52fa094168057","sha1":"de519a0fcd7a67925b70ec9078abb6fe00eda046","sha256":"7a6e59fd06f097428330abe21f2a21fd2d75a3e4eb3210c5bf16fff45836f07e","sha512":"c9bbe83e6e7516117c1cad55a4125ccc4d3e26ed28db83e5ff7105d045fa832efa480d177c7f57aeb3f5a9ebedf75a928c0cfe7c21e430281a85ddb2e244f197","ssdeep":"","tlshash":"ce21fe843bb0a6a1527916bce03b1107b35c483b43ad66a0e379c9f839b91cf4654b87","size":1151,"data":"","first_seen":"2026-08-28T13:30:26.673661Z","last_seen":"2026-08-28T13:34:55.012309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bt9uynozxh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"761c7e03d7c8ff2ebc7c0ff98ef5b636","sha1":"12aeaed3ef3c54166cb68dc7034cc4e315a213ef","sha256":"663fe7d2aab2aebbb0973760dd40dafb668a86990e36fb78c7b3d67ffb42fdaf","sha512":"a5d197af69bced0fd54e5fea392c00b80f29ff589dcf789bc8547de0d1e41bff170e0043bc51a359a1ad0e05dd6456b77144575c32a490a3c3535975d44b136a","ssdeep":"","tlshash":"e6f0a7955bb00625402d17fdd16a020361d804bb87cd4bb1e238893a1655a97895ca8b","size":450,"data":"","first_seen":"2026-08-28T13:30:26.662705Z","last_seen":"2026-08-28T13:34:54.673793Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mzwi608h3g.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"9f89fa315fdf4d367564173451fdad99","sha1":"8f39d7a4d04f9b24dcee7d55570b0b60932490e4","sha256":"1681507f85e7d5e368889af4301ceea4506c54888577c8aea9bd07a5e5dee0b0","sha512":"d890e601a431beb54f6b1c3b74d8deee6ec6ac6bc3b96268de1080646cd0cc052646fa46b778116424e5fe07c56c7ed5a5cf27832dfdbb1daa8659bec7109cd3","ssdeep":"","tlshash":"08f05c444bf00597512923fcd32f510376e0047b0b8c0b70e23c19383379b86857c683","size":448,"data":"","first_seen":"2026-08-28T13:30:26.716459Z","last_seen":"2026-08-28T13:34:54.795205Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ft2g09uep3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6a48e8f785b4fb6081ef4505748ad818","sha1":"dc95fd071707fb00b162a738268d4da7e14c39b3","sha256":"779277719edb899c0d6c24d9dc7b997d731966de378a30436c6b347a58ff24bd","sha512":"33dc1d247f9c68e82805e7ee6aa3c84346e7feac3c8b33c959738629fa0bf413eef8805769c3c1c855b3b2066bb2ea5cb24b676ea6c40d6a5fd5e45a814bff66","ssdeep":"","tlshash":"2e1133c9aaa1f07ec32827bcc09f0857b056383783cc5340d06e8871773618ac12af55","size":1098,"data":"","first_seen":"2026-08-28T13:30:26.140419Z","last_seen":"2026-08-28T13:34:54.910803Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nf1se19k2g.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"de7f84044376f2400339b8c046e21bbc","sha1":"0319f3940b74a3ae0761c7c3e60251e4a8e82719","sha256":"0023d68d74cd7741bc30fe9a953b3a0437d26f8bbc295f9b72ac703e343a7985","sha512":"b55f78fe4484e45fa440996a2dbee01fbe0259a544c0b13fbe5abe33dff8c2021e923d49603013555bd87cbf8d3b756fa65221f4a2958da2ef5694af03a1a07c","ssdeep":"","tlshash":"475164c5c192d914ce2553feb4bb5452e5ac2f26140cd091d1fe0bafab285c7832ab29","size":2834,"data":"","first_seen":"2026-08-28T13:30:26.144992Z","last_seen":"2026-08-28T13:34:55.023521Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k3f8bi0eu5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"03afc82dae170b66e04a47082e9b35d4","sha1":"fd538eaf896946ac1a248dff53f6a24a31414945","sha256":"086684f0b1fa3b2f0be12534e242d7cbddcd8d01799000e9c007b682a2816b83","sha512":"dfc02dd56699a7d80d6dd8c99dc82ecadf5ac1c5cdcad71cba1c3671c286cd62ce0c65a55518f1f23ae25dd917a4170e7cc4a6e365fd694e4cae747e02c001ef","ssdeep":"","tlshash":"b32111e3237014dcd01c93bcd61a64833a84207bbf5e4f68827c1a7eb7586d9494cd8b","size":1168,"data":"","first_seen":"2026-08-28T13:30:26.489433Z","last_seen":"2026-08-28T13:34:54.671833Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jwfwq9xh3i.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3c4053b65f7b04fa641a9451aed2dab5","sha1":"4eefcca0e539fa9bce20ea8bd8fe5ae41939af2f","sha256":"426f9b9dcd527f96c6aebe9563cc4aff191ddb615a3634de066720698cf39074","sha512":"d65317306a323cfbe62edcd82b8f4ac09786aafd24bd048f3df482430d37eda7969a52f35ceb8d6a0ff3b21eb55baf2df378e81b66cb023472f802013fe2008e","ssdeep":"","tlshash":"c631f24e07708e39b2a617ad875f1002aff5c973d2fc4e656228079858c1d65819ebbb","size":1537,"data":"","first_seen":"2026-08-28T13:30:26.536619Z","last_seen":"2026-08-28T13:34:54.879045Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bet9gnpw62.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"96d224a5087b1a94bf567e62e471f0d4","sha1":"136f677a80e26b5f1b24fc30af6eb12d74366cc0","sha256":"0fa962721a3051e45c11e77076e25a1e4c6aec86919709d3aa45d33c04442bf4","sha512":"3089e84a7b81af6e71b3e08ddf21826a5b34de483fcdafcd1c5400b28a63b90fa0a7ae19d26a8b3672aebf9b3d1e2e120059f580897f3a5c1412ce4a6539e7bf","ssdeep":"768:D1BpwYOnS0YNRF6VRXpD6TJ99do2RMK6/4m14/oymCX0o4TGoyimoJOZoYO2Z8:ZBVvJpE4XI90O","tlshash":"5ef2b7e967ec92cc500a83ea89293559b7b83d7f7bfa491042c88d18fd689d03d2cdd5","size":34998,"data":"","first_seen":"2026-08-28T13:30:26.264113Z","last_seen":"2026-08-28T13:34:54.912Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k7k444gvlj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d8db4f03385caa23036864b4d4264c5e","sha1":"d5073c1ee7bd914ac673cfd1b775ed5f5ce3dfd0","sha256":"be7e454caea2c494b8c0707c7f8d88b9df3513424df24ce8523dd145f015f685","sha512":"73e21bdbcf7285c4fcdf9494f685aa6aad5b413895b60ec78cdd042463dfaf64a2208de0ddda75d4eb5d8a02b7038b0cf7ffdd80e00798e31275a8a2a6a72767","ssdeep":"","tlshash":"753123f776f40bd2404723b8c6665213b1ef3879afad473042389a9c12255f9888dac2","size":1729,"data":"","first_seen":"2026-08-28T13:30:26.447415Z","last_seen":"2026-08-28T13:34:54.670902Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dnmqow1uhh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3de509dbcc691ec99e28482084a360a5","sha1":"5b47c11ff8d046ef4807769ffa08a57a59192b77","sha256":"3f4977eb33290fc0c6d3d518fdb81da19658843bdbf63167f9d6f4cc8fae877d","sha512":"e3ec5bfe980777826a84d68ea8d55623d6a4833515a8213cbf76d5c7447ded74e4581157cd1d968f7eca535d30e4c95d77c0753a04b89d054c7f825154639b8e","ssdeep":"","tlshash":"9711da9007b80a4d904d46ebea24680a77e8163e578d067192ec8e3cbf7edc4121cbc7","size":1042,"data":"","first_seen":"2026-08-28T13:30:26.687166Z","last_seen":"2026-08-28T13:34:54.870964Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.olespolimo.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"cf1510d19cf0045ea423770ddeb17543","sha1":"24c19116dda438b356fccc00935df202ecb0436f","sha256":"ef5a2b5c9a4216cb1c97af923b36525077cc1740264f9e280681157f733837eb","sha512":"acc8e0795e20bce142859ec5bc0e1d2f7aacaaa710b7ed7fc4c354cdf3a240db1ba89875be495e993eae9dbcfd59a0540c7ad8c7b30bbb6ba0410d81ff261392","ssdeep":"384:MiszckxTdfozJi/TS0JtxNn2tY8byCjpuiIdem/9sWd4EWhYCLarqznQpPKVw:FsIkxTdfozJi7Nn2qCtuiId39sWddW5i","tlshash":"3fb21aeaf28063dc25079be8d8577559f22f3cbbefd90b90819ccd54aa3a1d0a44dd90","size":23387,"data":"","first_seen":"2026-08-28T13:30:26.477801Z","last_seen":"2026-08-28T13:34:54.91601Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nfadakw2b0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6e2671a084ba96f8ac14e003a625caf2","sha1":"260a83009120ed0daef1a81b14f2e8f2b45904c8","sha256":"b151238663cac94fc471ee1caccd3811e20c543bbe058ac012d8a01e156554d8","sha512":"3d2834b940b7047d2bd790454d924c15b92cec26442ddd783f00bf00ddc8d008b48c6247c3a2e5c95f67bb05f6eab4819812a1b1c4936e1aa20d0d1ed9731fa2","ssdeep":"1536:2oTxZ214cM9geYs1Nnm8LMgt65FMbhBZSHZOWCNFknV0387HSGdxJsdpCN9ZxBY7:2Oz2DMLhCokpySDsmRRA0GIqYrs","tlshash":"cfb31a887192f0b455b742aa803f410ef33a2e18a44d9510b17ad9dd3db5d99e23bf3e","size":116216,"data":"","first_seen":"2026-08-28T13:30:26.396432Z","last_seen":"2026-08-28T13:34:54.970036Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.j9cqfjfjs3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"084057a48f674c4272c97ffa11695866","sha1":"9c17323c1623e00b1c1f6c08cbfe7767f8125d95","sha256":"05b517dc7bfe71beee2dca7d7f336ff62017fe7cb032889133d6d441c99ead2f","sha512":"0ccdc4a8172b75ee17f19783134db224e2fa8a29bab111bb80a826f995de72786908e406b8fbe9cdd70db10986bd7913c1bc1334e75f4920b5d28ac56e534470","ssdeep":"96:OoiTfdwz/H1hX5Ys4YFJRXvSls4kOhT8dguG+:AVwzthXqsfnRasyhT8gh+","tlshash":"c8b15228f025d6bbd4b94ed9c10d4035312b1aabdb784aa1d2fd65341734526ba0af8f","size":5163,"data":"","first_seen":"2026-08-28T13:30:26.664541Z","last_seen":"2026-08-28T13:34:54.820213Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nv02qk3bcg.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0307a2b64f84e42033f1dd63e0f4056","sha1":"eec4be42a2392acc0015a03b2f2cf8a2f9899324","sha256":"03924c49ca01d038e5aded5718094f48f74cfcbe099ccdb8318b2d7709bb3fd1","sha512":"c3cb2dfc3a3251c51327af9bf277931dba81b54599cd702fbd3b518b05a3b5ce9501a50ee8adaa84726ee4cb5ed389e809aa99e1f35b98ba210c9903b9d8d45f","ssdeep":"1536:XVxzFQuCAVyfUIu44BA/V0TfbTFOICLc0rfWY:+urW4mdqj5ZCYY","tlshash":"0aa3d7d9b191b0314ba765b4903f010bf23aaa54745d81f8e29de5ea3cfd049a237f78","size":107232,"data":"","first_seen":"2026-08-28T13:30:26.434377Z","last_seen":"2026-08-28T13:34:54.708747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.omsrmcs7mx.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8193fa1c6d1ecac3a0f867589bf76d3d","sha1":"6c9b31cd475d0d68de801f3ac56833efc62daf5c","sha256":"0ea0096a1e191de7a8459aa28cb96de94700764682b13d8a34a46303bafdb265","sha512":"595182a004bb2bc8ced1a17eeeb01f79218ab689304da55d07b151d79b89d0d04fb486ff7d812392ecde50d6a5d4ae06e723e4898837f8b43619c921c055bac3","ssdeep":"","tlshash":"5651a7feba80d0b9910f5bedd42f60113216307bdf950a5680b89f34673a6d5c64ed46","size":2994,"data":"","first_seen":"2026-08-28T13:30:26.286874Z","last_seen":"2026-08-28T13:34:54.76506Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nysn2cz0ca.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6e7f78bfcd308ca61b9791a3bfeca069","sha1":"91108b090bd37b9671f0da81df565f09e0f172a0","sha256":"711b53635f6c8d7968df7af077d0137a4901f5698561f789087c2ec5f9682ff9","sha512":"9c7679a34167e6ed5ffad6cdc04f96e5bdbaf3567b88161e25a8692067babcd0d23235fb219983736302845a31ccb755375158fabec34db12b5297221263be36","ssdeep":"192:7J1Cabrsd+6NZUI6kxMQdsLW2cfAERBvGqqhDRldYh:vPY96kxMQdsL5cf9fHwL4","tlshash":"5312a484b0d364b609f34765dc2f414721b91c5da9ced028b4bad9ea39f648e6027fb8","size":9427,"data":"","first_seen":"2026-08-28T13:30:26.374931Z","last_seen":"2026-08-28T13:34:54.858571Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.4l9i8gxjgd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"76e472dee49f7bda4d216ee2c51efdc2","sha1":"60d30a1416ebea1186ac30afdd0d105cf52bea38","sha256":"d7d37dd70d7ce00ce580e8b5eb39f8f295f5248d8a0debb3269ad746b8b47a1b","sha512":"e829d66fb89d1484295489d9cffbc2f66c257619cdeb7d61a2c3f1967557e96506ae42f92f0b060c8bbdbf90be177c5c66eb519bc624c8228f60909e05d8e7db","ssdeep":"768:GpzAecipYMnLRYRadi0hfm58r1qVBRYbEY2uSPrNrCYFU/+1OcrxAFZb18K1q2Pr:Gp/pbJdihrVPrNrj0","tlshash":"52e208c532d1f87192a755b6807f811af33e2a09304d4040b2b9ace97d78a9ec567f7e","size":32403,"data":"","first_seen":"2026-08-28T13:30:26.561615Z","last_seen":"2026-08-28T13:34:54.793532Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k4vsfhxmy3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e97e8455f34c097ff0e902139e668280","sha1":"cc2cc3bc95c31fbbde2b9f8404bb36a450d3e95c","sha256":"6758863ee58318ec2ea8948a5da5c1a73300fcfdd5d6fb2bb2cd54815409e452","sha512":"632f81ac34fdc5e7571596044e11e233e0d48df55a0bb2abc440c4088f9d47e417ce2ca9b2f0bd00a791e63dd96d0c49f6cde54d8ed65119d4a45b88d5050bdf","ssdeep":"192:oRm1vx+Cak4IG9DJQ5IZTYMGht/dUJWjLyI4QXANDDRKrFUYFiH2Cq9Fjd7Vpj:NhxOkBG9DfTYMGhvWI4QXANDDRKrFUYl","tlshash":"0b32f9f271b2bd7ac29640eff0365222b3185918ba45c4d0f23d59cf16b45c5ec27ab5","size":11995,"data":"","first_seen":"2026-08-28T13:30:26.633164Z","last_seen":"2026-08-28T13:34:54.677427Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.f8ycjgpg1l.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7094c609d29ab6bd6a09ed713f3c510","sha1":"5d21f4b8e629192fd8d3c8a14753e0c40f7ab718","sha256":"a866954b304605798d797c5dde1026b67b02f4371bbc7a91e721930a20ebf0c4","sha512":"e69d675370233af637f8e14e08ebd00f750e4b0dfc344cf30a55b0e569133523f203279e6159b8c3bbffde7b1f0d8b7817ebcc9a633e73c1d6b20760163a9ca5","ssdeep":"","tlshash":"775175ec5901533348161fcef6a104112efcac76615a95d1f82fccdb31d509ae667e17","size":2742,"data":"","first_seen":"2026-08-28T13:30:26.217649Z","last_seen":"2026-08-28T13:34:54.762792Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.encvgg8y5i.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"d71d7f49547de7e39232cfda28e47999","sha1":"f1ede68466d78fd05ec8e61b381a7912f82b5030","sha256":"e7c35036b996bfb8cefe1f9e42029b161702c4f4ce537f1f98d93cd707b7ad91","sha512":"df7a232d3ee493fc30ceb6bd88ce820325a94ecd6a791d5b25a5d6f663a9230d6661d3152af11c4311244b027dd4940c276bb0a1d0f4c3a79ec6769683940318","ssdeep":"768:unLrKj6ION7MMIaZ88oPbdzs65WnU4fHZ9ItwGdUpPBe0O1LNv3KUL8gs4uCWWOd:uvh928rbE/Ug4ZwMLP","tlshash":"1d433bcabba6f01842b691ebd1270012f32d3fe9b949c445b1ac9ddd36ac5985136f3c","size":56636,"data":"","first_seen":"2026-08-28T13:30:26.66687Z","last_seen":"2026-08-28T13:34:55.007299Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jt7vcxrf86.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"4a585cc16a55b6c806f936f5760c9743","sha1":"01a7dd52a62ba880ff7ec9e7ae1a74c4127ecacd","sha256":"9367b510753d4734b3b5378d8dfb716428b8e68cb5383ea711789459e5d6ddb1","sha512":"8c006f1807f4ff5174d1a03a72435966bed1850f0f9d4930cb1223f8f8d8135b55b75066b198af471589bb4e4cd7cc5dc4442a5eac3672b00e76c1197e940efd","ssdeep":"","tlshash":"86518798b020e676511f3effd01f9009a2a1453a936c4ef3d0bd9b3117a10976929e1b","size":2697,"data":"","first_seen":"2026-08-28T13:30:26.685796Z","last_seen":"2026-08-28T13:34:54.692756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lspipmawcr.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"79ae2ebb9b2c9033396cc69641a67880","sha1":"018e4f41c5160ae8a107ae3863d2f59b3ed8056c","sha256":"b05ff13f0bd0587658c2462dae7364234082d3671e1d4c4f68025be58a868a04","sha512":"e2c9488172e6ac842fec7149b8b8e3ac2fd8ae8e2918464b806b4846cf28b7c89c30edae4f93ab1ffa1c79d0e9c58a095f922bec3ee4c2b83c9f83c89a4d9ec5","ssdeep":"96:oQxKK3sQCBd5au/CBlhRD6uMpPprue5CtR9qkElHQw4CTMEIMKvn:1xj3sQC5au/Cph6uMVprv/Sn8Gnn","tlshash":"0cb19498b1f099f5c04a038dd03f9511ffee3eaa66292d40c1be8d9cbf14684c6ad756","size":5575,"data":"","first_seen":"2026-08-28T13:30:26.725522Z","last_seen":"2026-08-28T13:34:54.81664Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iqus80yrzp.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3345feda74398f8b57c75a145255b600","sha1":"0e27926483b6f24baac9dcba8641132d52e21e81","sha256":"0be18cc6450b4664bb92fbd9fa6b85fd898c3d8fe420325771fa282090d8204b","sha512":"212c55f45d0ae325fb5b764538e2e0bd1d2877a0c40a86e5c722ac74c54138a4da943984d99948c61330fa500a3e7608d091390a00771d3f6debaf2d1f1c341f","ssdeep":"","tlshash":"6381b6df2fb08de5d084c3deea650889b19a98ff57c24730c25c9d0c7096ae8992cc47","size":3899,"data":"","first_seen":"2026-08-28T13:30:26.613439Z","last_seen":"2026-08-28T13:34:54.982383Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ljnp7ecbn5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7d9d121903d77f11f95cf701032e5d43","sha1":"bc6827a3104498dbacba65c3e6b08b56430e814c","sha256":"97608b79162a0e4deba1ff1636ff0ce2b4776dcecf2da13cf65fe13744b45868","sha512":"9e04a94ef7c26b8663c9a3901768d9657d591e9be28701369ca4d822eb4d20bab60d2b9dc929aaaefca183d7ec7fbcf653df1483343a205fbbddcc02da3996dd","ssdeep":"","tlshash":"3cf0ec9287b40e65942c23bcd11a4503f250053f539c2b79e1384f3e66659c5855878f","size":448,"data":"","first_seen":"2026-08-28T13:30:26.487342Z","last_seen":"2026-08-28T13:34:54.752901Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.nmgs6dxlq4.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"9f72e98458ab37592c45b20efb38690e","sha1":"7a6e97aab27c0cacdf8736d222f09ac61b9e7018","sha256":"502f8c3d6ac3939c868a4c8c606c249b27cee6e6653ca916ed4ba5bc3fc69403","sha512":"813fd4aae29842b9615fb0eab13d53d1b0d80307b616ddc3ab3b474a894d7179d0b0d6b5fa954da9d1c2119c0a764a7392aa4fb74fe86cf8fd5a06d745fd5a5d","ssdeep":"96:o0BefaIJg/0fEqiO4KsJNzDgaI8hKuOBsH5FB8hXjOi:aJgsbitKogaLhKuOqZPaOi","tlshash":"2fd1753be211d2a6d4e94fefd51e9010b23b1917c7e846b0d0ff972097784a5f42a693","size":6675,"data":"","first_seen":"2026-08-28T13:30:26.553433Z","last_seen":"2026-08-28T13:34:54.841648Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gd2d2f7ymr.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"033328b8a6fdd4efb8ff999c701edda3","sha1":"f9613cbaebca51948845d4f25a8b034903f6042f","sha256":"9c8e9b2615184b61f1a135e21e889e81744ced1e03b1ab82b560276142800589","sha512":"cdd1be414144bc033d79c3da88e3a9b9d689f9c764d146b391c92c51f2e1aa5017e9c21d9025d7a48b4ea54d3725923085a164252d864fda0e6eaf10766aac73","ssdeep":"","tlshash":"c73196817ae47aa8d25911ee803a4121f7652f3f634c4562e0f8cd2eb3b1445c23678b","size":1671,"data":"","first_seen":"2026-08-28T13:30:26.281066Z","last_seen":"2026-08-28T13:34:54.654108Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.djf3rzbhj3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c8411874e01b7ccf5e74f7557ade34d4","sha1":"f1c1796a8f98f91eee73276bc53b1840d68d2ed6","sha256":"0f83520dc2467755f23ec1a3dd2199aa94bb77b9334156e7f41ff79cbfc87852","sha512":"07772729122b5a479d6ce3897658f5096761612eee11afb298d615fb0dd29c65fb355dd9057027d17b642d27f3ecf799e517849b2f2cff7c45c2c9342247617f","ssdeep":"","tlshash":"7af02b9047b05a9bd02922fcd06e520375564277878c1bb5f2380a386b25a9b8519a87","size":515,"data":"","first_seen":"2026-08-28T13:30:26.288967Z","last_seen":"2026-08-28T13:34:54.757807Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nu16e83zql.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"271342aeeb32f6ba9ffc45ce6dc1eeea","sha1":"daf8c6a3e668bc19f608dc323e7449c1b8aa1cf9","sha256":"f125df174546e7b5c63b8dcf2edbe356756d9950a3c26e669e7e4b18fb93de11","sha512":"5f90d1346c0506e142d73c9a76d16612adfdb6a8793169d415fb35c082b65289855f2fc41e67272ffebc1dfcb36bc5a91e5500ce363c5b0e15e00c5897ffcb3b","ssdeep":"","tlshash":"0171820f4fb3cc38729627ac4f899100ebf9d90bd1f88d5a15ad035490d2d71924c237","size":3813,"data":"","first_seen":"2026-08-28T13:30:26.45295Z","last_seen":"2026-08-28T13:34:54.957599Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dt40upr4l6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3a6c456e6662befd3dee6b78b9c64bf7","sha1":"7188512fc0b7948834be30cbe0fc541e00326c7d","sha256":"ca3bcaa795d9e4a8b6bbd931c7e08bbf98b631ea2af221c8777d105640a4c994","sha512":"b6a420833ee261f5d3a73318f213a207853199daa098813b59d6fa655d98d83b52c52a45275a2d059b36afac6cdde5696fb04d3df84b87e17e3ce931a9c308c2","ssdeep":"","tlshash":"4be0ec554bb05665802a63eee126010369c9823b4bec1f71e17c463d7a55ec9860cb83","size":435,"data":"","first_seen":"2026-08-28T13:30:26.209438Z","last_seen":"2026-08-28T13:34:54.66407Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ckm6wg7201.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"981b27f42ba04e7264edae6fe2ae350c","sha1":"16907756c8999721e3565efb67139dd010bfaf65","sha256":"8fbc118ad8ec331deb6851a6fb41830de8c2ad845b8400c075054c239eaf1393","sha512":"b9a552737f7ae75cc0b96e0fb10d0af65095f0212d6f28c6c777b88d27e09609cc796d69f95a980adb79f18c73293d37a05f13efeafb7388df445c6eaafb3f16","ssdeep":"","tlshash":"1b01dcaa1670cd72412c53fee026652325e4447ba78d0f60d57c093cb7669cbc469a8b","size":742,"data":"","first_seen":"2026-08-28T13:30:26.356776Z","last_seen":"2026-08-28T13:34:54.98879Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.j08ll8itxi.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"dfcd8b5aeba98b0d6fa2649aedc0699e","sha1":"cfd896c60de09e95476aaeca2414791bece48e56","sha256":"9d4a492d9123fc53271235409021a28e4e6fe3cb469043bec80621c3b9e324d7","sha512":"95e58a6b3130acafcc95a7d85b15f4ac929ddc9d19b7067e486794527b5b12b5df7c7a0c408605f3d5f57ca0ae19d0415019a68078cc1f384beaba717bc11f14","ssdeep":"","tlshash":"26f0c9c9a3b40a76803817fec01f11036a91043b53ce6bb2d0384e39b73a9d5ca58ec3","size":527,"data":"","first_seen":"2026-08-28T13:30:26.199828Z","last_seen":"2026-08-28T13:34:54.83732Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dulvth5hdf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"426882f4c2e35b4ef013595638a5ec55","sha1":"93c392fa1fc0d33b4f84fb0f1b5195772d3731fc","sha256":"b531f8885caccde0c83ea81fba75a5a77f64f9a0de888929de6d03c29c7d7ebd","sha512":"99667099d61fcdb2574ec3f9daebf469b328a425be1c53916aa4e26df8a9e9e121adc68a6c2dde6aed0aa03107bb892edd5b2eac9bbdc262f7ba4b14fced654d","ssdeep":"","tlshash":"bb11320e07709e6a20aa436de0aa101327fc6073077cc5b6436c0ff6a9998f40594a73","size":1059,"data":"","first_seen":"2026-08-28T13:30:26.634569Z","last_seen":"2026-08-28T13:34:54.681588Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mxepntabxv.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"9ea81bb5d615dfd5b1f594494f830697","sha1":"06ada6e635fae23264482e35727ac1bfd097d88f","sha256":"556ea552d893a1e6008e48992acff57c30a7f7dccb05f58539c7de21ced7479f","sha512":"40105cb19a1a36c8adf2cb37edcef7fbf5c5a88c9edef9abbe6f253e68fe301f3abe4fbac6f5cbd3dac7f4199d843bb43a33ab84e31d42f0a6a67607bdb4ed69","ssdeep":"","tlshash":"58f04ec92bb04566512d22fec13b5403a2952a3b4bdc56f1e07c8e362660987c45da87","size":639,"data":"","first_seen":"2026-08-28T13:30:26.313054Z","last_seen":"2026-08-28T13:34:54.682691Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ldw7s9vwt6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6956637f66a565e46443403ddf95ef26","sha1":"4d027e1715399d9df4a6fe55161e8ea1d0fd0215","sha256":"e3d9938dfd917750de443a327869ecf49386f39256239dd9482778d1dfc86e21","sha512":"7d7ddb2c0b85f08d9d4d4faa297b9ee4f752de1ea5336b7abbfcd223459c951763da5beee4592c7ab28b7496994c33d6bf4f61542f397355c7a281a8bfa38fd9","ssdeep":"","tlshash":"5df02be556704a77d02c1bfcc03f5417a254507b178c0bf5e1780a3db7259968558ec3","size":527,"data":"","first_seen":"2026-08-28T13:30:26.258066Z","last_seen":"2026-08-28T13:34:54.932143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.oh4xjid6r6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"7e9f4e92686efb38ca220b0d1efa9348","sha1":"887e5fded026547ba08bbc6853e567d5218ef3b3","sha256":"077e18a81265ca571a10757422f67ed643d4da55bf8f8512d483cfa2f7535614","sha512":"f970348e3a6b1d072c5435fa3ce4e58eb5dc2de7585a1cc3ca246f6ea6ae8130c55d2e2c9c86ece825437389596514817a927ac5ae93c7b1e6b74ff77ba509e7","ssdeep":"","tlshash":"0311f05417b80a6d001d03aeed25650bbae05a7fa3ee0d30d098cc3cf57abd01a1cb87","size":1065,"data":"","first_seen":"2026-08-28T13:30:26.49453Z","last_seen":"2026-08-28T13:34:54.736229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ka71gczjcy.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6aa912c87c85ff9ca0889d6d9929e868","sha1":"a7a3d40669edcf6644103daa179e745225da016e","sha256":"04fb1e297cfe0803e3c837413ac6232ba62a567d0145752b2c34f2c542d0ca8d","sha512":"84d2548208e1b4f5a5401e51240c904de3e99b3824c4aaa258b67ee2ac82d013d1d59ffff46a586743ec09c9b989d6f76031cd703cafba02deb06bd9b03f1316","ssdeep":"","tlshash":"cc211e0aa620a665752f16dfd429500273b80137c7b806b2d0bc47396e7a58b7256baa","size":1334,"data":"","first_seen":"2026-08-28T13:30:26.462675Z","last_seen":"2026-08-28T13:34:54.91467Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jofxyxrcz8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"cfabae47997f006efbd5518af8869590","sha1":"ddf595b17c30dd4d5c722b3dbf513c6cc6cf430b","sha256":"8e2929862d3e226636d8a8ab4e2167d311e4df4211fb8a756bcbe9d99d0670f8","sha512":"a78328b805b042a1151155e9a1ceddbc22e4db25e6a5d01e36e2dab0283d62ac35b2f9b64d0583b66b0b3a0703bbf8ecbe69a2d616f40ee1027488a8b3ed358c","ssdeep":"96:eJ5XdFWExOSx6YIOlPfXgu6rKTn6c9A7FE2glCx7/JH9lMCgXstS5SpzOterNjvn:a5Xfx66PPgu159A7FEy5/JdlMCSsk52/","tlshash":"aec184f7f6d4b0e08007ebe8c43b9422795f3cbb6fc36b8a426695445926185cecdd44","size":5751,"data":"","first_seen":"2026-08-28T13:30:26.211354Z","last_seen":"2026-08-28T13:34:54.764336Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dy36eje31e.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f5add8ba8c6b22cb04cae283702c0dc5","sha1":"d53e9cd386b7c7f7ae96d8219c63f3de2b449aa1","sha256":"fb7fcfe828d3a0a06a1fb83ef2874e72f46a5894cce8e750c3d14bc87a65b17e","sha512":"d7024def5f00563d49e943959bdc365862897a46ef971e068037aaa7638b7462842efe2086bbf2595775e2f66cd65696d707f8215b0e787062af831d7f383c2c","ssdeep":"96:o4atqskfPlQ8MOXyGpXsqEi/oCZcU6qcziSr1cvsQLpzEw9y9D434oLHu2xpNWj:lwR+Q8MOXyGLEiwCZcU6Hr1cvFL59c4I","tlshash":"43b1a6db65b0ae98205e6aefc51a0808ff8b086ed5656f80c27eddec745205dcc1c5e7","size":5415,"data":"","first_seen":"2026-08-28T13:30:26.15681Z","last_seen":"2026-08-28T13:34:54.823142Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.h4e8b3pjgn.js?v=static-mirror-2","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8329a82b6a7bdb26198955f072c11694","sha1":"c0e2d3c5ff4a4752d05e160691eca607e77e45f6","sha256":"c2704a8e8a91666e4c73feb0abe223c7c556241f5759b98b174334552c492ca7","sha512":"c5d861eae28175fbd57fa1279fb2513eaaef5fa5597af1545d871885465d0fc7be682ada2306a17e1d32691b9e78a6335d80ea0e8c8c33dcaa3d80a2909ee7d9","ssdeep":"","tlshash":"94c0c0b6200fb04525133013c11f8d11d128064c3dbcb0330008818e393043c4a3fd18","size":164,"data":"","first_seen":"2026-08-28T13:30:26.402641Z","last_seen":"2026-08-28T13:34:54.678542Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o5xyd37sd6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"3214d8381634f6596a957dfd3b41a236","sha1":"fbbf4ad1c78d2a0222b32d1e3fdad6e13121e79c","sha256":"153fd5f6ac730df187c37063d4528cb8ae33b8cd2e38623d61eb2a943804a31d","sha512":"791e77c7cb6cf99def187512776927a4185e8e79f20e06fcbd649b32b387e15170d7529c09e47825ea95a04c1ad07ab34446c0411ca6edd0cbb99c0cccd7f32d","ssdeep":"","tlshash":"53f0278d0bf05a26502e23acd16a8242b3e4443b57ed4f71b27c473a6b95ed9c68c2c3","size":499,"data":"","first_seen":"2026-08-28T13:30:26.608676Z","last_seen":"2026-08-28T13:34:54.651701Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gio9kcrqb8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"c80c31ef29bdd471833b2b745e14270e","sha1":"0a7b7f20095234d168a33e6d89a53aebb48dd858","sha256":"87ceda3bf03e7cbea0a12494066519c3ce1ee6103c5f746a3cab01de98eb8b3b","sha512":"eabf3950199bc29922ae3b7262922f34027f34aa1d3255ff00e5b5332246d246f503124a4f3cf8f4ff530c2c63c7fab3fb4949027e3f6453267b6b805bb51ad3","ssdeep":"","tlshash":"8931fe826bf2d43f8ca582edd2dd0533010118fa978ac5b97dbc149b121864f503c9f9","size":1657,"data":"","first_seen":"2026-08-28T13:30:26.367467Z","last_seen":"2026-08-28T13:34:55.005682Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hpu0rr1sjr.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1cf54bd8c4e05897a2182705e07afefb","sha1":"853d25c66e1b26d0a11b5629a9f59731aa62c972","sha256":"c83ce8c45ee80e6a485a13eab7ec03d90481d1fb69bf2e7da033d9268449b5b6","sha512":"9966d199fe5e2a04b6d587ea848b3e617f1cd905390869511d76bcae2dd186a21bdbd2274fb4e2df11ab1d59e1cfa7d528b2b09841148bb70772f2bc8a593400","ssdeep":"1536:ONBTVnjpsjLKa+X+vk4IUQMOGAJuuHwV9oEFkeYBi/8nOlhMyWNVf8puGaVIfw0B:OPwjryGvzkjdGm097cQgj6RU+F","tlshash":"74a442fd114326ced439ca5b28053425d03233bbbf9d784eefda6215eea580a19dc96c","size":491001,"data":"","first_seen":"2026-08-28T13:30:26.625157Z","last_seen":"2026-08-28T13:34:55.020193Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mefqo6272n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6e7e651443dd00238bbade66b64311eb","sha1":"52b82ee3a65f57b047128d8928f93011bbdcf8d9","sha256":"e21ace544213cbd9477f10dec52f81e5ae63aa116a5518a85e4545d85b6a508a","sha512":"fec1dead2e262bd7608418b03a8e34755bc1022ebf7420b179cb8766bcb2dd3f2de53de108df1a79e688e9c21403e8aaf47fa30d632fd53d02340a599366ad2f","ssdeep":"","tlshash":"9c7176a0f421fabad52f1cfed12e900131164628db2d46f0d0be99280b34556b527b9f","size":3650,"data":"","first_seen":"2026-08-28T13:30:26.688387Z","last_seen":"2026-08-28T13:34:54.828903Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nnn1p4w0nt.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"e7ff4cbd0e97107c14ef2cbc45661b19","sha1":"d8c700bef6d02e7aa07a52e12296a802888d91e7","sha256":"85dda55bf8a0be12132fdb20c1e04a1870a224404d85ad262449ac52e6a48cd8","sha512":"742100ba25dd119ac75cab0457c5209124544a05ccd85b8bea342c71b924112d9ad4d3c07687f7023fd5eb35590d30272a0cf17a04739c572d9c8ad40a845150","ssdeep":"384:R78/AXQqgxdTzJburixLYvisXEuhqPTJlyBYhYx9IBI:R78/+gxdTlbOixLeEuhqPXk+Yx9IBI","tlshash":"8442e9d434d5f0a983a394ea401f5001f66ece66350df5a8f2bee8a63c7588bc176f25","size":13112,"data":"","first_seen":"2026-08-28T13:30:26.50342Z","last_seen":"2026-08-28T13:34:54.698917Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.m0q5hld89a.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"84dd58f0df95000a40c19d0f0a4ddfdb","sha1":"83264b37992f05a0bede709c2b1a1831ffbf18f8","sha256":"d8ee08cf064cf1de8fdf3d2cd9ab004a2eed1bdc4762af5d4f8dae9b82f9f4e0","sha512":"973bdcce806a167759a206b4ee8c0405708ff609f761adc9c6338a678d8675dbb3d5e3d13797949cc5bfedd558056e37495cc312dcb42b2df3eb75596a5fe2bb","ssdeep":"","tlshash":"7d11ce86a2609afe512d4beed12b2943771104bf479a0f70d1385d387b3658a9106e4b","size":991,"data":"","first_seen":"2026-08-28T13:30:26.430054Z","last_seen":"2026-08-28T13:34:54.813111Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"972d66517215b6bd37bcfdef89fbce51","sha1":"693dec50e6fd612efe2c81a9401c38614f8aaa23","sha256":"1fca13bbf6c4532e0c463b1d2a3cc2ed881a53101098aa6b94b531b6b4d1856d","sha512":"ace5057ae8de5827f7a1910a213534d29e9fb985c88d36ebc710064bef8af337322a6417122bbda03d14131bae6d14267164b481dd61c9c7e87d30b383747617","ssdeep":"","tlshash":"77d0a76519b5c4316698024a50f9f3a9656031a07711e11582c8cd2a5b10ed304a195c","size":217,"data":"","first_seen":"2026-08-28T13:30:26.726692Z","last_seen":"2026-08-28T13:34:55.035878Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.m0ukmqgf9n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"8ccb06a6aee27b051e51177b3503b89a","sha1":"f40ae2a00f7be7422df78814c5fb7d9a8a246980","sha256":"6fc77bfeedfb0fb148e5e74fe47e014d6599910b0be0eb327ba7b7592710760d","sha512":"fcb87060a384c9775dceac1b34f29cbf8cd75700df75556b3b3c9c1e51d931881348a8fd383bc615644299f9ebeae5cddfeff40b84df317a659aa7f0c20fef46","ssdeep":"96:oybIDu2HFk0l6PMFIBShD4mLfPuCpsSz/rbS/IEc94NlIvn:xbyFrgwIBU1LnuCpz1946n","tlshash":"7ca1d8cf6f904bf59406c3fdea0508da7b2968fb13a64b30c16ccd28b46515cdd0d896","size":4873,"data":"","first_seen":"2026-08-28T13:30:26.378808Z","last_seen":"2026-08-28T13:34:54.825492Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.d8a01a43do.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6b810c02346ba721cc2a544287c4a986","sha1":"9d40bb8484c36a214499aa848585572c19d8cc2b","sha256":"ff3e31461e417095691bb469f591a5229bcd7417bc8198f5633577922926b082","sha512":"b1bc1f164dacb00bf0ee289f12e9e396564d8300dca931b88907f4f730add73d9dba4b31b3fd368909bd1822f71a97a193fb4b88fcb40a6f6f364ae8de3d2c62","ssdeep":"1536:WlYM6kznwqsMwidhoACw9FOrYeUbFR5NroINMDSbdENx75gFvl7gvyePx/LxNEyc:0YMLw4MThMyvRG4x4od2p","tlshash":"8b345adab3d4b1e8d40793b9c43b5816b7ba3dbcbb29c5008198dc98f4645cca95ec93","size":251311,"data":"","first_seen":"2026-08-28T13:30:26.690832Z","last_seen":"2026-08-28T13:34:55.009818Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.eehxpt7fe6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"53d777ce44d7486f748bf8911a03efbe","sha1":"e3f33dd99c477bfee478fb4fa2a8c2a31bbd29e5","sha256":"161aa0bbfdd25d56292955bfe16bec075eb3da6a257ec79f4d9f0512c3236b39","sha512":"cf124f31061f6d65bbbb9616f60a4afcc0ba1068b129d50f3e18b0d4a38038bbdaef02fd2dfccf05d80e57ffa7833c918e582818ecf96ff29e968f2eaec228c3","ssdeep":"","tlshash":"cb31f1fadeb51de5811b5368c0366161bab228bf4b59575190f08f28ab348d4a448dc2","size":1555,"data":"","first_seen":"2026-08-28T13:30:26.347191Z","last_seen":"2026-08-28T13:34:54.815169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lxirs4oypu.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"560494ed96453e7b1809b52b2f44e6cf","sha1":"f0948c4c10dced0c0b5a7481759abd3b1240b0d3","sha256":"9626d40de35da4865cc03615a518763dd484ba357fe53a2b3190a85f75099010","sha512":"1fe4cd6b8859493dedea1c76e68ebafe9b6ba36ad67c66f36b85782df5fa0701481b3e761098fc1a47572e1eab872d10995e29ca998f34d09466565f501bcd4e","ssdeep":"","tlshash":"193195d932e45997014b15a8463f1143b2fc0a3bdfcd8ba09324e4f417706a642aae97","size":1832,"data":"","first_seen":"2026-08-28T13:30:26.261206Z","last_seen":"2026-08-28T13:34:54.909634Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ab5iex94ri.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2585aaa00513bf02cde315b91f060546","sha1":"0a1a417db3de8cfaa60c63d56479d4d17a3c93aa","sha256":"c99ab8b3d6ab098bc430cfbbbe6739f6156b448a5d67d57de80810706354e3c1","sha512":"fdefee05c38ef57f5c9ec9d6e80444eba69b4a5b541bea8e1a2effb1bf19398953b2db353b8de41dc4805dc1b82802c0b5b1d84a265afaad853ebca16ebf8e75","ssdeep":"","tlshash":"ca21501cc7a6a937910713bd551e90016ff4503307f88baab232439a9861e6b009d73b","size":1321,"data":"","first_seen":"2026-08-28T13:30:26.516197Z","last_seen":"2026-08-28T13:34:54.965441Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.eimiz33j98.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6616f04476a4e7a3f60d3c46a1e736ea","sha1":"5e8b37965edbd06ed59ed2efba9141bcb10fafa8","sha256":"2e2b02a2439657d665e10e9c7350fa05442904cb5df444ad63a3a462a9f37f36","sha512":"f9a4de229356a7b13b52b9cade3c6c5048632184b5c7056613ad42aac956fa5bfd2887ec48d393cd06dd8522e2f121771b5edde474725667bd49c15aff369678","ssdeep":"","tlshash":"6a21322e4f724834b12a03aee615901573f641376b388561717a033a606df5b4b4c237","size":1259,"data":"","first_seen":"2026-08-28T13:30:26.301285Z","last_seen":"2026-08-28T13:34:54.891108Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.h86ud2lzes.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ff641ecefb539ede9635fe4e2e8b02d0","sha1":"4b5f61e39086d8d22063a83eb42dfc1ca906a521","sha256":"30522bc3eadfb3872fdd6942909d8e2be5ac317b5d85471d45dabe68e2baae0a","sha512":"d70c110385d9d4a31e7b51488047f656b4d13d7343e376dac54dbb64fed5399f1abd38d0af546c051107413e9383407b95ba37d3a8c47eec3c3d13ab55fdaff9","ssdeep":"1536:zlI7tL9ensQBUkZpTadxJbN1JLKbYB+42Z9kfV21NnpbZC2csoYYUDKk1J+8vzyg:zS7ZwnokydXbN6kBSdZCfYLrvhsqkC","tlshash":"efe307d472e2f07587aac0aa847b0207f73a3b48644dc51cb17dd9cd3868d85a27be39","size":146398,"data":"","first_seen":"2026-08-28T13:30:26.647573Z","last_seen":"2026-08-28T13:34:54.686281Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.f4vthtsqrl.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"dd7b2c3b7be7f0be9965cae8d3cd7d2a","sha1":"a160bda0c528df1678ebacce21583f5b996b4e6d","sha256":"274996106bf8502fda9f2c3c8d68ea4714f0104bf01aa65391cb0770e4480d15","sha512":"06b3546819358dffd1b72b1fcbf696af7c35f232a3c49fa70cf2b08d1c9fd9fd26c4d548389a989ca1ccd222ae9d558f2b7e7df5959ef181d5fc28cebc6b6d79","ssdeep":"768:ktsq7sKEoFmh3CXuS6mVpUucfLtsJ5GtlTsjRukooOGHMl0kdTBG4rLt0zKGsDPt:kts+sYYB/nkrUR84izXW","tlshash":"77534cb0b254f1fdc52b53eec02e1921bf2937efdb628a90c0ee8d187325594a45cd66","size":62892,"data":"","first_seen":"2026-08-28T13:30:26.391961Z","last_seen":"2026-08-28T13:34:55.018948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bchznqck4d.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"74e95aa285f58e639418b9707d04de78","sha1":"cc34d8702e5aa5a401c69669bda19ef46dba1e7c","sha256":"7403cee1c740e2bcd51e6122ec84f5b8dfedd9e11fbb7b868ff2e2f6519b4b92","sha512":"a1063e8c711267b18731c90f796c358c8731effe87234eace3f53edcaa519ac77677c56a1547232105291f4b07ca566476da137e874f377e202b7b5a311de2fb","ssdeep":"","tlshash":"53f0508546f00577c12c1bfdc12b95037589407b07ce1bb1f17889382735ac68758ed3","size":527,"data":"","first_seen":"2026-08-28T13:30:26.668341Z","last_seen":"2026-08-28T13:34:54.952496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nhfzpihfxg.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"0e5201f624c47d723d5ec68b91af142b","sha1":"ee9a936ac762783db4f0211cdf5f207372c3eb95","sha256":"b8b6d99832337ef6a7257cc89d0d407919b74166663d86bffbdf38da517fc51a","sha512":"1577bd9ec7371a989517782cc3f7bc099ce38d02e1186dc2a644a20f43c31e3ef1a2b57f81bd3da82a6664df4c3ad568d68b4cab37b96ce51a324cf893bcb4e4","ssdeep":"","tlshash":"b911e2f4237086d9802813acc13f590266b514bb5bec0ba0d1644f29b72d5cc554cedb","size":1013,"data":"","first_seen":"2026-08-28T13:30:26.146801Z","last_seen":"2026-08-28T13:34:55.021711Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jb932p7ona.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ad616821c60a7349bdd1b59f58d447fa","sha1":"959394db5efec6a5246413d74abc546b17f86f00","sha256":"a7febab9022f4cc5a08f789d492b9dd7fbe4fe1e501d0207ba449b828deeafee","sha512":"a0bb3b6e1f3cdd504756f29c71e907b5d072638c8e77be409ce4ea8c08906a60a24634d8805ead5d8f06ecd105653f58bb2e8e002758e5eaa7bf367418385a9b","ssdeep":"","tlshash":"fbf0599a577046b7812c23fdc06a14437254017f078c0ff6f1b98a3d6732ad9824eaa7","size":520,"data":"","first_seen":"2026-08-28T13:30:26.546329Z","last_seen":"2026-08-28T13:34:54.958707Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iyozdtu4i0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"23a554bfe1cade98f5f7713f64ef04e1","sha1":"442cd1cead9aa82fa567ef27ae0554718fcacef3","sha256":"8f6e5fb8ffb250e16626748d25099efb21d25b5f36df53e693bb6e21342203d9","sha512":"0ba9512480ae10fb51ded2bcd49c16e484ee3339a456684341d1a17a5e5febc701180ab67320ebab3fdd1047076efdd06aee263107c1d311024444cb257703a0","ssdeep":"","tlshash":"3211d08667e0857ad11d06acc12a0907e7a0193f874c5ee0e1bdc924b7b49454518a87","size":909,"data":"","first_seen":"2026-08-28T13:30:26.531106Z","last_seen":"2026-08-28T13:34:54.960019Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.ddhyvc9ouj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"9e780ebfbe10e9dc40af4bc8ace64b18","sha1":"a0ce7f06b693e2c4771d6affa61a4e11c3ced940","sha256":"f624fe4a87175eed4d75b389fc2855f3ceb479ce3022e04183ac61d639e890b7","sha512":"11cf3ba79402c7853e8c060f7363d482f6c649e2abf8f9e6ec83b8b1b97bdd1617228bad80a34d18bfa0ec953607c74c7a8cc2e3f0ec98c1b2831870981cdf1b","ssdeep":"","tlshash":"560170ab87749c7360586afdc15a5123613a0c7713c98bb1d0ff0a3957955aac108583","size":705,"data":"","first_seen":"2026-08-28T13:30:26.369888Z","last_seen":"2026-08-28T13:34:54.814206Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fz12gtvcu3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"6eeb41ab2ccccbecc9dfe69b6748733f","sha1":"283e09df4e194caa0acd0152e836722ce3e2b593","sha256":"5cf577bbdc62c80cef72f3e62ac031abbe7ad5443021dfc535f0f702830d7a17","sha512":"830cc200a969d7a150b612003c20b9ce8233cdd816889f66ce97304b722567231f8fac95b476c6d00cbbcc108714da1ec974ac470180fcc3cf2091af9902cc6d","ssdeep":"","tlshash":"ad018ecd65f415aa200a43fce17b480761284c33578d5360e13a8cba3b205198229ecf","size":768,"data":"","first_seen":"2026-08-28T13:30:26.483223Z","last_seen":"2026-08-28T13:34:55.026168Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.wpjmcvma1p.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"1e4539591d3733391807f045d089dffd","sha1":"1064345bca1351ffdbcc8ebac8034fa049cfd536","sha256":"b96bb9ded99c7309dc2643579a34cfb03842e3c4df56fbc487ea75ba8b467108","sha512":"96f11772cb25a0092d396d2f2c9603e718c03fba01c310a79770ce74b8f3049e8a4b3bc01905b9153ae5c0dc3534329c0f1caf1165ad703a8c83fac73f87ed6e","ssdeep":"","tlshash":"ea519a4515f2c676002c51bde93a569239b015fabb0b8d10683c5c6c6f32ccb8c5dd6a","size":3157,"data":"","first_seen":"2026-08-28T13:30:26.318684Z","last_seen":"2026-08-28T13:34:55.028587Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.h498turysz.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2a9757878517caaaf05c7770c32ac356","sha1":"3ebba1cc335253f1cccb55d7e655d0841233249f","sha256":"a715f89837048fd63b74b87b3caa7f35dcb9788acea814eb557cb89f5e4baf23","sha512":"ea0c5c368b009da2ed45a906111f7469af644422d8c6c81c1c1572af2d71435bbecba7d1ccb2e2a03a1c195b506447edcaab287eb47385242b61a0504657dee1","ssdeep":"","tlshash":"9621f19523e6d17f529a95eac0155103732804b7178c9aa4b03cae726f61c879a2dba3","size":1179,"data":"","first_seen":"2026-08-28T13:30:26.268138Z","last_seen":"2026-08-28T13:34:54.937104Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.efeo8lfgd8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"afe67949761dd467a76082522e59564c","sha1":"da73e358346fcd38be72c9ad10bac493cb2ed39b","sha256":"ebdb24f5b0b8d2d77233a57a87e9ad346fa405d0be370d90980cb2be6a2df167","sha512":"3cdf6acbfc22ba9b4ffde6aaf74227f969c250ba72816c22788ac2791e69123658371e1d8c8d89dd41aa8b61d03895fbdf7ed27427c2de52880dafee19d09d63","ssdeep":"","tlshash":"a6017b628774c91380985fffd05ac45211b6453703e9c7b2d1fe0f3c67655a9c418643","size":734,"data":"","first_seen":"2026-08-28T13:30:26.404482Z","last_seen":"2026-08-28T13:34:55.01396Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.doo8bc6d1n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"cd78a944836595ae0c34d487dbbb25ad","sha1":"62974644118fff060911ec33e72659991a097889","sha256":"6ad8bd57769dff845c379e2f2919c3fd6728768d2bb26b82388202c3ef12b8c2","sha512":"5424d6d00a81302c4292739017a43c4a803699e76bfbe458c709d21bd33e2747e0298ee4539110d567e17615332b174ad3d301f58eed05a9a5e5beaa451f214e","ssdeep":"3072:Fw9DG2KDiefM2xYGq+frVWeqOz+v5/ayjm89v:Fw90fM2Kh6Tqs+v5y49v","tlshash":"be0418c472e2f07187ebc0aa847b0107f73a3b49a40c955cb17dd9cd3968985a26bf39","size":179646,"data":"","first_seen":"2026-08-28T13:30:26.698573Z","last_seen":"2026-08-28T13:34:54.827563Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k951i58gfd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f42fa897f5e191d74d576062470ab410","sha1":"b5fe8a82b85e9e3b0cae5ab0218e006db88e0e1c","sha256":"96735dd5a687d5d14965ea7be01ea8a2db665122a2673b4935c5c704928c4835","sha512":"bb861b6c5aa6b33acf572a935e5e085cdc34aef34141b5bde127deaae2986c121826918daa886682ed0e93f73d33d33dd8020cfe6322ceb75735bacabbcf2484","ssdeep":"1536:8RVbTxe2qJMC97zUt1NndHRV98FFnvsX+jevkO+meiK6zKq/37kBe+:8RV/Q2PriI+urGf","tlshash":"4d531a8871e2f0b486b741b6803f410af3372958a54e9510b17ad9dd3db4989e23bf7e","size":66500,"data":"","first_seen":"2026-08-28T13:30:26.169042Z","last_seen":"2026-08-28T13:34:54.956451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.cdkddogwm5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f7fa8d7d82217f91c639ad80f4396bfb","sha1":"e8f2177c1f255f6d6f44f655ca48fb10d74ea0ec","sha256":"7535057dc9080dd44b223659a6165dd6170b3d9ff46e3cfacba719ea1881d04f","sha512":"8886d19eb84fcbc65522361eabfc4251d4f2e7fc92d4e5948d925a68c046b00948ee711ef0890d7eb4f5ea9ce1fe68145083d830b4f324168b2dac393cadba25","ssdeep":"","tlshash":"ec41117ad024d87b94a98dfbc11e90322276053793e487b2d1ef87315b721b6d006b4b","size":2107,"data":"","first_seen":"2026-08-28T13:30:26.550291Z","last_seen":"2026-08-28T13:34:54.926224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bakpcadppu.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"caca88e8e210adbf2ed173e385dd3183","sha1":"560dca93780a029e2d742530af891d3764b4df99","sha256":"ec6431702663a2f5b91812d5deea2dca0d7dffe43df96e521a42e91133e0b2c2","sha512":"226ceaa16856893d30de1ed6829e08e636a398baf4d798d29ba26dc0366a2e4e6b1bb26533046895c92a508e036cd553b733aaa98556b8d9eab6ada7d17e0ab4","ssdeep":"","tlshash":"e701d0de0b714d62012d23fce47a1823b2a6407ba78e4fa0d43c0d3ca756d8a8815f57","size":767,"data":"","first_seen":"2026-08-28T13:30:26.178074Z","last_seen":"2026-08-28T13:34:54.675203Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g1an7xr298.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"a14e016d5e29370fafc6011ad2fb29f4","sha1":"1e52ce6007bb01c0ccbfbc1ddf7a6d80cfc1dd9d","sha256":"012de8796c3167cb580a6e9acc4aa4c10d4cd91e66cee50e43c86c4bd1dee4be","sha512":"f8a230be8df77e599daef693be3b8dbff6259afc6116d62af364ff303b2cbca0656beafceaa7334e60f967b6f38b8cbb521244821b0ef1e364dc0c85f196f37b","ssdeep":"192:i2iFLfmbxnZGighpWc62AXJ+lYs9NZxmonJ:iLLmxn8pWcfAAlp9mA","tlshash":"7ae13ec971e3f0a583d260bc406f4446f32d6d26d88dea58e1b7e1d47d7844ac232f69","size":6807,"data":"","first_seen":"2026-08-28T13:30:26.659036Z","last_seen":"2026-08-28T13:34:54.947064Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.b2v633n8dw.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"07e4fca3b64c6882a07fc0589d9abe24","sha1":"a6e53f1f98107712192f76286db68b7673e1fee3","sha256":"46a13164d84580da92332dc2b09ef32995c52ace8b64ae8f4335e1a2b0981c8e","sha512":"42d211f0cfcbc4f5c6884658b6f6ee4cf066dbfbce19565ff3f533e58d683cd05e5c8b2d944c1a1d240409ba2a21ed8621d0fe25fbaae90f821c5e03218cfa41","ssdeep":"","tlshash":"3351e0ca6be5b801a294153cd6e7884369292cc3315c1568f4fa1cfcbda0bcd8e679b0","size":2711,"data":"","first_seen":"2026-08-28T13:30:26.285105Z","last_seen":"2026-08-28T13:34:54.996665Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nkjxhm71aj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"f5f0e3c56fe164602c700f93a1c6cca6","sha1":"166907f8858bf0b2b25df073e97ea81e188e9eba","sha256":"e9cf7d7df94206832c28e773096c77dbe9420e9723326fb3660e317f0a9cb84e","sha512":"f457559d3cde75feb7df2ac26dda13c81d59bf2c42c3dc3315c565ed4750d892c2ca278d90eae9027a24946369c4c5dfec8f6cec4f836939071a08ca9ee1a02c","ssdeep":"","tlshash":"3941534e5bf5b161723a4ac4d27f8926f21d2e3f034b83d1c0ba7d37a6691e66203562","size":1999,"data":"","first_seen":"2026-08-28T13:30:26.695331Z","last_seen":"2026-08-28T13:34:54.762118Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jtcyasau6v.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"18c4a6cad1d6068f4996256b83c663da","sha1":"28b6f3df1e080ae6aaa9b2a7346304e1adeae7c8","sha256":"87636f890f745ae377e8593d4a17e659d4bb34ebc0388514b2652a3cccc04cc3","sha512":"8d8f544dd619c0eaa126cbeadf8139a24f0e9961e06beb0496f7f1ece9be79059c77eaa5ef1064edb23d6fdda55bc59d591d8d5ec28ca878880a0a9f5803d1d2","ssdeep":"","tlshash":"71e0e5895bf40a59816823bce56a4507aad0003753cd0f75f33949396ea9dc58d4ca83","size":435,"data":"","first_seen":"2026-08-28T13:30:26.214274Z","last_seen":"2026-08-28T13:34:54.971572Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.w63evtsr9u.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"18539d4211f069e9867d39964e96141c","sha1":"e7b120cdf060e5eaf6468cf6b01f74f59d623810","sha256":"bed04da79b13fde408a61af40e8bc2afc5b197bf68ee1bb2d5673e4cf9795389","sha512":"e319673d5158a516ffc1da388c3b8eda69b1088c702fb5587e1473c6c6b8fa2d76e6ee411014a77caa93848024d3a47f820e07b15ab87a63ebd25a5eb5ab9b0d","ssdeep":"","tlshash":"0611efefd6609ab6500f96ffd42a00236260007f03d80be1d13e4a35176a697c51bf03","size":1030,"data":"","first_seen":"2026-08-28T13:30:26.282233Z","last_seen":"2026-08-28T13:34:54.821115Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.33bclquyju.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2e08dc25ad3be7e47e72dd2b965e3e40","sha1":"44f97f860a311eca7d6749f042cc795b209c1fa8","sha256":"cd500826beede629696cf1bbc858863482a5901af6f62276851eddac8a035036","sha512":"11f3f479623a4c3ff6747d24597f70da8ea9c64708be8abed83699bf99df32b13615dc380b6d989b9c2d0f4527b764252ccdc1453e8c32161f1045b012f2980c","ssdeep":"","tlshash":"384154e893e08ad4d005afb8d42658662bff1cbf7f5907c2c1789ed0e7200d48c5d98a","size":2347,"data":"","first_seen":"2026-08-28T13:30:26.62235Z","last_seen":"2026-08-28T13:34:54.966891Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lcd720bdp6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"10add7775e7be1dcac514d64d46b873f","sha1":"59e2b917007716a5d16bbc6576706ebe3523b0ba","sha256":"4e0ff0459e7aa0d265f08b12ed506b4cd034b6152a70e7606a09e84d832c5148","sha512":"d80b0a118487c8707cf58a1cf7b1fdb2586d5e36d189e9661b11aaf30096af64487febfc722028173f5931c44710e5e0d489325bfcc9dddfd9fac81e91f565ea","ssdeep":"","tlshash":"bf51a5615d75c73310cc66fdd036b2422208107b5f8adc9cb89e6cb4b712aca9c28bf6","size":2555,"data":"","first_seen":"2026-08-28T13:30:26.699994Z","last_seen":"2026-08-28T13:34:54.968473Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o9yf3jjn22.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"ed4c177998578a99c2fd0b04539f8b28","sha1":"7aa3e9457d664549104fb6309122c35e0219e099","sha256":"b8af83544ce2099b2c46d3a7632bcea1bb2803da1144aa32c058c52f2b740d83","sha512":"42be66dd772f656eb25b67b385613cd918c8303d12157aa0b66f176979257486c57b19cdca4324882d8b8fa6971eae3093169cf43edf96ce56211005e6ab6793","ssdeep":"","tlshash":"32f0598157b04a66c12857fcc06b1c03b684403b4bcc4bf1d1798a386b3a6ce8a99ec7","size":527,"data":"","first_seen":"2026-08-28T13:30:26.590045Z","last_seen":"2026-08-28T13:34:54.934744Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gljcfadfy6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"9679c951cb2bb4c1a26c37df98035411","sha1":"9970431a5a06bf125917b9d2f3c6daa247c20937","sha256":"dd19e883aaae952f41c6e7411e2ec976e518af875339096453e811cdbb1a6dd8","sha512":"94c5b6a1804c9bbad7f752388ce3682f8861add29bc62916e8d6aa9bb446dbbd1a6874e21c833814d61453e35677af5a48d0a45a7be3fb9b699058b0707dc2e3","ssdeep":"","tlshash":"81412d49f695555086a91668c077061b2333293207c9527cb03c9ed9bd68a4dd2be8bd","size":2054,"data":"","first_seen":"2026-08-28T13:30:26.431815Z","last_seen":"2026-08-28T13:34:55.03465Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dbwzgkg1ci.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2525dd271696d50266dd2c977b9d0b17","sha1":"f48b5c7a3c83b516aa985e85f1e5545660688267","sha256":"6cf421f788a35332b49f5ab53862fa91d13ed0a147e427271170f1508031cf45","sha512":"a9287b58c9de5c0df243f2ff446b02243c0e36fd6625198de5c21a73dff4dcb5915af02f9154bf16faac9d7b3b5624022c3e3f38e3656b9e86029e223cccb6c8","ssdeep":"","tlshash":"8a11909c57b44906b02117ad8b1a424237f1a033a7fc0f68a279473769d4d59c518ef7","size":943,"data":"","first_seen":"2026-08-28T13:30:26.671154Z","last_seen":"2026-08-28T13:34:54.755124Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.on48lmggqw.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2c832d1f96f4ab746fb128d4711b1a0c","sha1":"4cabb1bc7d19652a74583e67b670bd114f9df987","sha256":"485b739ec1563ef0ad8cf44a9200ba5ba629818aa5e948f0d93573f5627dc49c","sha512":"5f9f756294219dccbc242cc4e1f9b8369b44c194825647f521b2993bcf6f4c5e09bb9c88c05f372ff7ddf6452cb9c469a927fd8448d7c5a7a507750470129c96","ssdeep":"96:zZs3BpU/ueY6RQJPJ8Z05CNbH8COL3eGzGGmaLGGGGms+bH8BNdGn35Vf0d1/DRt:1s3BGmjrB8ZNeZLqaomBNo5Vf0d1/v","tlshash":"21b195d272f6d43cb6c424edd456522be31218ba3b8581bc797c9cdb261e08d42bd935","size":5226,"data":"","first_seen":"2026-08-28T13:30:26.697081Z","last_seen":"2026-08-28T13:34:54.833276Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gcoznn0m00.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"fb82c4b17c6d97a65d8b6b07fed2ae9d","sha1":"bcdfd9e0af21933368ab68fef3f5d7b93a997b5a","sha256":"ea0d78c1512c1324721e195ce454b6c326d9401ce55bd2f557976e4c8b79fead","sha512":"634fb27b6cc8a54fe350b30c4b7607e7332e812250134e48e462bea4063c3f38ea1568d5dc53bf64991f2c9ca2387c0a3dd940d5fb9750a999fe3d3a254ff732","ssdeep":"192:kAOMV1E1P7zoGtOcnYUta8RF2n2OERBPUYzDaLwLVZiMFtmaTZu5zfryTu4zw6oz:kAIBHdYFqpDaMRoMHc5CTj9fqbI5d0","tlshash":"a54252893915d9f6c5b6a0387de51d02017b0bd6b7b300ec32dc0ef607d958aaa52fb6","size":13064,"data":"","first_seen":"2026-08-28T13:30:26.557704Z","last_seen":"2026-08-28T13:34:54.805157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hezb7ksgm1.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"cd81b1e3ab87d81737b9a4626bebcedc","sha1":"c3f1ffbce937c01ed223640161cb1ba47f5e461f","sha256":"9b49878095d00868143e57dfb363011d2c39a1da17a27ed6228222dd36cd6e0e","sha512":"12406b2c64f99ffa4f8847b67543b94372e6fa1089e3fdd9f2223bad871e1aeef60b3c4249e7e6b357dab166640ac42cac6f9f9a051c88064d79936aa8182d2f","ssdeep":"","tlshash":"b811ef9017b04ee9c1161bacd62618063eb418bb9b9e1760d2b40e3c7a255d8c58c9a7","size":1015,"data":"","first_seen":"2026-08-28T13:30:26.558923Z","last_seen":"2026-08-28T13:34:54.978634Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/openid-modal.js?v=80619001","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbede946e21da33743b1a368734c91ea","sha1":"3739010c52410ccbfd5117112f5cbda97a6912c7","sha256":"b451392fb02041724cd51e1c02d7d908d14e5bcd3e7eb745777f355c8073aa57","sha512":"be6f5897e8aefbf41ae8fa9245105ba0cfbea8dd8897dbfe0a72e7fc36197858b1f4b1da08c32a44d500f1ec9202c66cd77f1c6596eb349b218ee794c577a356","ssdeep":"1536:Cubt0kFxpwOXBk79IPw47QsuP47kh91Rb:Cm0y6ORmEQs8x","tlshash":"4c53a468b8e310b6e43f213e8a9f654c70394117240fde51799d96a00f9856f81fefea","size":64334,"data":"","first_seen":"2026-08-28T13:30:26.349755Z","last_seen":"2026-08-28T13:34:55.032283Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.hgho10tacq.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"460470b6dd46cc2cb5daf6d0627dfddb","sha1":"e6aad4fbfd866efa551eed6a85cd434c1c30a191","sha256":"7c4c1f81bd79940174b2b65811203b588d4008083692f387d7c94d4d4151db47","sha512":"9118988706dff8c7e791109b97c50de7a6582f026810d2e8041a5c64ed38216eb7a91f13c86973748452c3db81f95bbdb51d4a38e5189fecc228617e08af4ffb","ssdeep":"96:o+BZvoMFaq+/YSLjemJjrJYXcazKdKTZkdCB:zvol/9emRJZazeCZuCB","tlshash":"eaa193b6f011b8b6d26654e6d03b843433316729b24985e0e1be980e1e65692e127eef","size":4790,"data":"","first_seen":"2026-08-28T13:30:26.620457Z","last_seen":"2026-08-28T13:34:54.962774Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g88cpcsu5f.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"980734df4f3867fb8ece65bc35b73e7f","sha1":"da3ac39c196c9a07bcdd338b176fc82ec233bbc6","sha256":"4f71ad0b3eaafe040f559873b39618f702640d87d4eebf5c2204e78f2e969525","sha512":"2553135cd6f8f25982f4370ff6ea4011fdba2150df8bc37d2ba0b64917fe3afbac5abe4e36b55333dee9597ec6f122d6d949073c359a93f140f0138d43c93840","ssdeep":"","tlshash":"a7517856e27da13243b421f9e0b42062b16c19b7762b0d64b53c0deeb4118cdb5fea57","size":2582,"data":"","first_seen":"2026-08-28T13:30:26.588162Z","last_seen":"2026-08-28T13:34:54.676728Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bblm6p1dpa.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"58160a203643fd2973c724e217df7520","sha1":"61ad4b2a82eef7da3214b43d1bdd22ef3cdfb77a","sha256":"3cb7411993ffe75cc9196311feb15ddb44db72b5c9f05958a93252f570ffa574","sha512":"09c8a0c335b4cfc3e3136067dcfe761ea2f9c763a596cd2d4ff2f1494c678514f8ef48a4391307e006166aa43a6189ed36f3d159f6960703fc1b2247ae7df304","ssdeep":"1536:iEvxeCIISv9sTYQ1NnmYC1UalCVTmyJXsAFvdN/IfUMQc5Jvk5yQ2N:i2QCAuC9kI7zX","tlshash":"c8531a88b1d1f0b156ab41bac03f410af33b3e59a44e9510b179d9dc3db4d95a22bf3a","size":64623,"data":"","first_seen":"2026-08-28T13:30:26.187627Z","last_seen":"2026-08-28T13:34:54.669868Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o0b4vauszm.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"b5c5330a640680f50b2228e601f8c2d9","sha1":"d971fb18cd8c890323b739415c10b47ee4988790","sha256":"d9cf280476ee3ebc23628870e3f12c7e0f3bf1b7817c042d58c8fb18bd16f044","sha512":"a05e7b3227ddf508d92aa585c65446a5f78444b3c44f8f2ebdc45cf968aa1f5bb15bebee1355f0ab4b437245b295ab23bd2f2314449e605b14ea14948cffb404","ssdeep":"96:+XS7uXCtX/NLnMOIJzgWd+33de0B76k4GB1/wwmtmp9I+mZ1Ir2CwNOFk8J0BHFX:ajXsPNSdw3xMkh/wwMSmbCsOPAlX","tlshash":"7bd1730f0fa2de35b256e72d930959011ff6d403e3fa5a5aabc8838588e6c71654c737","size":6340,"data":"","first_seen":"2026-08-28T13:30:26.294287Z","last_seen":"2026-08-28T13:34:54.709615Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hv7qce4qgd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"210f06e27fc5b4c4ac6ffddd00ae5450","sha1":"86f1c0ffbd369df545b56ed1ee40bdb732f009ff","sha256":"8c2132c6906e0156aff360674f22e5680cb4a218b04e4e95c32188dd50a635f7","sha512":"6a72dcf1a5b640947926720dcd1452c88f3e1f267f8222e3f94f5d7b594b9e5bc0e0ed6e88adeea0880707438352e561098a2e62133133406707c436db535999","ssdeep":"","tlshash":"5a3144d6103498b7417de1fce81910131258247f6fca8fe9f86c0ea99f569cb46189ba","size":1682,"data":"","first_seen":"2026-08-28T13:30:26.226818Z","last_seen":"2026-08-28T13:34:54.964141Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nhz0k8zze6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"19ef17680221bb4314cd93ed9caf85a3","sha1":"ade9627623c074865dbb0b29ce6df677ad745c9c","sha256":"f63953b9efd1c1a103a657d4c9f778e34c8342b58fdeeb5834801ced8f3ca1e9","sha512":"5ad9f9d63a028d63def7040031906398491ce07d386611039edda8e678473e4695ef2bf61b2b09dbcc0a4bb46270480476470c9147972703a77de3b814e0b35c","ssdeep":"","tlshash":"f1f02b590bf04a45503923add5664402a3e04c3743bd4ff7a03d473a696ab894248ab3","size":524,"data":"","first_seen":"2026-08-28T13:30:26.628372Z","last_seen":"2026-08-28T13:34:54.893451Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nw4vujhshs.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"introduction_type":"importedModule","is_inline":false,"md5":"2b26a097845b0b5dcaad93375d7f0194","sha1":"f44743ecde9c007f6056dd02c148e61454073004","sha256":"0dff2cabb8d116db008787dba97909a25e89f7f098be2652fed2f8ad76565625","sha512":"6a4a5a9165d09c3cea04a993cddfbaf75d98b5186f8996af256cfeb83183069669d157f94692b4a125ce35ada8483fed0c94ce4b86c695664ba8f15b814383e0","ssdeep":"192:vNh2VjCmtv5CmfrccIg1+sRRILHtPSZxxmrz31:6Dt/frccIg1zRCLHtPSk9","tlshash":"04e18494b0e4d669766a80d5c4be194dff2c0948e65c79c083fccaac3be026d5dd8726","size":7411,"data":"","first_seen":"2026-08-28T13:30:26.15027Z","last_seen":"2026-08-28T13:34:54.67595Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jgtwan9txk.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.463Z","timestamp":1787924038463,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.jgtwan9txk.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4446-10a4\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8436a6d114349c96d915aa7eef1e1238\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4260,"size_decoded":2907,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4259)","md5":"4c58ddacc60dc8db3c77b73b78da8008","sha1":"9a9ec71180c7515766a506a0f13283d3ab2011cd","sha256":"501165284eb1e5d6865f2c4034f85c3e813c9d4931e656953ae8f0628cec10c4","sha512":"617c31b31698bc1bddfb664b6fc9b84fcc24477b073a68bcf3313a3ea01c1fa67326a858c8f4283db603f982bea63f55a45ef2e67dcf2de6a4600cf6742e7665","ssdeep":"96:o6GCLDelG+2qVC3CJ794nA7gZFLf3pjXkFJtPSvQGvpHkHRvn:ZGCLt5yJGn3FLqa4GvpHkpn","tlshash":"a59174edbf748ae4988823f9d75615c9ba5da8ff47930934c29c0d19b0536ccd91d883","first_seen":"2026-08-28T13:30:26.171754Z","last_seen":"2026-08-28T13:34:54.64406Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.pfgwroww07.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.507Z","timestamp":1787924038507,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.pfgwroww07.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hgho10tacq.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443a-768\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 79a92f9c76ed5d939ae372de9f75df00\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1896,"size_decoded":1972,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1895)","md5":"fab9bee59c405fb9b6a43be2c2a30ced","sha1":"1ae15da5269fb9a36669754ab91c8f226cb53422","sha256":"0c306e1fd8c9bbdefcad9ceac68be954b404644232b77241f52e644af8a5f191","sha512":"bfeccb32c71fa690f53595f49abc1aa9f0e1186e2f59a12c368eeb5af74f902fcf91f65f8c6aaa7d015ddc22290bcab0137690aebe2c774f93d6c0cc23b8edf1","ssdeep":"","tlshash":"484152c631d0e875c14905edc93bc02ab5351a3e328e5aa091ad4c2d2e7269ac822b9b","first_seen":"2026-08-28T13:30:26.175126Z","last_seen":"2026-08-28T13:34:54.646785Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lttyv0nzqb.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.975Z","timestamp":1787924037975,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.lttyv0nzqb.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4424-266\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 643648a532b0a60a3e9731ce7eba8b89\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":614,"size_decoded":1291,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (613)","md5":"a57d36bd426df44a06d9d91a2212037b","sha1":"939b4d692cd850b55a625c7cf9a4fa3a468c4d2f","sha256":"56cbfd5d258ef222ad3b8a501f30cfdcb9c5c00b98c87c2062ecd31088eda787","sha512":"ffaffcf0d358c45ee57ac986b12621c5b543ea3e7a514f0c02692e597bd82b6055096c8ecadb676808f4324ef602d01e9632441e2fa081b0f91cc0113745724e","ssdeep":"","tlshash":"e6f0a28aa7f0a551c26b137cc46b1043b558563b579c8a71e138c6387e75a8f8619fc3","first_seen":"2026-08-28T13:30:26.693615Z","last_seen":"2026-08-28T13:34:54.649388Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o5xyd37sd6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.466Z","timestamp":1787924038466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.o5xyd37sd6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4446-1f3\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 75a479b35861b89e70c9289a759d86c4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":499,"size_decoded":1230,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (498)","md5":"3214d8381634f6596a957dfd3b41a236","sha1":"fbbf4ad1c78d2a0222b32d1e3fdad6e13121e79c","sha256":"153fd5f6ac730df187c37063d4528cb8ae33b8cd2e38623d61eb2a943804a31d","sha512":"791e77c7cb6cf99def187512776927a4185e8e79f20e06fcbd649b32b387e15170d7529c09e47825ea95a04c1ad07ab34446c0411ca6edd0cbb99c0cccd7f32d","ssdeep":"","tlshash":"53f0278d0bf05a26502e23acd16a8242b3e4443b57ed4f71b27c473a6b95ed9c68c2c3","first_seen":"2026-08-28T13:30:26.608676Z","last_seen":"2026-08-28T13:34:54.651701Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gd2d2f7ymr.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.502Z","timestamp":1787924038502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.gd2d2f7ymr.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.efeo8lfgd8.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4420-687\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b5a8b3b825bb5321ade5445a4a583425\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1671,"size_decoded":1877,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1670)","md5":"033328b8a6fdd4efb8ff999c701edda3","sha1":"f9613cbaebca51948845d4f25a8b034903f6042f","sha256":"9c8e9b2615184b61f1a135e21e889e81744ced1e03b1ab82b560276142800589","sha512":"cdd1be414144bc033d79c3da88e3a9b9d689f9c764d146b391c92c51f2e1aa5017e9c21d9025d7a48b4ea54d3725923085a164252d864fda0e6eaf10766aac73","ssdeep":"","tlshash":"c73196817ae47aa8d25911ee803a4121f7652f3f634c4562e0f8cd2eb3b1445c23678b","first_seen":"2026-08-28T13:30:26.281066Z","last_seen":"2026-08-28T13:34:54.654108Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nldkdc1f1i.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.624Z","timestamp":1787924038624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nldkdc1f1i.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4439-6d3\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 66f8b4d5781ac9b5e55adfecb2b7a6e3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1747,"size_decoded":1707,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1746)","md5":"0eae0744bf5f0e43682ea747b0c73466","sha1":"4254a0d5cdc185d05d7871d8db9ca8b2f8e8e6b7","sha256":"b898a417e9c432d23efa232f4cb4aa5785f8a8f3e88641b8374a2c8b2cb8fa7c","sha512":"4e50b02b0083a8e99c3306920413266ccbfcff93b7c50da2499f7581cab21df513f91a5fc04d6a80345f381b46396725707efc745f22c490449e770c66e6ec54","ssdeep":"","tlshash":"1231167bf5f2dcbec41e224dd6ee0405dbb415afcfd92d50a1bc860865313918659b43","first_seen":"2026-08-28T13:30:26.143723Z","last_seen":"2026-08-28T13:34:54.657591Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://cs2go.money/ws","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cs2go.money/","date":"2026-08-28T13:34:11.218Z","timestamp":1787924051218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cs2go.money\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: DUa0cFeIyn0KAumtAtl6kQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039; currency=RUB; user_currency=RUB; locale=ru; user_locale=ru\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 28 Aug 2026 13:34:11 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: BunnyCDN-NO1-830\r\nCDN-PullZone: 6131853\r\nCDN-RequestCountryCode: NO\r\nCache-Control: no-cache\r\nCDN-ProxyVer: 1.62\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 404\r\nCDN-CachedAt: 08/28/2026 13:34:11\r\nCDN-EdgeStorageId: 830\r\nCDN-RequestId: 0a593fefdca5713537bac55e4e74ff50\r\nCDN-RequestTime: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8cBTLN1F4TowmFu4P4xaxkIHjMOrhs1CLjo5FxCj83XxN6Cs_6upWUKJ3_PLShg6SL_RjttqUSV6v.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.777Z","timestamp":1787924037777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8cBTLN1F4TowmFu4P4xaxkIHjMOrhs1CLjo5FxCj83XxN6Cs_6upWUKJ3_PLShg6SL_RjttqUSV6v.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10180\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295d8f-27c4\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ad6d9f63a571938a4f818b5690fbf7cb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10180,"size_decoded":11083,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a4e0ce0464ba72d5a836aca68647612c","sha1":"354d8fc23edfb7b0c4ee01be6cf076110e6626c4","sha256":"7c451eb06b7a2735fc643e66cf3d505cc185ba08a28a4852a67626e08e0f04fb","sha512":"3b6919058c34729e2e1a0ddad0774e5ca9956626656a69bb389722d5ea14ebb6842d039641350089c16cd1ef2d46aebf9544560243a607b99ebe1430056e0de9","ssdeep":"192:1agoJWQw2vfhcuqHp91PfhJM9RaUcnnEqjeYikVN/qkiR8KLgucl:1gNU1hycEqSYikjMb9cl","tlshash":"1322af17fc5a1940c4267e7806a3a33e86747e9fb9711bfb0bf60156fce6c290d08662","first_seen":"2026-08-28T13:30:26.53298Z","last_seen":"2026-08-28T13:34:54.66102Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ohk0xgtq8l.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.954Z","timestamp":1787924037954,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ohk0xgtq8l.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441e-11372\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 41b8b6fbbc16311f46fbaed7ec55cf80\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":70514,"size_decoded":23292,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"41fb39a8d938c8b4433d0d8a9bc21aa6","sha1":"e16cf982141e97eee094d581b456947234e94afd","sha256":"02472a46238953c4d93b5dad7de8770f3e9920f3feff5e6ff5902f8c5990ed25","sha512":"724a27c1053b76fbfcca459744e73c8222663409a441d6bb4763889bac9063b89d2e3ef57b45a6ec7d865050480a9857f82069384aaafa9b611e05af7454cbaf","ssdeep":"1536:iSshSg5D8mB4xsv3fOCptEk09iU4np2a3GjD:iSsP5mxsnjtEk0h4p20i","tlshash":"6a6370cdb2d2f0a143e7a1b6802f110bf33a7a55184c8168f666e4d57c7845e92bbe3d","first_seen":"2026-08-28T13:30:26.182671Z","last_seen":"2026-08-28T13:34:54.662561Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dt40upr4l6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.646Z","timestamp":1787924038646,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.dt40upr4l6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4452-1b3\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 68ae3f72fb6b61209a8a95e0f543e66a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":435,"size_decoded":1185,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (434)","md5":"3a6c456e6662befd3dee6b78b9c64bf7","sha1":"7188512fc0b7948834be30cbe0fc541e00326c7d","sha256":"ca3bcaa795d9e4a8b6bbd931c7e08bbf98b631ea2af221c8777d105640a4c994","sha512":"b6a420833ee261f5d3a73318f213a207853199daa098813b59d6fa655d98d83b52c52a45275a2d059b36afac6cdde5696fb04d3df84b87e17e3ce931a9c308c2","ssdeep":"","tlshash":"4be0ec554bb05665802a63eee126010369c9823b4bec1f71e17c463d7a55ec9860cb83","first_seen":"2026-08-28T13:30:26.209438Z","last_seen":"2026-08-28T13:34:54.66407Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y4OCqV6VgH_ScHnecxPxJoOloXCzgqhEutDWR1N38IiqfZwd1CMF5EeEOskaxlNWxNeLq5gCPjIJNyn322ykduH054-ccEf1ylmda9Aw.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.791Z","timestamp":1787924037791,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y4OCqV6VgH_ScHnecxPxJoOloXCzgqhEutDWR1N38IiqfZwd1CMF5EeEOskaxlNWxNeLq5gCPjIJNyn322ykduH054-ccEf1ylmda9Aw.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16200\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295b92-3f48\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e2240e061fafbee3fd3b752903d8e3a9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16200,"size_decoded":17103,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ecf7d689829eb70bcb605dd9a0e825b","sha1":"700ddd381feb78acd9573ab06aadf9065ccf405a","sha256":"c6f3d0bcef06c5beb0986b16d541f325158100e7a82912dc5e93bc8cf0922f43","sha512":"ca0667222bc7e2e47847ed609ae17882f1a90aded090a399738b9e75b73d545e5d5bb2cb2eb4b51ff9de4b109810476e9d5779143269cfb3341ed38139d7eb55","ssdeep":"384:sSKE6o0u0B94fz2gc5SZAqOvgAvfwsV1G6Xx+GfLIKCe1/PKdl:s35Lu0B94i5SZ2B719XENKC0/Pu","tlshash":"9f72c0e9f12ae088c717363d3c684fff58e540583369f2058d9e9b10b8a595da9bd8d0","first_seen":"2026-08-28T13:30:26.289975Z","last_seen":"2026-08-28T13:34:54.665428Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%951/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/find-your-perfect-skin.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.285Z","timestamp":1787924038285,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%951/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/find-your-perfect-skin.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 51106\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a291283-c7a2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c925037a0a7bf33fbd55a602dd000a74\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":51106,"size_decoded":52009,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a800d64b52800a6e67aa5070d90a6a38","sha1":"1b33f43a45a2a6fc80800f09f10568a27d583a6a","sha256":"40436b14fcdf0a8baf04f688a90c20fc87a3df37e310dac79b67a2e6debb5e6d","sha512":"54b19e6868456c74d02fa2a2b400412dca1ed78ec7951a5842b7b4e3b6bb5f5ecb37e6d57979cc32a61573a2de45c5a9cff362aa5c1dcb194be74cf7ae8bc2ec","ssdeep":"1536:QlE6Y86sVFgPID5uUBXrPe1Lq4+San3zgnSMPwr:L8gW5uUhrqO9n3zG/Y","tlshash":"4233f17686183284f08f58fa22e63a13e394065718177377b9a9bb4d24c2643f51ddfe","first_seen":"2026-08-28T13:30:26.507869Z","last_seen":"2026-08-28T13:34:54.666886Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/cdn-cgi/challenge-platform/scripts/jsd/main.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.423Z","timestamp":1787924038423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: no-cache\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 404\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 12bddcb85e405553d4fc55fd2b666c9f\r\ncdn-cache: MISS\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":1006,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-08-29T16:12:15.248689Z","times_seen":21103,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g7i76i7fal.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.450Z","timestamp":1787924038450,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.g7i76i7fal.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443f-293\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c96f07da31428edfa9595ebd72923b58\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":659,"size_decoded":1328,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (658)","md5":"38976477438d811a574f5e89fd05ad08","sha1":"d9db8f866176c4283ef0ce333a3ab30ab9b0cdee","sha256":"75e74daad04eaa1aeaf99ec62bdbb466bd9a1e6be0a876a4cce3222ca2b3f983","sha512":"7a78d9879cf3a5b054c2c5b483e1bcedfa2f87adf4e4faa8fc8cfb76e88c2138d9c04ccc5200a980885c66c0f136a6641d3fb4b0eaca03bb30cabfe89093732a","ssdeep":"","tlshash":"cf01d3d926f015188029179dc03642077259493783cd0eb1f17c8a39abb7cd6c55cbc7","first_seen":"2026-08-28T13:30:26.568588Z","last_seen":"2026-08-28T13:34:54.668819Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bblm6p1dpa.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.485Z","timestamp":1787924038485,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.bblm6p1dpa.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.cdkddogwm5.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4425-fc6f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7c91ea76a74be19763b3a0e5d110bc9d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":64623,"size_decoded":24282,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (64622)","md5":"58160a203643fd2973c724e217df7520","sha1":"61ad4b2a82eef7da3214b43d1bdd22ef3cdfb77a","sha256":"3cb7411993ffe75cc9196311feb15ddb44db72b5c9f05958a93252f570ffa574","sha512":"09c8a0c335b4cfc3e3136067dcfe761ea2f9c763a596cd2d4ff2f1494c678514f8ef48a4391307e006166aa43a6189ed36f3d159f6960703fc1b2247ae7df304","ssdeep":"1536:iEvxeCIISv9sTYQ1NnmYC1UalCVTmyJXsAFvdN/IfUMQc5Jvk5yQ2N:i2QCAuC9kI7zX","tlshash":"c8531a88b1d1f0b156ab41bac03f410af33b3e59a44e9510b179d9dc3db4d95a22bf3a","first_seen":"2026-08-28T13:30:26.187627Z","last_seen":"2026-08-28T13:34:54.669868Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k7k444gvlj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.600Z","timestamp":1787924038600,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.k7k444gvlj.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444f-6c1\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e31d6453a0d5534fabd2d61a6c46e9e9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1729,"size_decoded":1821,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1728)","md5":"d8db4f03385caa23036864b4d4264c5e","sha1":"d5073c1ee7bd914ac673cfd1b775ed5f5ce3dfd0","sha256":"be7e454caea2c494b8c0707c7f8d88b9df3513424df24ce8523dd145f015f685","sha512":"73e21bdbcf7285c4fcdf9494f685aa6aad5b413895b60ec78cdd042463dfaf64a2208de0ddda75d4eb5d8a02b7038b0cf7ffdd80e00798e31275a8a2a6a72767","ssdeep":"","tlshash":"753123f776f40bd2404723b8c6665213b1ef3879afad473042389a9c12255f9888dac2","first_seen":"2026-08-28T13:30:26.447415Z","last_seen":"2026-08-28T13:34:54.670902Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k3f8bi0eu5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.652Z","timestamp":1787924038652,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.k3f8bi0eu5.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444f-490\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7924bdf386d65046534295ce836c8c14\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1168,"size_decoded":1620,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1167)","md5":"03afc82dae170b66e04a47082e9b35d4","sha1":"fd538eaf896946ac1a248dff53f6a24a31414945","sha256":"086684f0b1fa3b2f0be12534e242d7cbddcd8d01799000e9c007b682a2816b83","sha512":"dfc02dd56699a7d80d6dd8c99dc82ecadf5ac1c5cdcad71cba1c3671c286cd62ce0c65a55518f1f23ae25dd917a4170e7cc4a6e365fd694e4cae747e02c001ef","ssdeep":"","tlshash":"b32111e3237014dcd01c93bcd61a64833a84207bbf5e4f68827c1a7eb7586d9494cd8b","first_seen":"2026-08-28T13:30:26.489433Z","last_seen":"2026-08-28T13:34:54.671833Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJKz2lu_XuWbwcuyMESA4Fdl-4nnpU7iQA3-kKnr8ytd6s29Y6FhJeScACnDkL8j6LU8GS3mwUh24G-Bno2tIymeblMgC5R3F-ECsBK6k4XuN-Lh-UWA3P3GyEv9.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.763Z","timestamp":1787924037763,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJKz2lu_XuWbwcuyMESA4Fdl-4nnpU7iQA3-kKnr8ytd6s29Y6FhJeScACnDkL8j6LU8GS3mwUh24G-Bno2tIymeblMgC5R3F-ECsBK6k4XuN-Lh-UWA3P3GyEv9.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6556\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39363\r\netag: \"6a291233-199c\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:33:57\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 07a4357521e9ecc50c48eba53a0ea86c\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6556,"size_decoded":7459,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e0da2f5d7703577be61f5f86be120dea","sha1":"35657ce089f85d07c7cbc175a3dca43e548f4d54","sha256":"3012b8680b6dad89835f5d03da9d39c19258ec58455b0320a4a7a74e008467e1","sha512":"8bb34fe74546120c0da258da25646a30a36eb0da75c37128a77a737e3684a433ad919038f6d1d5f4a0a29d2d799e57ad13745eef34d92bccc8f4eed3470e88fb","ssdeep":"96:1CJskFKiiscg8T67rc+B1xjEinQRLVNH6+Z28nqKllwnCyXaWsaAUjywqUrL/3jm:oOeKiiM8x+9CHCClwCGuaASXv/3MqYfl","tlshash":"95d19f019da511bbf0a6a4b6dcd63f3f5750fda50309a06db3c404447990b7a8f3e490","first_seen":"2026-08-28T13:30:26.470138Z","last_seen":"2026-08-28T13:34:54.672642Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bt9uynozxh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.995Z","timestamp":1787924037995,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.bt9uynozxh.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4429-1c2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d77f7f810263cfecae04ea0802b072f6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":450,"size_decoded":1206,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (449)","md5":"761c7e03d7c8ff2ebc7c0ff98ef5b636","sha1":"12aeaed3ef3c54166cb68dc7034cc4e315a213ef","sha256":"663fe7d2aab2aebbb0973760dd40dafb668a86990e36fb78c7b3d67ffb42fdaf","sha512":"a5d197af69bced0fd54e5fea392c00b80f29ff589dcf789bc8547de0d1e41bff170e0043bc51a359a1ad0e05dd6456b77144575c32a490a3c3535975d44b136a","ssdeep":"","tlshash":"e6f0a7955bb00625402d17fdd16a020361d804bb87cd4bb1e238893a1655a97895ca8b","first_seen":"2026-08-28T13:30:26.662705Z","last_seen":"2026-08-28T13:34:54.673793Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cygsolncnj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.441Z","timestamp":1787924038441,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.cygsolncnj.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4451-10ae\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 03430dc61634d586d392c8705f505559\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4270,"size_decoded":2630,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4269)","md5":"c24975747c987b17d57968d564d4ab94","sha1":"2ae09b911afc3991699c70e1cbb797a7e0efc14c","sha256":"76815a7c9198c6c75fbbba9524c9e24635919e6bff30a9a7f05aba059fb4e3ed","sha512":"fb6e3447006ae467a2d818e8e23842ae118cc3ff1610430ba957b11e891b81e25bcd66a63d5d0928f64f36f9acbc6a13d71e358a03172dab765dc44ca40673a6","ssdeep":"96:zFRqkUmKisjNvin6FkEcpMupLqiowHek6GrzZU+5vBUqtFsM:xCmKisjNvYYkEcpMupLqi9HelGrzZz5N","tlshash":"bf919375b2b4157a414fdafee41d0063f3192c329a991148f6dd8ffb26238888236f75","first_seen":"2026-08-28T13:30:26.604654Z","last_seen":"2026-08-28T13:34:54.674501Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bakpcadppu.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.645Z","timestamp":1787924038645,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.bakpcadppu.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444d-2ff\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 853a839b6bb09cf271f8bc2470b5ce7b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":767,"size_decoded":1400,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (766)","md5":"caca88e8e210adbf2ed173e385dd3183","sha1":"560dca93780a029e2d742530af891d3764b4df99","sha256":"ec6431702663a2f5b91812d5deea2dca0d7dffe43df96e521a42e91133e0b2c2","sha512":"226ceaa16856893d30de1ed6829e08e636a398baf4d798d29ba26dc0366a2e4e6b1bb26533046895c92a508e036cd553b733aaa98556b8d9eab6ada7d17e0ab4","ssdeep":"","tlshash":"e701d0de0b714d62012d23fce47a1823b2a6407ba78e4fa0d43c0d3ca756d8a8815f57","first_seen":"2026-08-28T13:30:26.178074Z","last_seen":"2026-08-28T13:34:54.675203Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nw4vujhshs.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.667Z","timestamp":1787924038667,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nw4vujhshs.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441f-1cf3\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: db3d5fb813055e9212f91cd0d6cc81d2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7411,"size_decoded":3823,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7410)","md5":"2b26a097845b0b5dcaad93375d7f0194","sha1":"f44743ecde9c007f6056dd02c148e61454073004","sha256":"0dff2cabb8d116db008787dba97909a25e89f7f098be2652fed2f8ad76565625","sha512":"6a4a5a9165d09c3cea04a993cddfbaf75d98b5186f8996af256cfeb83183069669d157f94692b4a125ce35ada8483fed0c94ce4b86c695664ba8f15b814383e0","ssdeep":"192:vNh2VjCmtv5CmfrccIg1+sRRILHtPSZxxmrz31:6Dt/frccIg1zRCLHtPSk9","tlshash":"04e18494b0e4d669766a80d5c4be194dff2c0948e65c79c083fccaac3be026d5dd8726","first_seen":"2026-08-28T13:30:26.15027Z","last_seen":"2026-08-28T13:34:54.67595Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g88cpcsu5f.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.475Z","timestamp":1787924038475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.g88cpcsu5f.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4447-a16\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0e10fd2e05d0d5abcadaccadfc6ae2c5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2582,"size_decoded":2227,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2577)","md5":"980734df4f3867fb8ece65bc35b73e7f","sha1":"da3ac39c196c9a07bcdd338b176fc82ec233bbc6","sha256":"4f71ad0b3eaafe040f559873b39618f702640d87d4eebf5c2204e78f2e969525","sha512":"2553135cd6f8f25982f4370ff6ea4011fdba2150df8bc37d2ba0b64917fe3afbac5abe4e36b55333dee9597ec6f122d6d949073c359a93f140f0138d43c93840","ssdeep":"","tlshash":"a7517856e27da13243b421f9e0b42062b16c19b7762b0d64b53c0deeb4118cdb5fea57","first_seen":"2026-08-28T13:30:26.588162Z","last_seen":"2026-08-28T13:34:54.676728Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k4vsfhxmy3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.034Z","timestamp":1787924038034,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.k4vsfhxmy3.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4433-2edb\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c075a6c94e9ab14d2a207bbff135aab7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11995,"size_decoded":5699,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11994)","md5":"e97e8455f34c097ff0e902139e668280","sha1":"cc2cc3bc95c31fbbde2b9f8404bb36a450d3e95c","sha256":"6758863ee58318ec2ea8948a5da5c1a73300fcfdd5d6fb2bb2cd54815409e452","sha512":"632f81ac34fdc5e7571596044e11e233e0d48df55a0bb2abc440c4088f9d47e417ce2ca9b2f0bd00a791e63dd96d0c49f6cde54d8ed65119d4a45b88d5050bdf","ssdeep":"192:oRm1vx+Cak4IG9DJQ5IZTYMGht/dUJWjLyI4QXANDDRKrFUYFiH2Cq9Fjd7Vpj:NhxOkBG9DfTYMGhvWI4QXANDDRKrFUYl","tlshash":"0b32f9f271b2bd7ac29640eff0365222b3185918ba45c4d0f23d59cf16b45c5ec27ab5","first_seen":"2026-08-28T13:30:26.633164Z","last_seen":"2026-08-28T13:34:54.677427Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.h4e8b3pjgn.js?v=static-mirror-2","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.207Z","timestamp":1787924038207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.h4e8b3pjgn.js?v=static-mirror-2 HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b45a4-a4\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f182b68f55208d87c890b3ff2eed23c3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":1070,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"8329a82b6a7bdb26198955f072c11694","sha1":"c0e2d3c5ff4a4752d05e160691eca607e77e45f6","sha256":"c2704a8e8a91666e4c73feb0abe223c7c556241f5759b98b174334552c492ca7","sha512":"c5d861eae28175fbd57fa1279fb2513eaaef5fa5597af1545d871885465d0fc7be682ada2306a17e1d32691b9e78a6335d80ea0e8c8c33dcaa3d80a2909ee7d9","ssdeep":"","tlshash":"94c0c0b6200fb04525133013c11f8d11d128064c3dbcb0330008818e393043c4a3fd18","first_seen":"2026-08-28T13:30:26.402641Z","last_seen":"2026-08-28T13:34:54.678542Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.hwho5z7gji.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.212Z","timestamp":1787924038212,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.hwho5z7gji.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39362\r\ncontent-encoding: zstd\r\netag: \"6a2b110f-12ed\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7ca6d9b32e708a187fa9ee0eb208f51c\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4845,"size_decoded":3019,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4844)","md5":"289eefc2c6dbe01cb090d2d8c5e2697b","sha1":"b16c2f35d9c13d96c86f78c0ea7be2047fdc3569","sha256":"3f937c842c40b83e63a96b144a41b6637c9ec9033c7f2f7be19fc423aa418a6d","sha512":"73aeb86a0d041722bb7587d94cf042c5f07d0130465c299aeb11d80743b1c423aa59d24e7aa752c83726ec6976ae98b7e867bf5a8714e03e4db68ba19b2adc77","ssdeep":"96:zmmsOrADnMKC8iD4sxfmt8jREGb3xAWaTviquiurhnL2Wdl1sixi:zs0ADjXQdjREGb3xAWEiLiurhnL26jI","tlshash":"9ca1ea7bd26098639081cdfbc405a3b61673146b67c1c778f0ee5bfa1b206a1d829a77","first_seen":"2026-08-28T13:30:26.564655Z","last_seen":"2026-08-28T13:34:54.679423Z","times_seen":2,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i010pdqkuh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.456Z","timestamp":1787924038456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.i010pdqkuh.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4446-6bbf\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 630555ba0fa1b633bc97a4f77fde3057\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":27583,"size_decoded":11194,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27581)","md5":"f649b8d187fb58b779a3fe6764ba49d2","sha1":"7f4a43c0a7b24fd7a733c025ca7ec6cd93e05db9","sha256":"0a7de96a93261c911a7cbbfa22352d331c56990f9d673f7eddfa28f0407a5e7e","sha512":"53481b1903a0555dbda61f1aee9850b9f6cc28927d4f5ebecd9b80820599fa46c2d562334a54d5ca8159c45176fd5a1670b4f9610076c93bbb94aea30beb0f21","ssdeep":"768:DnDK3iv3vIWZnhtOHEIYDAK1MBF0ycVburqmAo3AwMARn:DnDK2nKkGqbQRn","tlshash":"55c21c9cf124f2bd95eb95eec05e0805b6281a4de6288c90e1fddc4c7274991f90f7ab","first_seen":"2026-08-28T13:30:26.344566Z","last_seen":"2026-08-28T13:34:54.680707Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dulvth5hdf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.471Z","timestamp":1787924038471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.dulvth5hdf.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39362\r\ncontent-encoding: zstd\r\netag: \"6a2b4447-423\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 69fb057bcbfda33d020da96e4e2e1fde\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1059,"size_decoded":1483,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1058)","md5":"426882f4c2e35b4ef013595638a5ec55","sha1":"93c392fa1fc0d33b4f84fb0f1b5195772d3731fc","sha256":"b531f8885caccde0c83ea81fba75a5a77f64f9a0de888929de6d03c29c7d7ebd","sha512":"99667099d61fcdb2574ec3f9daebf469b328a425be1c53916aa4e26df8a9e9e121adc68a6c2dde6aed0aa03107bb892edd5b2eac9bbdc262f7ba4b14fced654d","ssdeep":"","tlshash":"bb11320e07709e6a20aa436de0aa101327fc6073077cc5b6436c0ff6a9998f40594a73","first_seen":"2026-08-28T13:30:26.634569Z","last_seen":"2026-08-28T13:34:54.681588Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mxepntabxv.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.474Z","timestamp":1787924038474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.mxepntabxv.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443c-27f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e84ead508c7932d42353f84b185f215b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":639,"size_decoded":1299,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (638)","md5":"9ea81bb5d615dfd5b1f594494f830697","sha1":"06ada6e635fae23264482e35727ac1bfd097d88f","sha256":"556ea552d893a1e6008e48992acff57c30a7f7dccb05f58539c7de21ced7479f","sha512":"40105cb19a1a36c8adf2cb37edcef7fbf5c5a88c9edef9abbe6f253e68fe301f3abe4fbac6f5cbd3dac7f4199d843bb43a33ab84e31d42f0a6a67607bdb4ed69","ssdeep":"","tlshash":"58f04ec92bb04566512d22fec13b5403a2952a3b4bdc56f1e07c8e362660987c45da87","first_seen":"2026-08-28T13:30:26.313054Z","last_seen":"2026-08-28T13:34:54.682691Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-6HJ4YYRYDQ","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.724Z","timestamp":1787924037724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:37:41 GMT","end":"Mon, 02 Nov 2026 08:37:40 GMT"},"fingerprint":{"sha1":"DC:E6:38:9B:82:DB:20:21:19:E7:95:FC:30:E0:F0:F4:BC:CA:9A:1C","sha256":"2C:0E:42:66:EE:BA:84:59:3C:53:EB:87:C0:84:DD:32:F4:42:73:26:47:8C:4E:56:F9:5B:47:6C:AF:BA:C2:F9"}}},"request":{"raw":"GET /gtag/js?id=G-6HJ4YYRYDQ HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\nexpires: Fri, 28 Aug 2026 13:33:57 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 173410\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":516772,"size_decoded":174014,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"1eb6391117af089b3afd1e3479ec757d","sha1":"4e2aa7da6316f72fc5bce51985d5827ed6b76499","sha256":"9869ebc10177c91e73f5b6066e72dac332b82f4a162e246a97cea7c50364677a","sha512":"fb2f1b8b07162a4fb7f4ddb6ba689a96d6321ab8b95def114c609fed785708c465555143ce583c3759bddd71aa81dfb48d350c35540ea00d22546d059e12eeac","ssdeep":"6144:rBsK6NcAu4706mInkRDuccUQ/xEkY3UchxEvO/iQcVk5P0jSHA:r+i1BPIUHxEYiQcAM2HA","tlshash":"26b4f7ce73c674229396f178903f018ba57b29a2b45cc89af289dce42e3455a4177f7c","first_seen":"2026-08-28T13:30:26.512591Z","last_seen":"2026-08-28T13:34:54.683894Z","times_seen":2,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":36,"receive":48,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support1.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.795Z","timestamp":1787924037795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support1.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 19774\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a2a2378-4d3e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9ba0269a2fbffc51d7d37e557c91a9ef\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":19774,"size_decoded":20677,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3bb1ce627da5e98acdafdadcbcba8499","sha1":"df3d66f2e462ce068b0710d804e5d0e6417bd99c","sha256":"6b0f24463e754e02507f5b65593b7bbc41dd6661423e9131133c3788ab3b963b","sha512":"fa7cbdfcf006290e408e4e8a290409222b901294aa2703ef661c0ef7f3c6e15c689109b4d8aea133f987db1d38278ae54d5c6de21bd1d6535d08da0b9de96950","ssdeep":"384:1VGZtIpPbk3kFR+ee4EXt6X4kizlKeX+8hEi//LJrk+wJl6so:qkPbP+eeBddki0z8hD//hk+wP6h","tlshash":"2b92e163c025dd61b42e82784a68ff41b2a33c0cd727a176eb1c291ff4560a7f15e676","first_seen":"2026-08-28T13:30:26.138626Z","last_seen":"2026-08-28T13:34:54.685053Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.h86ud2lzes.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.017Z","timestamp":1787924038017,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.h86ud2lzes.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b442a-23bde\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a3601edf4200617f59b1364f0ea3813e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":146398,"size_decoded":50061,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ff641ecefb539ede9635fe4e2e8b02d0","sha1":"4b5f61e39086d8d22063a83eb42dfc1ca906a521","sha256":"30522bc3eadfb3872fdd6942909d8e2be5ac317b5d85471d45dabe68e2baae0a","sha512":"d70c110385d9d4a31e7b51488047f656b4d13d7343e376dac54dbb64fed5399f1abd38d0af546c051107413e9383407b95ba37d3a8c47eec3c3d13ab55fdaff9","ssdeep":"1536:zlI7tL9ensQBUkZpTadxJbN1JLKbYB+42Z9kfV21NnpbZC2csoYYUDKk1J+8vzyg:zS7ZwnokydXbN6kBSdZCfYLrvhsqkC","tlshash":"efe307d472e2f07587aac0aa847b0207f73a3b48644dc51cb17dd9cd3868d85a27be39","first_seen":"2026-08-28T13:30:26.647573Z","last_seen":"2026-08-28T13:34:54.686281Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fzyrdbf1ul.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.601Z","timestamp":1787924038601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.fzyrdbf1ul.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441f-105f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 81bc60c0c6faecc4053da8b674edcac6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4191,"size_decoded":2871,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4190)","md5":"6ae66d9616e4fa0cf8f467eb6d2dd719","sha1":"1d141ff3b1de8bcb19cb115550e8cee5fa9ab84b","sha256":"926d8e539cc4dda9397c4747983c93ca53fba83d04a8f1ce9fe3ca8cc695a79a","sha512":"db2ae368af538aad4853e9a24c8b2af96c6d47f289c3e30ac3696880c7e2ccdb2908c484c43c6191afe35841161dc831b01bc4f82c64731ccf69d330cce6f1a4","ssdeep":"96:oHzWznCyi6PlqyKeheom550vtZUhdp6tGQUTuQ/kOqfVbkttSevn:uzWznCy5qyyqAdpDQKuQ/5CVbkbSwn","tlshash":"ad81a75033f894e61219829ee03fd906fba865bed62c8fd0931cc5ec7868544d91a963","first_seen":"2026-08-28T13:30:26.644429Z","last_seen":"2026-08-28T13:34:54.68803Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jt7vcxrf86.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.608Z","timestamp":1787924038608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.jt7vcxrf86.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4435-a89\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ab871f5346b64fd87c15cdb59168fa6a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2697,"size_decoded":2258,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2696)","md5":"4a585cc16a55b6c806f936f5760c9743","sha1":"01a7dd52a62ba880ff7ec9e7ae1a74c4127ecacd","sha256":"9367b510753d4734b3b5378d8dfb716428b8e68cb5383ea711789459e5d6ddb1","sha512":"8c006f1807f4ff5174d1a03a72435966bed1850f0f9d4930cb1223f8f8d8135b55b75066b198af471589bb4e4cd7cc5dc4442a5eac3672b00e76c1197e940efd","ssdeep":"","tlshash":"86518798b020e676511f3effd01f9009a2a1453a936c4ef3d0bd9b3117a10976929e1b","first_seen":"2026-08-28T13:30:26.685796Z","last_seen":"2026-08-28T13:34:54.692756Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLzn4_v8ydP0PW9V6ZsOf-dC3OvwPtiv_V7QCe6liIrujqNjsGodirBZlckD5B1FLMDtka7m9DuZL7i4ADf39lNxSqqjXgc5ihstrkAT-N7rfe3-Xhk.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.781Z","timestamp":1787924037781,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLzn4_v8ydP0PW9V6ZsOf-dC3OvwPtiv_V7QCe6liIrujqNjsGodirBZlckD5B1FLMDtka7m9DuZL7i4ADf39lNxSqqjXgc5ihstrkAT-N7rfe3-Xhk.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8546\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290c52-2162\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c771b8648e98d64fb09a85ad644d3cec\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8546,"size_decoded":9448,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a61ea52fea3d4503abfce3deaac23ce2","sha1":"fd65da270fde572c25f26d3fb37b785c442df057","sha256":"61ece86f8597a9edebb0d3bbed98ab9b7be3e570bea349ee5d82e561a74e930e","sha512":"2d10aafc784324dce32877d6a3c4ea7f2e8c871d2864ac0096f9691f06771b2134710fe09d28bef8007984a1eeea5b33dc5ca886d38f6d13959f766acd0a4e66","ssdeep":"192:hHZv2AXlh75YePmds70khW7+5SuWuoTacPeOnP7YETl:hHZZj75Yh6wi5SuroTacPDYCl","tlshash":"2402afbea3266ca7d1558234d821637d7748a0d2ef8c8b091e16fb522c53ea4593a390","first_seen":"2026-08-28T13:30:26.571026Z","last_seen":"2026-08-28T13:34:54.695082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dxffd1z63c.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.464Z","timestamp":1787924038464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.dxffd1z63c.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4434-1c0\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2e49d5cdbe3ffbf822d0fa5a3b1457d4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":1205,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447)","md5":"0557b6ecd232f122117fb74dda42da8f","sha1":"166cf8063fb125f4c097cb5dd9c94309a6062d7b","sha256":"480e4c8646f2ad36b03672cc8dbe93fff1e5adf6ce466e3be39fc827b5c4d827","sha512":"2a282d03c7a62945449bb467b962eb4305aff5dd441a05a8847a57c5ca35f61480d3625a33ef8a388e0de6c5c0251c8bb128dcff4857e611fd5fe437765c77c1","ssdeep":"","tlshash":"e7f05c9047f04a15911837acc23a4303a64505378b9e0bb5f3bc4a3a6a2879b85186c3","first_seen":"2026-08-28T13:30:26.302748Z","last_seen":"2026-08-28T13:34:54.696597Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nnn1p4w0nt.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.958Z","timestamp":1787924037958,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nnn1p4w0nt.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4422-3338\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: db9bef41e1c37bad6763d11c034ec2f8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":13112,"size_decoded":6744,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13111), with escape sequences","md5":"e7ff4cbd0e97107c14ef2cbc45661b19","sha1":"d8c700bef6d02e7aa07a52e12296a802888d91e7","sha256":"85dda55bf8a0be12132fdb20c1e04a1870a224404d85ad262449ac52e6a48cd8","sha512":"742100ba25dd119ac75cab0457c5209124544a05ccd85b8bea342c71b924112d9ad4d3c07687f7023fd5eb35590d30272a0cf17a04739c572d9c8ad40a845150","ssdeep":"384:R78/AXQqgxdTzJburixLYvisXEuhqPTJlyBYhYx9IBI:R78/+gxdTlbOixLeEuhqPXk+Yx9IBI","tlshash":"8442e9d434d5f0a983a394ea401f5001f66ece66350df5a8f2bee8a63c7588bc176f25","first_seen":"2026-08-28T13:30:26.50342Z","last_seen":"2026-08-28T13:34:54.698917Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://cs2go.money/ws","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.539Z","timestamp":1787924038539,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cs2go.money\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /ZdZWl1MeiAr0ckwdRbOuQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 28 Aug 2026 13:33:58 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: BunnyCDN-NO1-830\r\nCDN-PullZone: 6131853\r\nCDN-RequestCountryCode: NO\r\nCache-Control: no-cache\r\nCDN-ProxyVer: 1.62\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 404\r\nCDN-CachedAt: 08/28/2026 13:33:58\r\nCDN-EdgeStorageId: 830\r\nCDN-RequestId: 7a218eef05a14d0a35f88688599d71d8\r\nCDN-RequestTime: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support4.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.800Z","timestamp":1787924037800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support4.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18882\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a29124d-49c2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: adfb1765f404650684db550653a7b56d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18882,"size_decoded":19785,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"103e0342753e26a266895592ab9078df","sha1":"d8c0623768d446b39461e05fd9b56e6ed0cfc939","sha256":"d9bea7305b1e431fea468c99d7281f6370de945b6bbcf43f2693b26cdd807810","sha512":"18c1123acdce45cfa4fbb01123549c016719d862d73b74d737a8650e6dc41627843bd5ff4facef518ce17bc227dc4baf178a8db6e76c98a2e2f5aaa9aa0fdde8","ssdeep":"384:91cgSs43N6knB4JGit095It4J784b7HVEcLv071GREJQPGYLJvOjo:CNB4Jbvt4J7t31EcLWdBYFvH","tlshash":"b582cf1bebd0a583dc4b58bd8635a2e0422b3e28c8586718c4f58d9ebc0bf56d914e87","first_seen":"2026-08-28T13:30:26.522761Z","last_seen":"2026-08-28T13:34:54.701266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.nc0tcvei9m.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.222Z","timestamp":1787924038222,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.nc0tcvei9m.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b1111-45df\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fe2a621cd8abe1713c7fe03598705d19\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17887,"size_decoded":8964,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (17886)","md5":"828ec7635c9b5c4dbf7e36e62a86b51f","sha1":"67d61fde4013b9ff3d27bef58076f6295eeb905e","sha256":"455476688dca02eb36fc3372e08bff6a654ba8fb4e7be18020e3580f4e176e32","sha512":"2fe7c4141aceb0ab44a9d7a59bf92e8ed8dafbe7f665048300e701221f22269a07eec5d002b13037f1f811c091e15721db304a711f28c324e1452ff19e66ddee","ssdeep":"384:9glHbFz0CFA8DSsb54UH4WeBZ2cAhSSDr6wGfwoak4HmVDZZX:6Hbx0CFSsbw2cOB61fwzkZB","tlshash":"1f8219edaba28be99484b1fdf1025400746524ff6a80c5b8d3ec5e34a3d2590f6259f3","first_seen":"2026-08-28T13:30:26.586375Z","last_seen":"2026-08-28T13:34:54.702733Z","times_seen":2,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lib723q6dm.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.553Z","timestamp":1787924038553,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.lib723q6dm.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4458-2f3e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 89fc081dad2c067cc859df3b0a583c46\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12094,"size_decoded":5421,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12093)","md5":"403eb2de88d44dceb7ac31ef22c1e5f4","sha1":"707d2e8d3b12e2e8c75498f3099b895a1c0fab75","sha256":"09522a164d0847d637cfa7305eff3511c39c0ea9ed0d841bbe0b7f08ac1874ee","sha512":"c1a5ad3e09f80b4fd0b8b8c0e933e9c7e3038b3667f1be581ab672d41e47f8b7fb206c1d57d033a57b779025fa7b2976420453ec33626e6e52db1198612797ae","ssdeep":"192:zAjpYea5UAY1n/nsUEORCCoOf9Y/CZnlDevHrItupanhMlVuVaVExTqxvd:oCv5vY1n/n9EyCw9Y/wlZYV/6xTqX","tlshash":"2042d880f02a58ba8049e1f8a4540e221339a6d5bc1585bdfd6f0df7975ec0cf76ae39","first_seen":"2026-08-28T13:30:26.32865Z","last_seen":"2026-08-28T13:34:54.70466Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/modeCard/weapon_change.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.802Z","timestamp":1787924037802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/modeCard/weapon_change.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 59100\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a29124d-e6dc\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1fda15a579102553bb5858f9be24e562\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":59100,"size_decoded":60003,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c72335234d72834e97dc3eef0ae519db","sha1":"efc13b95300f25774651882045837995917c4f06","sha256":"2f12d99956dfec6b2f449e9f889001c36d7c36b24d650b72e442e1253609a956","sha512":"60777385df4c669f959d314b5a5f190d5e093cc167eb71b180ae3e8a1f853567a17d2cd9a29c00eecace2c91c93b986ff7bdbaf5dde263094ed37964c70cf3ec","ssdeep":"1536:lL4udQBe5U+JawgheWqhSmTszlLwFZ7Qp1ZQVYO6BPQxg1:l8udH52wvAmMBwFFQp1ZW16BYxo","tlshash":"d74302c2e0c9ed10d95eeefce01eb69605f48741ed503049021b92a9f88ead6bd071cb","first_seen":"2026-08-28T13:30:26.524489Z","last_seen":"2026-08-28T13:34:54.705813Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.j8v47mrspv.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.040Z","timestamp":1787924038040,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.j8v47mrspv.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4424-1e785\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 236132064705ecaab3127b4451b8ac1c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":124805,"size_decoded":46330,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"4e0c3f5e7b4608a78f3d2b77b160cb70","sha1":"bae4ab1df43550bc984e86f82a99843e26db467a","sha256":"d2f37468210334c9d8a48cc96aa0989a1d2a7dd1be509a817946a42b4bbed968","sha512":"58ce0458d6634dd42e33cf1b2fe5fc8e2face9e794575e8dc906983a1afd3c0c91b4b1ccdfddf3379078dcdeaf68913aeb225f73edd82e65468b4397729079bb","ssdeep":"3072:p/eByOPDkr6w6lFMRZGTS0Z6cjUb3szTLe:sByo4rXhR8mO6N3sHS","tlshash":"fec3c6d971d2b03207e716a5903b0106f7395e90300bc5a5f63ddade2eba44aa277f2d","first_seen":"2026-08-28T13:30:26.563177Z","last_seen":"2026-08-28T13:34:54.706827Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k6iry2k74w.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.604Z","timestamp":1787924038604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.k6iry2k74w.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444f-3ef\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dffee43d238e94986d560873fe996373\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1007,"size_decoded":1465,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1006)","md5":"5d3533c3eed4104a04beb681346ea153","sha1":"805033cf10e7ba4086c4220fb3178ca09f0656c5","sha256":"721872c0883c6268018f6882812ed376c6855ad2f6bb95d57f18a7806b32541e","sha512":"8519bd106c3c9e44ac6d9c007c931674988736b1ad460181424d9f70ec72ca257d68ac6d05e0b588540bf6e622924d579279a91ba126066a4e1f61c36e35eeac","ssdeep":"","tlshash":"9511c245a924a7bad02e5afdd12a5013725504bbc79c07e1e1bd59301776187e10ab8b","first_seen":"2026-08-28T13:30:26.410034Z","last_seen":"2026-08-28T13:34:54.707812Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nv02qk3bcg.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.369Z","timestamp":1787924038369,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nv02qk3bcg.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444a-1a2e0\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1121b4284ce692d00c8fba1ecdefa646\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":107232,"size_decoded":32395,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (63683)","md5":"c0307a2b64f84e42033f1dd63e0f4056","sha1":"eec4be42a2392acc0015a03b2f2cf8a2f9899324","sha256":"03924c49ca01d038e5aded5718094f48f74cfcbe099ccdb8318b2d7709bb3fd1","sha512":"c3cb2dfc3a3251c51327af9bf277931dba81b54599cd702fbd3b518b05a3b5ce9501a50ee8adaa84726ee4cb5ed389e809aa99e1f35b98ba210c9903b9d8d45f","ssdeep":"1536:XVxzFQuCAVyfUIu44BA/V0TfbTFOICLc0rfWY:+urW4mdqj5ZCYY","tlshash":"0aa3d7d9b191b0314ba765b4903f010bf23aaa54745d81f8e29de5ea3cfd049a237f78","first_seen":"2026-08-28T13:30:26.434377Z","last_seen":"2026-08-28T13:34:54.708747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o0b4vauszm.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.510Z","timestamp":1787924038510,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.o0b4vauszm.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hgho10tacq.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443b-18c4\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 076c951d9ed56e0a612e4923376f47ed\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6340,"size_decoded":3649,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6339)","md5":"b5c5330a640680f50b2228e601f8c2d9","sha1":"d971fb18cd8c890323b739415c10b47ee4988790","sha256":"d9cf280476ee3ebc23628870e3f12c7e0f3bf1b7817c042d58c8fb18bd16f044","sha512":"a05e7b3227ddf508d92aa585c65446a5f78444b3c44f8f2ebdc45cf968aa1f5bb15bebee1355f0ab4b437245b295ab23bd2f2314449e605b14ea14948cffb404","ssdeep":"96:+XS7uXCtX/NLnMOIJzgWd+33de0B76k4GB1/wwmtmp9I+mZ1Ir2CwNOFk8J0BHFX:ajXsPNSdw3xMkh/wwMSmbCsOPAlX","tlshash":"7bd1730f0fa2de35b256e72d930959011ff6d403e3fa5a5aabc8838588e6c71654c737","first_seen":"2026-08-28T13:30:26.294287Z","last_seen":"2026-08-28T13:34:54.709615Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ce6z96n6p1.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.964Z","timestamp":1787924037964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ce6z96n6p1.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443c-90b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7ecc90dca93ce1a74f9efddaeb4367e9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2315,"size_decoded":2145,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (2249)","md5":"abcef30957069cfe3746fcc51db2e4b0","sha1":"2e190b9d526cbfa218877b828587074bb06663df","sha256":"9529ab1fe5dd16a7d4c1a62cb945167faba89d2c8671a15492bf58a5f0cac7c0","sha512":"dda7efae8bdcc61c586e38643fdcb15e09dad1eb2a914e8a12fa7f7b24c3dbea63daba994d3fbf4cd8fa2d3e5f146226b1be72f24b04e9e7689f0ee41ee03fc1","ssdeep":"","tlshash":"b44152a97c6889ba400d4169dc36d3e3b47600fa674b8510f0be9d7e3e50dc60e9a699","first_seen":"2026-08-28T13:30:26.472287Z","last_seen":"2026-08-28T13:34:54.710496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nm4tg4xvyf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.981Z","timestamp":1787924037981,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nm4tg4xvyf.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4422-1c4\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fdb9bf44178fac6d8e368be45d1911ea\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":1203,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (451)","md5":"be95fe105d04a5d3e2d367981422ce97","sha1":"afb6412ac734d28c57b701c435c52b838a33d7e8","sha256":"6e5ca04530259cc622b7c72240a4e211545f97ac74b6f76260a0ce90be87f891","sha512":"43b4d33d424eaaa96a2bb94b5bc4d01e52d68d85fa523a467b2f77317d789280a46c2a1bff402352e554d122717aade5b6225f73e9a06663d96edb0bc165768a","ssdeep":"","tlshash":"16f0a7c647b006d9952923ecc02e5603e655483b47ec5bb1a2794a3a39aaed981486c7","first_seen":"2026-08-28T13:30:26.240426Z","last_seen":"2026-08-28T13:34:54.711387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iaj19661t5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.663Z","timestamp":1787924038663,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.iaj19661t5.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443c-2b6\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2ab307d9de59f4be0dc899dcf70f683a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":694,"size_decoded":1333,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (693)","md5":"394042447c8464ee02eb707e5fc93e58","sha1":"38d99ad6b74fae0e26f24c85d59a3b778f270aa5","sha256":"bfc31c56e6fb081b1497bdaf3d648911edb242a7a41b745f73d9cd228177b4cf","sha512":"a7f6e466f3e890884eaa5145442931edc5b0e96d563a014b5706e07e9bc28e09051ba96ce0ed2fc2ab84c02427605682862fc36b8ac65473688ba3bd62348d80","ssdeep":"","tlshash":"57017bd12eb159e2122e0aecd0ba0402a1501837a35ceab1e0b9ce752636987c249fc7","first_seen":"2026-08-28T13:30:26.547701Z","last_seen":"2026-08-28T13:34:54.716513Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.omvn9pswpo.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.955Z","timestamp":1787924037955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.omvn9pswpo.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4428-82365\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6553f564607da302c5146e95db19978b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":533349,"size_decoded":166242,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6072499b5741042bfac6b58e71aabc63","sha1":"1606517af4519697e69589d88e430a765cbac65d","sha256":"adbaff7fb2909e7143a68b20cea6fdd3e2dd63cdfa863198d2bcac019feba803","sha512":"69015a698f34f077f0c40e61cae008f94091d531190ac2e59109d003f84d0367301f1211ebb0e8ae060b0e9fa84a0c78fc9dc0f8eba3bdb6b2cd8a30b96a32b9","ssdeep":"6144:cT7oElJ/LDORy3bT1L1ksH43cRQ8ki01BzG+W3fVl/C4WA0jIArrAnj:c/9DZr6B8ki01BzGFlKfA0jIt","tlshash":"0bb42bc9b296b17447a791b9d03f1006b33e3999a84d8028f67edcc97c29548e237f79","first_seen":"2026-08-28T13:30:26.481396Z","last_seen":"2026-08-28T13:34:54.719764Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fohukbbrfu.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.963Z","timestamp":1787924037963,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.fohukbbrfu.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443b-c14\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9241e790e155f92a0695ede1c7ce9aa4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":3092,"size_decoded":2409,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3091)","md5":"3a4da2738d40f9a684cc03f7f27995d4","sha1":"212b957d605a504e618f1474df211547fbf7a42f","sha256":"c3604a1c102191de0f05519c49547223a4fba14b640857797095ba570ea813eb","sha512":"2cc9f6ae2730c64247a0bb662da73264cf5dabe7484dbb3a9bbdbe76b87eb5369b783d3a43e5f4d3b2ca67356f3e9b81f8aa5901feb327e862d5e971c069b2d4","ssdeep":"","tlshash":"4051a5da7ea1ac3016a907e5667b9382308a3138a7458970f8fd9c3d7735d478c29e8d","first_seen":"2026-08-28T13:30:26.155299Z","last_seen":"2026-08-28T13:34:54.725135Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o78l6llc9p.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.590Z","timestamp":1787924038590,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.o78l6llc9p.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4440-1c0\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5bd0ed4e8d6696bcdd02f0d6a7987498\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":1206,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447)","md5":"03026496a10149cb3ccef0d5877a7b6d","sha1":"1c25ba1932dfa696522ecbf846febedc6f970c0b","sha256":"b28edbb98ca09444f5e8af2f9f3ce4e82c048b06247b4d0c5e17ef602721aa1b","sha512":"665c7eda8c2f8658c07edcb1453590270ffb1cedee0de5c8fdfaf4948b906aca10732d9deb95402a32a295e38e3a65945feb7cc2e891d64b9d17c42eb695e3db","ssdeep":"","tlshash":"d0f0ec514bb01b25406913edd16e450365e545378bcd2bb1f2794f3d2b179cbc5296c3","first_seen":"2026-08-28T13:30:26.556271Z","last_seen":"2026-08-28T13:34:54.728297Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.oh4xjid6r6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.605Z","timestamp":1787924038605,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.oh4xjid6r6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4426-429\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8e9e791e2a1ba6a9df42b54e8b7daee7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1065,"size_decoded":1538,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1064)","md5":"7e9f4e92686efb38ca220b0d1efa9348","sha1":"887e5fded026547ba08bbc6853e567d5218ef3b3","sha256":"077e18a81265ca571a10757422f67ed643d4da55bf8f8512d483cfa2f7535614","sha512":"f970348e3a6b1d072c5435fa3ce4e58eb5dc2de7585a1cc3ca246f6ea6ae8130c55d2e2c9c86ece825437389596514817a927ac5ae93c7b1e6b74ff77ba509e7","ssdeep":"","tlshash":"0311f05417b80a6d001d03aeed25650bbae05a7fa3ee0d30d098cc3cf57abd01a1cb87","first_seen":"2026-08-28T13:30:26.49453Z","last_seen":"2026-08-28T13:34:54.736229Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.h5tfv8fa0o.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:59.053Z","timestamp":1787924039053,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.h5tfv8fa0o.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.cq6l8031i4.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4439-754\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dff75e3e4d93a23b120326394fa92ebd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1876,"size_decoded":2009,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1875)","md5":"1411fb90736bcb2ccb152bc30aca481b","sha1":"f0cc3900351ce63f17fa4f0d1c1722ff46beb8f2","sha256":"ea5cb0b62a96aa6c42f271553f91af5d73393996e1f5bf8c6456857a2d775d86","sha512":"41c9662cc0a84f805cdf0244eebe4944f385cf21248d35f7fcc251d0e549acf4e28ea15538c366e34520efc7ac067f28d58a64b312bd3d75cdb58ae8fe359699","ssdeep":"","tlshash":"4d3164d817bc86e8100e43d5e8334806bbde6d3f6bda4a2182984d5cf56aac0568cca7","first_seen":"2026-08-28T13:30:26.245729Z","last_seen":"2026-08-28T13:34:54.738991Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://cs2go.money/ws","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cs2go.money/","date":"2026-08-28T13:34:08.088Z","timestamp":1787924048088,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cs2go.money\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: rmjtCNURL0orzxHhExOsng==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039; currency=RUB; user_currency=RUB; locale=ru; user_locale=ru\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 28 Aug 2026 13:34:08 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: BunnyCDN-NO1-830\r\nCDN-PullZone: 6131853\r\nCDN-RequestCountryCode: NO\r\nCache-Control: no-cache\r\nCDN-ProxyVer: 1.62\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 404\r\nCDN-CachedAt: 08/28/2026 13:34:08\r\nCDN-EdgeStorageId: 830\r\nCDN-RequestId: bb18a1ab4d9ee4ffd4bc77ec7533ab68\r\nCDN-RequestTime: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1O_eG7e5tsLc-XAXeAzetkj_FhTjq2xCIrujqNjsGrcnKTbgQjWZRyFuEL4EO4xoXuY-7n71bY2YtGxH35jSga6Cs4sboLT-N7rSrR5rr3.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.770Z","timestamp":1787924037770,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1O_eG7e5tsLc-XAXeAzetkj_FhTjq2xCIrujqNjsGrcnKTbgQjWZRyFuEL4EO4xoXuY-7n71bY2YtGxH35jSga6Cs4sboLT-N7rSrR5rr3.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8146\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295da9-1fd2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 843272be560852f65cf3ad31c0aa9b0b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8146,"size_decoded":9048,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cb0119498671eede60fcfdee3e644a08","sha1":"8850f6ef5aecbee0d620e8f67bffc52e65d41453","sha256":"0f099d6899c739a112406c087a943d6d66dc5f50da7f7ed7885fb666594679d1","sha512":"74a485a6c29c1a9e6ccd01cff1cd0e815e090bdfedbcaa36798fd648841dcf9da85ecb41af24decdd1ea1761a1a110f811d9fd54aa9da7df13fa63514927ff10","ssdeep":"192:3gU8IMjYzPTUiBtJRWV0Eb2WZY6KSgWv2Wta7AyUl:3wvUTTUiBtaV0Eb2PAH2WtcDUl","tlshash":"aef1af1d2b73767994133ab908b5f700d2479674a8a3e64932c88a24a48fa2cc5ec47f","first_seen":"2026-08-28T13:30:26.205297Z","last_seen":"2026-08-28T13:34:54.742471Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support2.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.797Z","timestamp":1787924037797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support2.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18526\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39363\r\netag: \"6a29124d-485e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:33:57\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8b326c8cc541e6e3d2cdbfdcceeb35d9\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":18526,"size_decoded":19430,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e7f2f6fe99f490c49c08ff335ce2474","sha1":"a9d8806bbd59d3277ced973151473881af99f93c","sha256":"5271cf2e390578190084b65ee21d7a014199dcbc62d0c0acae0ef7cefb7c8c02","sha512":"0e25d03f77fba647bd0c304c2d66080392849896f86af76e2379950337ebdcc4c21b4dd0b58547333537677c57fde87934595279e33bec17fa63e1999a149d3b","ssdeep":"384:zHUIzNHg3aMTUMQyRd5ChK8a8eJzNBN6woX/zQS2SwSOPxo:THqT6yCha8Y5BkX/M+jOPu","tlshash":"1b82d0ae87d58d27e60d15720e716269a90d80ef111217bc4007f6e2b47b62e2fc3a6f","first_seen":"2026-08-28T13:30:26.541453Z","last_seen":"2026-08-28T13:34:54.745337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dvzhjae0o3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.982Z","timestamp":1787924037982,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.dvzhjae0o3.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4421-473\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8d3c5d7e81d5ac93a2bfe820b53d76ac\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1139,"size_decoded":1590,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (614)","md5":"35f50bdcb867e8a2dae2b860f2b2423f","sha1":"648e7544047ef34865d8e43d6c927f8e886562fa","sha256":"3b0ab05e4f535de40d682aedf80a9d5632e8bf48dcb711db7463d52970b0115e","sha512":"a757d817f82f46889a9b95439b9e23ddd41b94c49ab9578df1011936d6d59dd6178532be2e764947e2f6b151eaebcc360ae0f6e87f5514440a6c977b53cfc4dd","ssdeep":"","tlshash":"90211ec937e421a943920979c1afe507f0284a6742eec36ad26ac634b9a9056c212f1b","first_seen":"2026-08-28T13:30:26.661232Z","last_seen":"2026-08-28T13:34:54.74864Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ljnp7ecbn5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.007Z","timestamp":1787924038007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ljnp7ecbn5.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4427-1c0\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: aa8b8c812b8ada52687a1511dcdadf66\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":1203,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447)","md5":"7d9d121903d77f11f95cf701032e5d43","sha1":"bc6827a3104498dbacba65c3e6b08b56430e814c","sha256":"97608b79162a0e4deba1ff1636ff0ce2b4776dcecf2da13cf65fe13744b45868","sha512":"9e04a94ef7c26b8663c9a3901768d9657d591e9be28701369ca4d822eb4d20bab60d2b9dc929aaaefca183d7ec7fbcf653df1483343a205fbbddcc02da3996dd","ssdeep":"","tlshash":"3cf0ec9287b40e65942c23bcd11a4503f250053f539c2b79e1384f3e66659c5855878f","first_seen":"2026-08-28T13:30:26.487342Z","last_seen":"2026-08-28T13:34:54.752901Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dbwzgkg1ci.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.026Z","timestamp":1787924038026,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.dbwzgkg1ci.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4432-3af\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4fde2bac9c4e5b72c0a11d145a37af1a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":943,"size_decoded":1447,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (942)","md5":"2525dd271696d50266dd2c977b9d0b17","sha1":"f48b5c7a3c83b516aa985e85f1e5545660688267","sha256":"6cf421f788a35332b49f5ab53862fa91d13ed0a147e427271170f1508031cf45","sha512":"a9287b58c9de5c0df243f2ff446b02243c0e36fd6625198de5c21a73dff4dcb5915af02f9154bf16faac9d7b3b5624022c3e3f38e3656b9e86029e223cccb6c8","ssdeep":"","tlshash":"8a11909c57b44906b02117ad8b1a424237f1a033a7fc0f68a279473769d4d59c518ef7","first_seen":"2026-08-28T13:30:26.671154Z","last_seen":"2026-08-28T13:34:54.755124Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mmx2yevjgf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.951Z","timestamp":1787924037951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.mmx2yevjgf.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4422-559\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9ec72792de9655efe28ba1fd10489124\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1369,"size_decoded":1693,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1368)","md5":"b6207bf08fa0cb75bb07cd8a2c1d010d","sha1":"790acee2f155680285f39fa3efa6f68627aa64eb","sha256":"5bcf42c2896e55bae670570849214e926649a7ffc0782eb609a80c16cd582a14","sha512":"7420f0e8874b2713759c818e4d7cb35abe8e7694212feba6deca68c4140a4ac8b8a422aa03af294481114e6bfe4ed65a22b47555975c5eb8f11899ebef22f30e","ssdeep":"","tlshash":"fc2111f977e0b0b2939d36ecc07b0106f2645c623b4d1658e17a8a5b7a309a68259f0b","first_seen":"2026-08-28T13:30:26.291264Z","last_seen":"2026-08-28T13:34:54.756567Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/fonts/DrukTextApp/druk-textbold-italic-app.woff","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.259Z","timestamp":1787924038259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/fonts/DrukTextApp/druk-textbold-italic-app.woff HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/style.CBTawW3Y.css\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 548\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: no-cache\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 404\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a62038c1b2e279631ddec8cfb94f2f3a\r\ncdn-cache: MISS\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":1388,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-08-29T16:12:15.248689Z","times_seen":21103,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metrics.cs2go.money/api/12/envelope/?sentry_version=7\u0026sentry_key=da19e2c6e5d741efbda9d313341ab6d6\u0026sentry_client=sentry.javascript.astro%2F9.47.1","fqdn":"metrics.cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.529Z","timestamp":1787924038529,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/12/envelope/?sentry_version=7\u0026sentry_key=da19e2c6e5d741efbda9d313341ab6d6\u0026sentry_client=sentry.javascript.astro%2F9.47.1 HTTP/1.1\r\nHost: metrics.cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cs2go.money/\r\nOrigin: https://cs2go.money\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"metrics.cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.djf3rzbhj3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.593Z","timestamp":1787924038593,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.djf3rzbhj3.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4435-203\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7bfbd591ea5f4ab8d6de97332378f26e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":515,"size_decoded":1251,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (514)","md5":"c8411874e01b7ccf5e74f7557ade34d4","sha1":"f1c1796a8f98f91eee73276bc53b1840d68d2ed6","sha256":"0f83520dc2467755f23ec1a3dd2199aa94bb77b9334156e7f41ff79cbfc87852","sha512":"07772729122b5a479d6ce3897658f5096761612eee11afb298d615fb0dd29c65fb355dd9057027d17b642d27f3ecf799e517849b2f2cff7c45c2c9342247617f","ssdeep":"","tlshash":"7af02b9047b05a9bd02922fcd06e520375564277878c1bb5f2380a386b25a9b8519a87","first_seen":"2026-08-28T13:30:26.288967Z","last_seen":"2026-08-28T13:34:54.757807Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8dRTLN1F4Tox2RO8NtxG9kYCxYbvisw3bj9lByCyo3ylKuy9stboEUqcn_a3RiFuVL_Rjtvg0XKwV.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.785Z","timestamp":1787924037785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8dRTLN1F4Tox2RO8NtxG9kYCxYbvisw3bj9lByCyo3ylKuy9stboEUqcn_a3RiFuVL_Rjtvg0XKwV.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10004\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295baa-2714\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 77833e12aa0c4ae6e3bf5e4999051e4f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10004,"size_decoded":10907,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f521d8217d96d879de432abfdae8cc21","sha1":"807245f3b1a1ea62385911d243265d6257b11459","sha256":"27ce53574cbd1a630bf359d59b1ae38b94b2b40ec303420f4deb37884d0813b1","sha512":"d7cabd4de7e1915a142924d09fbb69fe1880394202af8ba010c843c0d0313a9c7e04580034494835525d874abbdb0c3a79fc1d4946ca5ca5b482fc7309606843","ssdeep":"192:FagoJk/vu66xwPGiPThN+9E1YcCkwA22IXQnygNRAl:FgrMeiPTho9aYcKMsQsl","tlshash":"6822beec69b2a8c6f542127ce109f270b169d87675024fde8439a3606bb893c9b548e7","first_seen":"2026-08-28T13:30:26.5805Z","last_seen":"2026-08-28T13:34:54.759574Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i5549pgng0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.960Z","timestamp":1787924037960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.i5549pgng0.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4429-217f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 47bb50f0260dfbfba7be3648b3d7ad71\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8575,"size_decoded":4597,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8574)","md5":"27ab0918b7fc96ba8c461a4a421a5234","sha1":"d7dba545fa5fe1c2c812a94b52d7b6780f235a42","sha256":"f186717afe9d5cc9bd52d2ed7819290dcff40c1aa30ee9cad5f9020b0fcc5de3","sha512":"4801d8b6ad146eedd25fc4c9edffc5f4389378e7716f416cc8374bcc4c69e23be065fa3a15019b8abf232a543281f336efd8e3c30eb2bd7026ba293d817a9adb","ssdeep":"192:dvYl1g3fydZCH8IG4jyjuGFFZHeZ0sNkUjoxZ0eOvO1AeF:qK3fydZ6RGg2tFFJS0sNkUj6A+","tlshash":"ef02d7e361d02d95071e62ecf02b220fd1132d6e6d89485aff6cd9e097348da503e9be","first_seen":"2026-08-28T13:30:26.339266Z","last_seen":"2026-08-28T13:34:54.760546Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fyj1z7dmb8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.965Z","timestamp":1787924037965,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.fyj1z7dmb8.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4428-1c0\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 529d85f008c074abd8e32346f6524fd6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":1205,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447)","md5":"cf2272d415d59f24943a29f5a78e9dc0","sha1":"fae08297d66399f9f098496b1a019679aa8cd888","sha256":"5d33bada34699f6f43d06ad87703a37f95a42c18e80a94a1e55d2128dfd31643","sha512":"c2de117e52ace028bbf7e7910d1d67a855f80b3a03951036ca6897167dec556d0b5d2ff4689e7df2032b40c8d92a74c6e15f530157fd3122e9be723e76a9f905","ssdeep":"","tlshash":"fff0558197b00d6ac11d23ace12a0203729200378b8d0b79e33c4ebe2661ac5c65ca83","first_seen":"2026-08-28T13:30:26.384136Z","last_seen":"2026-08-28T13:34:54.761374Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nkjxhm71aj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.021Z","timestamp":1787924038021,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nkjxhm71aj.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4431-7cf\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 09d27fbbc5b85659b047c290adff2e18\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1999,"size_decoded":2071,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1998)","md5":"f5f0e3c56fe164602c700f93a1c6cca6","sha1":"166907f8858bf0b2b25df073e97ea81e188e9eba","sha256":"e9cf7d7df94206832c28e773096c77dbe9420e9723326fb3660e317f0a9cb84e","sha512":"f457559d3cde75feb7df2ac26dda13c81d59bf2c42c3dc3315c565ed4750d892c2ca278d90eae9027a24946369c4c5dfec8f6cec4f836939071a08ca9ee1a02c","ssdeep":"","tlshash":"3941534e5bf5b161723a4ac4d27f8926f21d2e3f034b83d1c0ba7d37a6691e66203562","first_seen":"2026-08-28T13:30:26.695331Z","last_seen":"2026-08-28T13:34:54.762118Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.f8ycjgpg1l.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.371Z","timestamp":1787924038371,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.f8ycjgpg1l.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444a-ab6\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ec0c0d42b97f782e45b318137c1cdc46\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2742,"size_decoded":2317,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2741)","md5":"f7094c609d29ab6bd6a09ed713f3c510","sha1":"5d21f4b8e629192fd8d3c8a14753e0c40f7ab718","sha256":"a866954b304605798d797c5dde1026b67b02f4371bbc7a91e721930a20ebf0c4","sha512":"e69d675370233af637f8e14e08ebd00f750e4b0dfc344cf30a55b0e569133523f203279e6159b8c3bbffde7b1f0d8b7817ebcc9a633e73c1d6b20760163a9ca5","ssdeep":"","tlshash":"775175ec5901533348161fcef6a104112efcac76615a95d1f82fccdb31d509ae667e17","first_seen":"2026-08-28T13:30:26.217649Z","last_seen":"2026-08-28T13:34:54.762792Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jofxyxrcz8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.711Z","timestamp":1787924038711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.jofxyxrcz8.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.nmgs6dxlq4.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b443e-1677\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d11d2c2e6be77b767d1d6b6dbc788cda\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5751,"size_decoded":3666,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5750)","md5":"cfabae47997f006efbd5518af8869590","sha1":"ddf595b17c30dd4d5c722b3dbf513c6cc6cf430b","sha256":"8e2929862d3e226636d8a8ab4e2167d311e4df4211fb8a756bcbe9d99d0670f8","sha512":"a78328b805b042a1151155e9a1ceddbc22e4db25e6a5d01e36e2dab0283d62ac35b2f9b64d0583b66b0b3a0703bbf8ecbe69a2d616f40ee1027488a8b3ed358c","ssdeep":"96:eJ5XdFWExOSx6YIOlPfXgu6rKTn6c9A7FE2glCx7/JH9lMCgXstS5SpzOterNjvn:a5Xfx66PPgu159A7FEy5/JdlMCSsk52/","tlshash":"aec184f7f6d4b0e08007ebe8c43b9422795f3cbb6fc36b8a426695445926185cecdd44","first_seen":"2026-08-28T13:30:26.211354Z","last_seen":"2026-08-28T13:34:54.764336Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.omsrmcs7mx.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.555Z","timestamp":1787924038555,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.omsrmcs7mx.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4445-bb2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dec9d4200f5a0bda0ef296ff94ec5c7f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2994,"size_decoded":2485,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2993)","md5":"8193fa1c6d1ecac3a0f867589bf76d3d","sha1":"6c9b31cd475d0d68de801f3ac56833efc62daf5c","sha256":"0ea0096a1e191de7a8459aa28cb96de94700764682b13d8a34a46303bafdb265","sha512":"595182a004bb2bc8ced1a17eeeb01f79218ab689304da55d07b151d79b89d0d04fb486ff7d812392ecde50d6a5d4ae06e723e4898837f8b43619c921c055bac3","ssdeep":"","tlshash":"5651a7feba80d0b9910f5bedd42f60113216307bdf950a5680b89f34673a6d5c64ed46","first_seen":"2026-08-28T13:30:26.286874Z","last_seen":"2026-08-28T13:34:54.76506Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k8b80frar2.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.577Z","timestamp":1787924038577,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.k8b80frar2.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39362\r\ncontent-encoding: zstd\r\netag: \"6a2b4426-398\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 23a8d724bdb7fd5b5c670ae490d13406\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":920,"size_decoded":1510,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (919)","md5":"4d14ca1c9f23556f218813fa288fb261","sha1":"10ce7bacbc8c92783cb326c29078c887cdecf628","sha256":"58e5c563aebd9082146b1c33fb1df768d803711b14f24337982f66fdd4541e6a","sha512":"4eed008da875637721907f71684fbb975021f48e4baebbbeaff7c21032350024cd5afa351bf42142775a9544542c5865a2c6311e98ee501ffb55b172a7dd4d9b","ssdeep":"","tlshash":"291144d107f006a9842c53ede926080377b114bf43890aa082bc8b3c76ba5d4ce1c9c3","first_seen":"2026-08-28T13:30:26.555005Z","last_seen":"2026-08-28T13:34:54.767395Z","times_seen":2,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dza0yegsya.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:59.049Z","timestamp":1787924039049,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.dza0yegsya.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.cq6l8031i4.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4438-3d0\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4c8d3900e724c81579977b1e62996f8d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":976,"size_decoded":1480,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (975)","md5":"132828acdaf1304998ff2331adf87ae6","sha1":"ae53d58d9d1c619816f6b197259ceaed5457293b","sha256":"2fafd49a5b6892b46c64dee9996083ad8b7fef21e4df31cfdc836c17f04c4344","sha512":"3555d6fb65d537af85ba6ca74b0698813ea631f70ad3b683eb25f7519a88512a4d16c2dbe506058d9c927291c36dca61ed7e3fab4eb3e689a9c75a07d6c50acc","ssdeep":"","tlshash":"1811e1c6aa615ab9421f1afce13a12135270013bcba447a2d17a0934077a7c7c11bb03","first_seen":"2026-08-28T13:30:26.510731Z","last_seen":"2026-08-28T13:34:54.783857Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://cs2go.money/ws","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cs2go.money/","date":"2026-08-28T13:34:14.349Z","timestamp":1787924054349,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cs2go.money\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: u6K3XiIIQbk4E1Z8BefdgA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039; currency=RUB; user_currency=RUB; locale=ru; user_locale=ru\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 28 Aug 2026 13:34:14 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: BunnyCDN-NO1-830\r\nCDN-PullZone: 6131853\r\nCDN-RequestCountryCode: NO\r\nCache-Control: no-cache\r\nCDN-ProxyVer: 1.62\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 404\r\nCDN-CachedAt: 08/28/2026 13:34:14\r\nCDN-EdgeStorageId: 830\r\nCDN-RequestId: 75fe9e47d9a3794811ce3958403f3f2e\r\nCDN-RequestTime: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1M5vahf6lsK_WBMWaB_v1iteRlcCK9nBsijDCAnobsLGWUaFB1WZAiE-Vf4UK5m93vP-3ntFGPidlDzn36jCobuy5usOwKA6oi5OSJ2B5Cd8s9.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.758Z","timestamp":1787924037758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1M5vahf6lsK_WBMWaB_v1iteRlcCK9nBsijDCAnobsLGWUaFB1WZAiE-Vf4UK5m93vP-3ntFGPidlDzn36jCobuy5usOwKA6oi5OSJ2B5Cd8s9.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9022\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290b86-233e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5de82cd1e2c72b2873496f1f626e839d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9022,"size_decoded":9924,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"68b503c24a1c3045f590108023803af8","sha1":"fa0e26e301c3f9fe2976eb99c8ce132a64e7a1fe","sha256":"ca4ff81a9f3a5729c9af3f07260848abf84f456725c044d09cff35d2cb932edf","sha512":"fb3ce687133720c928545375ca925ad43bb5d7df9aea47d6b3fda586ed6d35fca5d5b31a68111725887f2f9962bba87c2b8fd5385548ef85a7876660f957c795","ssdeep":"192:KPDObU6bFwM823S9Urk5+0I+OoyXa+qnkUCs2HaTMhe3qRl:KrA5b18Wrk5+TPoyK+qzCsTYhe6Rl","tlshash":"ea12bfcdf91237a7ce1311ab1dd02f7a86a0d251d1628b37931454c09aeb4ef4687ee0","first_seen":"2026-08-28T13:30:26.521093Z","last_seen":"2026-08-28T13:34:54.786014Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y4OCqV6VgH_ScHnecxPxJoOloXCzhqhEutDWR1In_cimXOAMpAsRyROdethi7xtbmPuu0sgDW2N4UxS2v3S9OuC9t5bkcEf1y7nwgVpQ.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.760Z","timestamp":1787924037760,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y4OCqV6VgH_ScHnecxPxJoOloXCzhqhEutDWR1In_cimXOAMpAsRyROdethi7xtbmPuu0sgDW2N4UxS2v3S9OuC9t5bkcEf1y7nwgVpQ.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17058\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295da9-42a2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 17fdf27bb17a4ec7f6c8c7012b7e31e6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17058,"size_decoded":17961,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"076413b45cd9c4bfb73f2134c1e12e86","sha1":"dfe915cbc34b5aaf1cf39b7658dbae7600858679","sha256":"1b6ccb2df9c83101bffb95c8458367ae467085bf850ff7bc3745857b3f04f024","sha512":"d605c8600b3a2e5b701faeebda3e766cf00d97996de064d8c3553838f8cad05f742444fd05c6c31646a2b95e9f95211fb67ca8bbfb2f97d175f0d364a9b6dfc6","ssdeep":"384:00OYZjXEhBlZoj2WzYaBq0ZHpPu25oVfW7H3iz6NwQ/Yfl:0Y9K/Zoj2XaBxtu25Ufw326Crt","tlshash":"c072c12a9df49509d821c23666dfd3db76855f8883fec4128cae740977434811cf48e0","first_seen":"2026-08-28T13:30:26.352109Z","last_seen":"2026-08-28T13:34:54.787609Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1P7vG6YadsLM-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8cBTLN1F4Tox4R7JZs0bsldLnMurg5VfWg4wUyyn72yhIuiY6tu1UBaAlrKDT2Q3HL_Rjtkcw7QQm.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.774Z","timestamp":1787924037774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1P7vG6YadsLM-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8cBTLN1F4Tox4R7JZs0bsldLnMurg5VfWg4wUyyn72yhIuiY6tu1UBaAlrKDT2Q3HL_Rjtkcw7QQm.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 11162\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295da9-2b9a\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b9514ba8860636e98901a776c940dbfb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11162,"size_decoded":12065,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1de120ecd09ee5b5c4ddab01b412f463","sha1":"83dcf8d802b7e1a1886dea6316eb052d86d44790","sha256":"abe72964d7941e60b82a0adde1c2cb771f8c481924d623db0e0125e683066d4d","sha512":"a8414629ec9d730fa0b001eb0487509fa47fca65f64d1f901ac0219fff483ac2e504fe0615150911286b30a6fb8c523611c7a21889726f6f5ffe982e487a0ff5","ssdeep":"192:eI5vefxe6gLPdaC3Xgt7rdMVjm1iGsWgGUUJKFcKduZlYm3OlkcxZfjv1UqQYiJs:e2WJeSC3yRoyUxWfkRdufYm3Olkufb1Z","tlshash":"2f32d0762be80952c8d427b7647f079ad4acc1a6d79fcaaf22e4c45341d863e7f6c201","first_seen":"2026-08-28T13:30:26.238625Z","last_seen":"2026-08-28T13:34:54.789584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.262Z","timestamp":1787924038262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cs2go.money\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 183754\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-29T20:23:02.754225Z","times_seen":269362,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.krkwfxsr50.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.969Z","timestamp":1787924037969,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.krkwfxsr50.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441f-2d2b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5b9dcf6e149397bbe0c26a8f9171250f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11563,"size_decoded":5391,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (11562)","md5":"493bd03d87090f7615d9604e6679d820","sha1":"8a55c6eba62d900687543aa14093a16c8d7ebf13","sha256":"7fd3eabb96996fdff1ec5e70f69ad2beeed6a837774b03e83882da0fb80de227","sha512":"a6e0f3009ca4ad1370e4bd59d6c2449d372b1f88331e43e946af92b785934afae71f23c7383d9eb86f5505d48c5a1073eed02ff189d43608fcd0feb614cc4380","ssdeep":"192:keR6l1ihVIujpo8aimvuGtESiXYn22WVDHTSEy4IAzn0/OYf/s5x:kiqoDdjF0txdWVDHTShhAzndY2","tlshash":"c232938fb464b0410ea36432417f902fb33929b6288dc5b093b2e8f5a9f519dc527b4f","first_seen":"2026-08-28T13:30:26.341995Z","last_seen":"2026-08-28T13:34:54.792009Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.4l9i8gxjgd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.986Z","timestamp":1787924037986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.4l9i8gxjgd.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4423-7e93\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2d4155f6acf6c5d94e6396b8b33a518c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":32403,"size_decoded":12637,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32402)","md5":"76e472dee49f7bda4d216ee2c51efdc2","sha1":"60d30a1416ebea1186ac30afdd0d105cf52bea38","sha256":"d7d37dd70d7ce00ce580e8b5eb39f8f295f5248d8a0debb3269ad746b8b47a1b","sha512":"e829d66fb89d1484295489d9cffbc2f66c257619cdeb7d61a2c3f1967557e96506ae42f92f0b060c8bbdbf90be177c5c66eb519bc624c8228f60909e05d8e7db","ssdeep":"768:GpzAecipYMnLRYRadi0hfm58r1qVBRYbEY2uSPrNrCYFU/+1OcrxAFZb18K1q2Pr:Gp/pbJdihrVPrNrj0","tlshash":"52e208c532d1f87192a755b6807f811af33e2a09304d4040b2b9ace97d78a9ec567f7e","first_seen":"2026-08-28T13:30:26.561615Z","last_seen":"2026-08-28T13:34:54.793532Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mzwi608h3g.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.024Z","timestamp":1787924038024,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.mzwi608h3g.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4432-1c0\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 165200eae14913a9845dcb0d7feb2de2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":1205,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447)","md5":"9f89fa315fdf4d367564173451fdad99","sha1":"8f39d7a4d04f9b24dcee7d55570b0b60932490e4","sha256":"1681507f85e7d5e368889af4301ceea4506c54888577c8aea9bd07a5e5dee0b0","sha512":"d890e601a431beb54f6b1c3b74d8deee6ec6ac6bc3b96268de1080646cd0cc052646fa46b778116424e5fe07c56c7ed5a5cf27832dfdbb1daa8659bec7109cd3","ssdeep":"","tlshash":"08f05c444bf00597512923fcd32f510376e0047b0b8c0b70e23c19383379b86857c683","first_seen":"2026-08-28T13:30:26.716459Z","last_seen":"2026-08-28T13:34:54.795205Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.n4esh39tsy.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.025Z","timestamp":1787924038025,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.n4esh39tsy.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4432-996\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6ced6713c6e1792467dc7f89397c65cf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2454,"size_decoded":2167,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2453)","md5":"7f0b57ec43927166c051089a38f8fe1a","sha1":"df6c6c6c5a9f537db0e3e9bf5975d037d5f74fc4","sha256":"65ec99377871b037b0d1a50df29b71126345d7501b8bf228c9977bda64509ba6","sha512":"785cc85d07d8449d20537fb8f0b0f1b7fbbceced4aca77a683187db515144a654d2a6e12c58d9e0d0a560a6a44dfafb43ddc52fa803c6a5af0b3c0589fc0b3c8","ssdeep":"","tlshash":"8c51668433e044ea460507bee0395a0bfb9974bf971d8f51923cc5bcbcb8181d9565e3","first_seen":"2026-08-28T13:30:26.234016Z","last_seen":"2026-08-28T13:34:54.796983Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ffdjci8p8c.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.641Z","timestamp":1787924038641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ffdjci8p8c.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4456-8538\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d2d148ce944b2863d055baf0b5ce2cdc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":34104,"size_decoded":13965,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34103)","md5":"c649c2bab156ca7add7d77d0835a6bbc","sha1":"905ad13bf34bb38de67879be6b14bba77b1e91c5","sha256":"c794b9118a5d98dddcde696fce69349453e82944a658c1b9ba076e6e2a84f9ca","sha512":"52e0f18a9201f71814ba0ae8c072f6fb77038c041ad16c33b740687b7c306dbd3e8e3c3046673f689a247eeb197be3959468aa69afdc87948f0ed267759d34a7","ssdeep":"768:T3Q9TWWzaQT/kK6ZhV8VvxpWtzovTXniM+wxRrjLg4H/AIOXd/bVaz29lDgkJkrS:+z7abocwxVLg6/DON/hai9lD1D","tlshash":"e3e2d7c9b2a5f461c2a716a7806f800ae37e3d88250dd650f1bdd8d87c646588737efe","first_seen":"2026-08-28T13:30:26.474796Z","last_seen":"2026-08-28T13:34:54.798801Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJKz2lu_XuWbwcuyMESA4Fdl-4nnpU7iQA3-kKni_DtU4fe6Jv07IfTDDT_JkL4htLI7HCvmwE9z42_Vzov4ci2Wa1IgWMN3R7IMuxCm0oqwYUAZNBA.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.767Z","timestamp":1787924037767,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJKz2lu_XuWbwcuyMESA4Fdl-4nnpU7iQA3-kKni_DtU4fe6Jv07IfTDDT_JkL4htLI7HCvmwE9z42_Vzov4ci2Wa1IgWMN3R7IMuxCm0oqwYUAZNBA.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7794\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290c52-1e72\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e7d21ef3353a56cd2581166882344b21\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7794,"size_decoded":8696,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"38384c7baa453b9e0d63c8b9accf1d9f","sha1":"84b2400f427b57bae43d722389258855ebc6dd84","sha256":"1ce569b9a42c36ea0467b57eaa27cc66fb9cd34d0c29530830dfedae0ed3a00d","sha512":"ee8b5b87b035720fd2b7a5b75443fa9f1a27015b8aaec421284b29034e7ab8422c51cbd1edf97d65e4c62245130b556762780ba8bccbae81d2848126e5f4383d","ssdeep":"192:kHZv2AXlh75YeLGyndAa4uZqt24hQi7Dk7wCz32hWj047l:kHZZj75Y2ZWaXAQgDVCCQl","tlshash":"5cf18e7002230114c5c9537d92f9e06a9a26c4d39d6e72fbbe15d1e17f72d272a3d362","first_seen":"2026-08-28T13:30:26.283522Z","last_seen":"2026-08-28T13:34:54.800342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.kjxr2311ov.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.974Z","timestamp":1787924037974,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.kjxr2311ov.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4423-359\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6cb70e75c6c581439ccad9c2e658af90\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":857,"size_decoded":1410,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (856)","md5":"0e1c111779ee511595c6a05f484ffe86","sha1":"425ce7724951223b48c91696262a279d3b0602fd","sha256":"5d88398f6595aefff18da24ac8e1f3349303c320674ec7142cced24fdf5eac5d","sha512":"fe4805898f4c19fb28bb0d8218d4d4a9e4a7b8dcd6db36338db703bdca3eb4841819b7f24c71b94d81ed65be41eaab58e6c40d378c98fd4dfe28af28f5c1f86a","ssdeep":"","tlshash":"5611ccc672e3f04aa72852f9c46e8006f158493743cd5751d2b8c9393ab508bc126f87","first_seen":"2026-08-28T13:30:26.297694Z","last_seen":"2026-08-28T13:34:54.801628Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cnvroxnuyh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.983Z","timestamp":1787924037983,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.cnvroxnuyh.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4421-75e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2edeccdfd8a6b1b79b8f4ccb2c809162\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1886,"size_decoded":1912,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1885)","md5":"c11cc276399d9ffd609ca9a044607d10","sha1":"59e847edb0c671977a178e27bf2c8254c97896be","sha256":"ea4e113319c8f0d7798891e8290c3f6a227edcb9a2e464b7ee0c5671a54fb718","sha512":"d69f3cea18fbf2311f894cd7a6504fdfec81453857a5c73ec8d37acf0fafa5af8804981fa75a90a847d296c2cad2d5d44d712f3cd4b9e3e48d8c944bdc6c4da3","ssdeep":"","tlshash":"514133c271e0a265e15505fd813b842ab321393e718e12b0e1bd4c593e712a9eb27f8a","first_seen":"2026-08-28T13:30:26.59156Z","last_seen":"2026-08-28T13:34:54.802902Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.ebp5f8qjr2.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.214Z","timestamp":1787924038214,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.ebp5f8qjr2.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b110d-41b9\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b773bb0a50906ad680e12c9dbb6f64c8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16825,"size_decoded":7490,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16824)","md5":"4abcfdc2b965a66ce360163e369782aa","sha1":"31cdec07580e6c3250c21df16441fc992d8d1811","sha256":"9346885ba2ab2ec5f400b8fc26cfbf25ed818e012566e0d285efbe32368df749","sha512":"33b404394f1c0f86beca08dc5749e6bc0dd2c1463b92bf826a0a76887f47e84374ec6e1544a25b144ab3f5097d0f7999e3cfc5847ffbca45e675577324da3483","ssdeep":"192:LToKTQSz2PYChb88FCQrsOdeA3yxZk4CqBgotSU5Mf0snAAfWMAUeK7b41IUdw:RTXuhb9g/5Bgo4tnAnWfsI3","tlshash":"c972299df051b574a5bbaae6c03f4205733f2a56a65c4820d0bfc4847e39d92d323e9b","first_seen":"2026-08-28T13:30:26.567164Z","last_seen":"2026-08-28T13:34:54.804041Z","times_seen":2,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gcoznn0m00.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.666Z","timestamp":1787924038666,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.gcoznn0m00.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b443b-3308\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 78e7f0a612db99ead0a68da66be63bed\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":13064,"size_decoded":4212,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13063)","md5":"fb82c4b17c6d97a65d8b6b07fed2ae9d","sha1":"bcdfd9e0af21933368ab68fef3f5d7b93a997b5a","sha256":"ea0d78c1512c1324721e195ce454b6c326d9401ce55bd2f557976e4c8b79fead","sha512":"634fb27b6cc8a54fe350b30c4b7607e7332e812250134e48e462bea4063c3f38ea1568d5dc53bf64991f2c9ca2387c0a3dd940d5fb9750a999fe3d3a254ff732","ssdeep":"192:kAOMV1E1P7zoGtOcnYUta8RF2n2OERBPUYzDaLwLVZiMFtmaTZu5zfryTu4zw6oz:kAIBHdYFqpDaMRoMHc5CTj9fqbI5d0","tlshash":"a54252893915d9f6c5b6a0387de51d02017b0bd6b7b300ec32dc0ef607d958aaa52fb6","first_seen":"2026-08-28T13:30:26.557704Z","last_seen":"2026-08-28T13:34:54.805157Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.ilvll9hjhf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:59.002Z","timestamp":1787924039002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.ilvll9hjhf.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b1110-327\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e7cd72ba6b99d70b60215e253d901528\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":807,"size_decoded":1379,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (806)","md5":"304c22c847cd7a6e38e0dbf4fbed9b36","sha1":"b5552c4f7015605773b65f0bf5877d94ab188d47","sha256":"acc0f38d6a95a6f1c20b007106bbae4ddcb88cfe6eb205ad664c0178cdd7fd7a","sha512":"c4fda6cab1e86c34e59977627813b0ab8cd66229c523f8f1ef566adcf89bd68a8782e59f10032e5bef6cd1cfe5d930af68ff31b9137b02cbf21d8c16d62d2581","ssdeep":"","tlshash":"14016b5b9370adb2510a5afec03b4023a165187b23c94bf2d0ee0e3567665a5c41df83","first_seen":"2026-08-28T13:30:26.72171Z","last_seen":"2026-08-28T13:34:54.809457Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d4_u-V6VgH-qWDHWR_uJ_t-l9AXrrl0905Gjcm4uqcSmWblNzD8Z2QrZbtkK5ldTmY-rqtAba399BzyjgznQejSHMqZo.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.761Z","timestamp":1787924037761,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d4_u-V6VgH-qWDHWR_uJ_t-l9AXrrl0905Gjcm4uqcSmWblNzD8Z2QrZbtkK5ldTmY-rqtAba399BzyjgznQejSHMqZo.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7298\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290e98-1c82\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 718e8f35aef3701c26a7fb022add4a15\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7298,"size_decoded":8200,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a2a547908f82d84fa516feaf1b9f9096","sha1":"f12f4fb7cf4370cf5df19dfb58de32ea8bc5a4e0","sha256":"3ab2ed7f8eeeb3864c2f081a0cbc3d27c0f708b470c86883f552f174605a0c92","sha512":"c52990ba595c7ebea4cc1b3ba2696b9fe321559f0b93d71876d1782e1438d1a9be125541e6028ee8d2e69425c8a83bedfd32f39e5747d0a62ba3d35f69000d97","ssdeep":"192:jRBOirlwp/+0QxolXBlwcWi2drcH5oaXRLrH/YqpQul:7Or/Qxo1bYJd2t7QqpQul","tlshash":"a2e1bf2ad55f8b158d1b7af4c82e7a74a5be4f9fde504b3f23251628f482c848c66170","first_seen":"2026-08-28T13:30:26.683353Z","last_seen":"2026-08-28T13:34:54.811006Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.m0q5hld89a.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.028Z","timestamp":1787924038028,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.m0q5hld89a.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4432-3df\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 254eea11652ce06ed16bf86886ae2fea\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":991,"size_decoded":1506,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (990)","md5":"84dd58f0df95000a40c19d0f0a4ddfdb","sha1":"83264b37992f05a0bede709c2b1a1831ffbf18f8","sha256":"d8ee08cf064cf1de8fdf3d2cd9ab004a2eed1bdc4762af5d4f8dae9b82f9f4e0","sha512":"973bdcce806a167759a206b4ee8c0405708ff609f761adc9c6338a678d8675dbb3d5e3d13797949cc5bfedd558056e37495cc312dcb42b2df3eb75596a5fe2bb","ssdeep":"","tlshash":"7d11ce86a2609afe512d4beed12b2943771104bf479a0f70d1385d387b3658a9106e4b","first_seen":"2026-08-28T13:30:26.430054Z","last_seen":"2026-08-28T13:34:54.813111Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.ddhyvc9ouj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.208Z","timestamp":1787924038208,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.ddhyvc9ouj.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b110d-2c1\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9be45c48f210dc4f5c5b9dbd94b9ea1c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":705,"size_decoded":1323,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (704)","md5":"9e780ebfbe10e9dc40af4bc8ace64b18","sha1":"a0ce7f06b693e2c4771d6affa61a4e11c3ced940","sha256":"f624fe4a87175eed4d75b389fc2855f3ceb479ce3022e04183ac61d639e890b7","sha512":"11cf3ba79402c7853e8c060f7363d482f6c649e2abf8f9e6ec83b8b1b97bdd1617228bad80a34d18bfa0ec953607c74c7a8cc2e3f0ec98c1b2831870981cdf1b","ssdeep":"","tlshash":"560170ab87749c7360586afdc15a5123613a0c7713c98bb1d0ff0a3957955aac108583","first_seen":"2026-08-28T13:30:26.369888Z","last_seen":"2026-08-28T13:34:54.814206Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.eehxpt7fe6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.622Z","timestamp":1787924038622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.eehxpt7fe6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443e-613\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c7d48f03fe5f410d8386a5223239f8e1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1555,"size_decoded":1760,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1554)","md5":"53d777ce44d7486f748bf8911a03efbe","sha1":"e3f33dd99c477bfee478fb4fa2a8c2a31bbd29e5","sha256":"161aa0bbfdd25d56292955bfe16bec075eb3da6a257ec79f4d9f0512c3236b39","sha512":"cf124f31061f6d65bbbb9616f60a4afcc0ba1068b129d50f3e18b0d4a38038bbdaef02fd2dfccf05d80e57ffa7833c918e582818ecf96ff29e968f2eaec228c3","ssdeep":"","tlshash":"cb31f1fadeb51de5811b5368c0366161bab228bf4b59575190f08f28ab348d4a448dc2","first_seen":"2026-08-28T13:30:26.347191Z","last_seen":"2026-08-28T13:34:54.815169Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lspipmawcr.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.671Z","timestamp":1787924038671,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.lspipmawcr.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b443e-15c7\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f590124cdeaafd4327b0fb1e5008a9b8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5575,"size_decoded":3191,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5574)","md5":"79ae2ebb9b2c9033396cc69641a67880","sha1":"018e4f41c5160ae8a107ae3863d2f59b3ed8056c","sha256":"b05ff13f0bd0587658c2462dae7364234082d3671e1d4c4f68025be58a868a04","sha512":"e2c9488172e6ac842fec7149b8b8e3ac2fd8ae8e2918464b806b4846cf28b7c89c30edae4f93ab1ffa1c79d0e9c58a095f922bec3ee4c2b83c9f83c89a4d9ec5","ssdeep":"96:oQxKK3sQCBd5au/CBlhRD6uMpPprue5CtR9qkElHQw4CTMEIMKvn:1xj3sQC5au/Cph6uMVprv/Sn8Gnn","tlshash":"0cb19498b1f099f5c04a038dd03f9511ffee3eaa66292d40c1be8d9cbf14684c6ad756","first_seen":"2026-08-28T13:30:26.725522Z","last_seen":"2026-08-28T13:34:54.81664Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.c0q8c0imhc.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.676Z","timestamp":1787924038676,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.c0q8c0imhc.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4448-275\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5aa5b75003234f8e6aee151706481c0e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":629,"size_decoded":1291,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (628)","md5":"3b4902f6c924d115017897e2b979f720","sha1":"eff6a3d6d5e81c736a3543c6ed69eed2c3a33d32","sha256":"2e47a7872970c776be833f70fb222da003c8edf11620c46ab8e4404c8bf5eb7d","sha512":"a3f5f745cd0fe1e38b11e3dbf3e049ed0288bfc77690aa384813916c0cb6995fab30f7888dfbd3182be3394b5211a555de2bce621bd3d409bfae7f432c551565","ssdeep":"","tlshash":"8bf044d076f27561d01523fed0221503328884bbab4c17b8e23886b97e32d8b8621bd7","first_seen":"2026-08-28T13:30:26.419478Z","last_seen":"2026-08-28T13:34:54.817517Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.260Z","timestamp":1787924038260,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cs2go.money\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 183754\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-29T20:23:02.754225Z","times_seen":269362,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.j5h7rpql87.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.625Z","timestamp":1787924038625,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.j5h7rpql87.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4447-578\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 42b33ca9cd2e1c15538e8fd221795c24\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1400,"size_decoded":1681,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1399)","md5":"4d795dde6902bca4df231cb5049b1830","sha1":"89cba0db1b443b33b07fa001386d27a1350537a7","sha256":"ff7e94dd009deaa2b798f997000453216fea2950d41b97691bfbaf16b4b9ed59","sha512":"c8bd47a6ad6196cce1495c2f6af6abecd54f13619773e4df8fe0ce0220574c5ea6bc98868498a353da941e47f02aa72fc7946cbaa0062c98d952cb97d2bcd0e0","ssdeep":"","tlshash":"b2212feb47e001e9145a136eda3b045672b5a9bf178a031050a88839f5f45d0acac9d2","first_seen":"2026-08-28T13:30:26.458936Z","last_seen":"2026-08-28T13:34:54.818333Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1I-uC4YbJsLM-RAXCZxNF3vd5tQDmjmRg1jC2Nm5z8chTLN1F4ToxwQ7FbtxXuldSyZuuztVHWiYlCxC75hnlO6ic_secAV6dxqaPQjQ3FL_RjtlsVJsRA.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.759Z","timestamp":1787924037759,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1I-uC4YbJsLM-RAXCZxNF3vd5tQDmjmRg1jC2Nm5z8chTLN1F4ToxwQ7FbtxXuldSyZuuztVHWiYlCxC75hnlO6ic_secAV6dxqaPQjQ3FL_RjtlsVJsRA.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7558\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295da9-1d86\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8677612c7e01f5bda36c39f2c79b230f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7558,"size_decoded":8460,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b820677a060edbf160eb178bc56cb891","sha1":"dc5e9a67f2c1eaaeff578cd741bb3144b21ddd61","sha256":"a8111d1cce98b3aa73a46090edd435f5958a87990af800a3c3461774fd2a503a","sha512":"d6a930f1a2381f7f0487e2dcdff3dc68a04b606ef709708dfa787c81600a0645bfdb8a932765109f457dccf3d681c25fdfecc2157b18f996e467f4b403477d62","ssdeep":"192:D3RZqL9AZ62c/hasOib6qZHT+GcRDyf9Tylzfv/gDWAArGTBKzMl:D3ReAZ8pVXee8DxhTGBhl","tlshash":"81f1b010d2924b80c04e4ef808acfdca3d89faa34bb2062e167722942d534d6867d4a2","first_seen":"2026-08-28T13:30:26.398634Z","last_seen":"2026-08-28T13:34:54.819168Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.j9cqfjfjs3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.219Z","timestamp":1787924038219,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.j9cqfjfjs3.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b1110-142b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 30e0adcc94b05e0c294a60138221092f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5163,"size_decoded":2814,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5162)","md5":"084057a48f674c4272c97ffa11695866","sha1":"9c17323c1623e00b1c1f6c08cbfe7767f8125d95","sha256":"05b517dc7bfe71beee2dca7d7f336ff62017fe7cb032889133d6d441c99ead2f","sha512":"0ccdc4a8172b75ee17f19783134db224e2fa8a29bab111bb80a826f995de72786908e406b8fbe9cdd70db10986bd7913c1bc1334e75f4920b5d28ac56e534470","ssdeep":"96:OoiTfdwz/H1hX5Ys4YFJRXvSls4kOhT8dguG+:AVwzthXqsfnRasyhT8gh+","tlshash":"c8b15228f025d6bbd4b94ed9c10d4035312b1aabdb784aa1d2fd65341734526ba0af8f","first_seen":"2026-08-28T13:30:26.664541Z","last_seen":"2026-08-28T13:34:54.820213Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.w63evtsr9u.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.557Z","timestamp":1787924038557,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.w63evtsr9u.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4451-406\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 61dda785da11bd28efbf63b3cab92323\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1030,"size_decoded":1502,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1029)","md5":"18539d4211f069e9867d39964e96141c","sha1":"e7b120cdf060e5eaf6468cf6b01f74f59d623810","sha256":"bed04da79b13fde408a61af40e8bc2afc5b197bf68ee1bb2d5673e4cf9795389","sha512":"e319673d5158a516ffc1da388c3b8eda69b1088c702fb5587e1473c6c6b8fa2d76e6ee411014a77caa93848024d3a47f820e07b15ab87a63ebd25a5eb5ab9b0d","ssdeep":"","tlshash":"0611efefd6609ab6500f96ffd42a00236260007f03d80be1d13e4a35176a697c51bf03","first_seen":"2026-08-28T13:30:26.282233Z","last_seen":"2026-08-28T13:34:54.821115Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i5mkdzg0xm.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.952Z","timestamp":1787924037952,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.i5mkdzg0xm.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4422-2aec\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a077520f1cc732f71dc1498afa48d514\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10988,"size_decoded":4637,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10943)","md5":"a63de4ea537e195e85c88ac3c18d3cdf","sha1":"804b77cf4671e4a853ab1b4f487c5b86077857ba","sha256":"215e7a58b0c81627ff5052ffa01d92df563379b37ffc3cf4bc72ccef3d0e02e0","sha512":"7a169e5239ccb44fe63b4193bf4ab8ce037cac0cb0682c7b3a31bddfcf7aa6973f19c06455ab59184978b5075f182211a3bf4beba0aef5ef65a4c8e0adc73d5e","ssdeep":"192:pgx6XHckjPjUeBIGWZeBLHVvpREYFHzLsvKTUk44R0RuLz2:U6XHckYCneYF3sO44ni","tlshash":"4132a8ca35b0b028177543f292718493e3ee1154728db0e0a69c92ef2add855497bf7e","first_seen":"2026-08-28T13:30:26.479515Z","last_seen":"2026-08-28T13:34:54.822099Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dy36eje31e.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.011Z","timestamp":1787924038011,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.dy36eje31e.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b442a-1527\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 846a327ebf1b77ee78d9b3af4611b40d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5415,"size_decoded":3353,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (5414)","md5":"f5add8ba8c6b22cb04cae283702c0dc5","sha1":"d53e9cd386b7c7f7ae96d8219c63f3de2b449aa1","sha256":"fb7fcfe828d3a0a06a1fb83ef2874e72f46a5894cce8e750c3d14bc87a65b17e","sha512":"d7024def5f00563d49e943959bdc365862897a46ef971e068037aaa7638b7462842efe2086bbf2595775e2f66cd65696d707f8215b0e787062af831d7f383c2c","ssdeep":"96:o4atqskfPlQ8MOXyGpXsqEi/oCZcU6qcziSr1cvsQLpzEw9y9D434oLHu2xpNWj:lwR+Q8MOXyGLEiwCZcU6Hr1cvFL59c4I","tlshash":"43b1a6db65b0ae98205e6aefc51a0808ff8b086ed5656f80c27eddec745205dcc1c5e7","first_seen":"2026-08-28T13:30:26.15681Z","last_seen":"2026-08-28T13:34:54.823142Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.er145q3ubq.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.451Z","timestamp":1787924038451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.er145q3ubq.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4436-3e4\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8a289e0d42644a4e87570c61e5a22f39\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":996,"size_decoded":1508,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (995)","md5":"65aa0d1dc87608892abbefc1bc632e5d","sha1":"25d23bfe74606597a75a139b9ece39090cac8b51","sha256":"819e29fa916dc65ab6d175dc861fb278e158b91c616178d09ef1895a4b09aad9","sha512":"51a9972294fd60317022b7b9adfa7571e2ef1f32003986aefdc93cd83a0e68373e7a211a68421ec5c39c9c4134baad1b64ca98d7a902d2203dc21291b777a679","ssdeep":"","tlshash":"7811eb6649b0887a8038a7edd13950032262183b478e97baf77c4d3a5ea3986472cf46","first_seen":"2026-08-28T13:30:26.262664Z","last_seen":"2026-08-28T13:34:54.824335Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.m0ukmqgf9n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.611Z","timestamp":1787924038611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.m0ukmqgf9n.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4436-1309\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3748351d0d64756b63db7ff62252d443\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4873,"size_decoded":3112,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (4872)","md5":"8ccb06a6aee27b051e51177b3503b89a","sha1":"f40ae2a00f7be7422df78814c5fb7d9a8a246980","sha256":"6fc77bfeedfb0fb148e5e74fe47e014d6599910b0be0eb327ba7b7592710760d","sha512":"fcb87060a384c9775dceac1b34f29cbf8cd75700df75556b3b3c9c1e51d931881348a8fd383bc615644299f9ebeae5cddfeff40b84df317a659aa7f0c20fef46","ssdeep":"96:oybIDu2HFk0l6PMFIBShD4mLfPuCpsSz/rbS/IEc94NlIvn:xbyFrgwIBU1LnuCpz1946n","tlshash":"7ca1d8cf6f904bf59406c3fdea0508da7b2968fb13a64b30c16ccd28b46515cdd0d896","first_seen":"2026-08-28T13:30:26.378808Z","last_seen":"2026-08-28T13:34:54.825492Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.doo8bc6d1n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.632Z","timestamp":1787924038632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.doo8bc6d1n.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4456-2bdbe\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 98697089bfd49b6cbc03277ed45566fe\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":179646,"size_decoded":59975,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"cd78a944836595ae0c34d487dbbb25ad","sha1":"62974644118fff060911ec33e72659991a097889","sha256":"6ad8bd57769dff845c379e2f2919c3fd6728768d2bb26b82388202c3ef12b8c2","sha512":"5424d6d00a81302c4292739017a43c4a803699e76bfbe458c709d21bd33e2747e0298ee4539110d567e17615332b174ad3d301f58eed05a9a5e5beaa451f214e","ssdeep":"3072:Fw9DG2KDiefM2xYGq+frVWeqOz+v5/ayjm89v:Fw90fM2Kh6Tqs+v5y49v","tlshash":"be0418c472e2f07187ebc0aa847b0107f73a3b49a40c955cb17dd9cd3968985a26bf39","first_seen":"2026-08-28T13:30:26.698573Z","last_seen":"2026-08-28T13:34:54.827563Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mefqo6272n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.674Z","timestamp":1787924038674,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.mefqo6272n.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39362\r\ncontent-encoding: zstd\r\netag: \"6a2b4448-e42\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 64b1a3c16a2af727519083f2135a54f4\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3650,"size_decoded":2618,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3649)","md5":"6e7e651443dd00238bbade66b64311eb","sha1":"52b82ee3a65f57b047128d8928f93011bbdcf8d9","sha256":"e21ace544213cbd9477f10dec52f81e5ae63aa116a5518a85e4545d85b6a508a","sha512":"fec1dead2e262bd7608418b03a8e34755bc1022ebf7420b179cb8766bcb2dd3f2de53de108df1a79e688e9c21403e8aaf47fa30d632fd53d02340a599366ad2f","ssdeep":"","tlshash":"9c7176a0f421fabad52f1cfed12e900131164628db2d46f0d0be99280b34556b527b9f","first_seen":"2026-08-28T13:30:26.688387Z","last_seen":"2026-08-28T13:34:54.828903Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nr5pj74ghy.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.989Z","timestamp":1787924037989,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nr5pj74ghy.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4429-27ee\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a03bc0b0c3e00f79899c4802a7d70588\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10222,"size_decoded":4858,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (10221)","md5":"78362e8246bfb270fecd05c03118395c","sha1":"834e10c5cd9d31f80ac077a95034a4889acf025d","sha256":"8b1217e4fca80aac0c6e5277e4cbba8153daf7333a9189ed7d4b6d27e2647edf","sha512":"44974c1fd57415b2f1ae81338d4586e48eb9e0acfa880bc7d5dbe11c11d3e9f6693ac54c8d6702f370d5d0bcb5d01d313b24bd9debd7190fb52e7ed5c3395480","ssdeep":"192:gnT+AyaMehiqYdCCLrSSo9D62XJeSnsiGrt89bnynFWXs9Vl:gZyOfIX2XJeSnsiG2nKgcjl","tlshash":"fc22c71f4bb28d397281837e898a50002bf5dc13daf1da9b1649438dd0d6e9290d8b7e","first_seen":"2026-08-28T13:30:26.674785Z","last_seen":"2026-08-28T13:34:54.830049Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mqjmkudxtf.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.001Z","timestamp":1787924038001,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.mqjmkudxtf.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4429-286f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dbb9f2f2701a2e54d0bbe7d85c61069c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10351,"size_decoded":5048,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10350)","md5":"202d12f008f3b0326911dbdd61591d77","sha1":"4cf0d1e65873f38e954013238a2532b4a0c78dd0","sha256":"164cc56a8fab9cf42c50ea00b4a6d7ff7f88ff3fdb4aa27cf582b06e0c5f0eb3","sha512":"7547750993adcb32336b9ba89ff31dd1e090ae3840d62a02c012240392f05c447a2e5a88900c6dee1d6d0162d3c33bca58abb4acdefbc1de2559231260a969dc","ssdeep":"192:rrGLL28SX+ERPzZUcFgrs+Kc/Nd6TyWU6zctfeeBaf:XD3+CMs+7df+","tlshash":"e922a6a4b185f02c83c9d6fba4a59546b32d0cf13588006df1ec6cd57a6bc8cd06ee7a","first_seen":"2026-08-28T13:30:26.307909Z","last_seen":"2026-08-28T13:34:54.831926Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.on48lmggqw.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.501Z","timestamp":1787924038501,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.on48lmggqw.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.efeo8lfgd8.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4433-146a\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7a5c90bc0e28fb4a6ea052b512ac43c7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5226,"size_decoded":3120,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5219)","md5":"2c832d1f96f4ab746fb128d4711b1a0c","sha1":"4cabb1bc7d19652a74583e67b670bd114f9df987","sha256":"485b739ec1563ef0ad8cf44a9200ba5ba629818aa5e948f0d93573f5627dc49c","sha512":"5f9f756294219dccbc242cc4e1f9b8369b44c194825647f521b2993bcf6f4c5e09bb9c88c05f372ff7ddf6452cb9c469a927fd8448d7c5a7a507750470129c96","ssdeep":"96:zZs3BpU/ueY6RQJPJ8Z05CNbH8COL3eGzGGmaLGGGGms+bH8BNdGn35Vf0d1/DRt:1s3BGmjrB8ZNeZLqaomBNo5Vf0d1/v","tlshash":"21b195d272f6d43cb6c424edd456522be31218ba3b8581bc797c9cdb261e08d42bd935","first_seen":"2026-08-28T13:30:26.697081Z","last_seen":"2026-08-28T13:34:54.833276Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.m75437nstz.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.704Z","timestamp":1787924038704,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.m75437nstz.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.ebp5f8qjr2.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4420-3092\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 61bf8c06ee81c9377345a8e2bb6a6abb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":12434,"size_decoded":6023,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12433)","md5":"d3fc7efc9bf3d8fc351cf2af4cb53a4a","sha1":"130f8c1a8a488a30e7eed4c2c529c8927cc4bef4","sha256":"bfe85ad7cc22667a849019116391bd39a59506f8b30f3e4146fbf0d9634c0238","sha512":"661718309caaf46cf29ba0b872287883526fb4ecd341e50f89e7970f78fb2ae95ebe2efc84c283091258c59eb341ffe42c38c239939a3471ece14d03249a1436","ssdeep":"192:wrWEiP/0h+Odke80xZ2XPkEqg9sI1+VALfW9aL2EBA:KNW+ukEVf+VAClF","tlshash":"0b42ebddb292703491bb65a6803f6319b33f2962a94d4820e52bd4d57d38dc4c723f9e","first_seen":"2026-08-28T13:30:26.304454Z","last_seen":"2026-08-28T13:34:54.834619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-28T13:33:57.005Z","timestamp":1787924037005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\ncache-control: public, max-age=300\r\netag: W/\"6a380032-bb0b6\"\r\nlast-modified: Sun, 21 Jun 2026 15:16:02 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:14\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dab4c713ac58abebb912878fb9da064c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":766134,"size_decoded":193687,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39902)","md5":"bdad9f34578911626d503a8839226a42","sha1":"bfc37f1f279faf89176ee851712a9a64f067c168","sha256":"d3281a144eb20e4a9dd22fb5204564d1b6949153b9b704bec5c8442dfa086a99","sha512":"ea376e999651056ca50d264635ab3741beea96a14c92debc0550c0905c70fdf8e8854fe5f6a81b1ee7178154fe8cb2f4d86d16569e87f26ca614f7d47f43aee2","ssdeep":"12288:ECnx8Pf+i0QiS3C8QWqikhgC/jxhEqmelzyaBah8Ln8Y1cOA1rn/dzDe7SttEAtP:EC+t3C7Hctm+ZmhWmmm5o","tlshash":"e0f4656145dd68ee5205f11bdd08be0e3eef01fe3fa6436215b42d6e36f2424c27a61a","first_seen":"2026-08-28T13:30:26.701205Z","last_seen":"2026-08-28T13:34:54.836012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":175,"connect":1,"send":0,"wait":2,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.j08ll8itxi.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.015Z","timestamp":1787924038015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.j08ll8itxi.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441e-20f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 48ad060574b86259499664cb1f071b02\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":1249,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (526)","md5":"dfcd8b5aeba98b0d6fa2649aedc0699e","sha1":"cfd896c60de09e95476aaeca2414791bece48e56","sha256":"9d4a492d9123fc53271235409021a28e4e6fe3cb469043bec80621c3b9e324d7","sha512":"95e58a6b3130acafcc95a7d85b15f4ac929ddc9d19b7067e486794527b5b12b5df7c7a0c408605f3d5f57ca0ae19d0415019a68078cc1f384beaba717bc11f14","ssdeep":"","tlshash":"26f0c9c9a3b40a76803817fec01f11036a91043b53ce6bb2d0384e39b73a9d5ca58ec3","first_seen":"2026-08-28T13:30:26.199828Z","last_seen":"2026-08-28T13:34:54.83732Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g732ojnkk7.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.020Z","timestamp":1787924038020,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.g732ojnkk7.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4431-4a6\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c699787462e2b5aa4e2e23a2d3260606\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1190,"size_decoded":1594,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1189)","md5":"60bb69623207d124238816d38eddc560","sha1":"2da4978c0fb3cfa287743c2ca3cad791f6594afb","sha256":"5f5947fc600ad0d166ac3c2e698eaa834add7c7ab813128de87df8ce7f188193","sha512":"ae6f075d0e04273a006ba568c3d462918ab671edb0db8e98bb988b5025719ca49fdff297eb40c9af063a0623de6f7a624a3b5831e9b4735d81a4266542c6e04c","ssdeep":"","tlshash":"e12114d9abe04299c24a1b7ce136652a765434ffa75c0b20c1b98f39b1369c1cc4c5db","first_seen":"2026-08-28T13:30:26.618391Z","last_seen":"2026-08-28T13:34:54.838729Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.enyyfsxihi.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.596Z","timestamp":1787924038596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.enyyfsxihi.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444d-1119\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a5fb7dca321135eedabbf52f9f5494c9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4377,"size_decoded":2845,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4376)","md5":"fa9ececea356ce4b069ae9189375d461","sha1":"eddc83df61b66001677f661898ec083122472702","sha256":"9557fed572e60c786c365930d643d89c2a37c7359895ab7c94683d30e795e660","sha512":"ffb2de1f076ecfd490b60a74ec0b9e4b96a154ebb5a6d70ddec7854f4bbb11d34f3d784595a69018e37dd257afc5921748422836d3790feb810ce7320eed6921","ssdeep":"96:z1i9tk9s8wei7R0WMPM3BiQBlDeFZ0/dpKzjOORclYxakBPTZCIff:Ri9tk6PF4+oQBlDev01pKzKOGlqakBPR","tlshash":"e191a64175b494f1819c37f5f4ad1c0247a5a224b9d680c6b9f94ef78bc2cc4d928e32","first_seen":"2026-08-28T13:30:26.166755Z","last_seen":"2026-08-28T13:34:54.84015Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.nmgs6dxlq4.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.220Z","timestamp":1787924038220,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.nmgs6dxlq4.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b1111-1a13\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ea8c880092e5a5afd2f48b8882befa9f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6675,"size_decoded":3636,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6674)","md5":"9f72e98458ab37592c45b20efb38690e","sha1":"7a6e97aab27c0cacdf8736d222f09ac61b9e7018","sha256":"502f8c3d6ac3939c868a4c8c606c249b27cee6e6653ca916ed4ba5bc3fc69403","sha512":"813fd4aae29842b9615fb0eab13d53d1b0d80307b616ddc3ab3b474a894d7179d0b0d6b5fa954da9d1c2119c0a764a7392aa4fb74fe86cf8fd5a06d745fd5a5d","ssdeep":"96:o0BefaIJg/0fEqiO4KsJNzDgaI8hKuOBsH5FB8hXjOi:aJgsbitKogaLhKuOqZPaOi","tlshash":"2fd1753be211d2a6d4e94fefd51e9010b23b1917c7e846b0d0ff972097784a5f42a693","first_seen":"2026-08-28T13:30:26.553433Z","last_seen":"2026-08-28T13:34:54.841648Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%950.25/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/background-image.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.284Z","timestamp":1787924038284,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%950.25/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/background-image.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: image/webp\r\ncontent-length: 76404\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a2a0bce-12a74\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 14665839e8edd71c8fcd646192b781c9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":76404,"size_decoded":77308,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f9550e73fc7f70e6c4d70f5c81808b24","sha1":"46c5bf18935808c6eb7f1249d77454d20833c6b7","sha256":"f0982a7325d4bc7e377bbbfe86ffaaacff90e14126fb1e9c7ae2b6b9a5d09d09","sha512":"b4c91299d22ae9d827cf39577873e2537fc977f4ec1c4144f43dd5b8277c393faf2848412a4cdb8f8d1e76aab7ec1a6cba60651a599eda3385998cb7967fe0ae","ssdeep":"1536:XUSEKrQJ0egyW9ortcQiS/FjhrEWwd2KB3+SCi:ESprQBgvoTiehEHd3Qi","tlshash":"3f7302b3af0d25e6ca3951f2cd49374be3247acc267d866913569c500e1a6ecdca9cc2","first_seen":"2026-08-28T13:30:26.322069Z","last_seen":"2026-08-28T13:34:54.843178Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fomxmu0ozz.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.603Z","timestamp":1787924038603,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.fomxmu0ozz.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4451-352\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 912440e6399ed7de46c28fb56b343b01\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":850,"size_decoded":1410,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (849)","md5":"c6e7a73038e74d7b04cfa7edaea2010d","sha1":"96610092a95673e15dda2034b3fd9ec51314173b","sha256":"bd5f516ac02b3b6ff0286679d8dc593b36afc7ecf5dab13dd1451bef11ed20ee","sha512":"aff3d6088f43ea6787d2b36d2587fda0ea586163aa63b74e027f328e7fd77a510322165d8d4a2034f5aae1cb177d606dde2ef3a14e9e3901ae7d279082048f2c","ssdeep":"","tlshash":"9701af8dab306a79d02d17edd02b10025210487f635d0aa2c17c4b3a37365c2e659f4b","first_seen":"2026-08-28T13:30:26.407428Z","last_seen":"2026-08-28T13:34:54.845059Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gw3dphk24n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.613Z","timestamp":1787924038613,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.gw3dphk24n.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443f-403\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a936b39ebf2a8c1f97045e91785d70bf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1027,"size_decoded":1564,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1026)","md5":"c85d21a3faa01c581ae12d008e2f9233","sha1":"4247298012e31cb6371c0c507c80d6b22696c4d6","sha256":"bfeb9e78127a6518f118751672376d1ee689a1c26b04ad90e976a35ef050c365","sha512":"0175f16344f049b3f743f1f41d0f3b8a43990d42e87935113c67fad7fb35ea9c16cdf84a2a28813bbd685a7a6e63f6a5bcf88adca564eae9a5f9fe26c66f6bfb","ssdeep":"","tlshash":"311135e596b007aa411d07a9c86925075f621cbf538c8f34d16c0c797b2d6c6499ca47","first_seen":"2026-08-28T13:30:26.611245Z","last_seen":"2026-08-28T13:34:54.846563Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.cq6l8031i4.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:59.036Z","timestamp":1787924039036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.cq6l8031i4.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b110d-12ed\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 98c2ecfb649432181b226708525cb69c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4845,"size_decoded":2922,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4844)","md5":"d22a842e933945ada044a9f6c4fb45ca","sha1":"4f7080c4046c725e32bf8eea76f05eb9922f73d9","sha256":"a90a0f7f9f4efb99f6e294405c1c060d67745d12247f91d402b44311e48b4f6c","sha512":"d5d3c169d1e4c5733155a8472d76410d4b294c9a3b08370274bf290b3cfeedce7f84686c98017de7516efecd03d4ff1d75bc209a22aa84144cb61d848bd1e417","ssdeep":"96:OKXk8Lr4HMD/fotR0f5hxN5fMwPn0eC/9sddzyNrfWi:5kS0+nRhJMwPn2OcrfWi","tlshash":"2fa1fc3be010d9b7a8a59dffe41ad0362137156b93d483b1d0ef8a3107251b6e21ab4b","first_seen":"2026-08-28T13:30:26.465218Z","last_seen":"2026-08-28T13:34:54.847995Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fl4amx53sw.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:59.051Z","timestamp":1787924039051,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.fl4amx53sw.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.cq6l8031i4.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4426-398\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4c5b0ba3012d66ff8e77015bcf657265\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":920,"size_decoded":1452,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (919)","md5":"3c9a97ce32dc83491524b672143b688a","sha1":"e3967f302b80dfc7aae547a2c3e2feef5f04ed0a","sha256":"c5fcac109a7ce0cbc26db83656ebd71e57e7f0ca06d80981c79c7983f6a0846f","sha512":"8fa7c5ad2e67fef083d84d886b28ee442200e0a33987f92b82e121263313c7141dd917a0b423258a3f8c1b0393751faf0a9720963a9f347e71ecedc722022f54","ssdeep":"","tlshash":"91110499a6f01276d13525fdc13e455332140937278d4660d039563d77f15e78625fc2","first_seen":"2026-08-28T13:30:26.426306Z","last_seen":"2026-08-28T13:34:54.849392Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gevdbmkx2v.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.990Z","timestamp":1787924037990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.gevdbmkx2v.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4420-1c0\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f7f3fd949eaba68fad4f59b542a2676a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":448,"size_decoded":1205,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (447)","md5":"c5a259bcf0200e70f59184ba39bc2318","sha1":"9d9956c098d1722746b6b37aa27e52930d758646","sha256":"3df729e0f2ac8dfe293e71bdaca61410f6c802e8b0f40b0eae008264787ddaca","sha512":"c63109d28657842996b40fd9751a3a4ebe39d4ee9d36fea8236ddff4992fa5af91b2d9ad631fc614f13b1ffdc73eda05d85264cfc639b990c3cd3d97b2e7e42e","ssdeep":"","tlshash":"32f0e5d187f00676a05c2bbcd13b15076680543b47dd8bb1f2394b392a656ce8999a87","first_seen":"2026-08-28T13:30:26.185479Z","last_seen":"2026-08-28T13:34:54.85056Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.n10wlbmc1t.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.644Z","timestamp":1787924038644,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.n10wlbmc1t.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443f-3a0\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ad954cdd03e8233d58ea33a02e7f15ef\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":928,"size_decoded":1443,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (927)","md5":"131c8d8d7c1f5038edfa3296f99fc258","sha1":"13c7ed1061bc9c3f70ed3b13dd4a44d960beac79","sha256":"47bbae2cc93172335a86b28f51e7ab3c8f20f0e2ec994a8ffa66a2185a0186e3","sha512":"45d174f0b53f7c57f7aa835bc7ab1a97c8efd9e7e3b20e7e2932b6ed3be6fe2fe7848d0d30ae91f4387e6e297f135336270cdaf7910452ec376079805d3842e4","ssdeep":"","tlshash":"c911bdc4b6e0e459975553f9c0bf1516b15805338bcd1bb0e07989747e3609ac215fda","first_seen":"2026-08-28T13:30:26.692406Z","last_seen":"2026-08-28T13:34:54.854229Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"metrics.cs2go.money/api/12/envelope/?sentry_version=7\u0026sentry_key=da19e2c6e5d741efbda9d313341ab6d6\u0026sentry_client=sentry.javascript.astro%2F9.47.1","fqdn":"metrics.cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://cs2go.money/","date":"2026-08-28T13:34:00.004Z","timestamp":1787924040004,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"OPTIONS /api/12/envelope/?sentry_version=7\u0026sentry_key=da19e2c6e5d741efbda9d313341ab6d6\u0026sentry_client=sentry.javascript.astro%2F9.47.1 HTTP/1.1\r\nHost: metrics.cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://cs2go.money/\r\nOrigin: https://cs2go.money\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"metrics.cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hqup59qpwl.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.986Z","timestamp":1787924037986,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.hqup59qpwl.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4425-10bb\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5bcdca3aa2e5e877db44c5c4d63ab074\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4283,"size_decoded":2859,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4282)","md5":"2bcfe9320307394dcc3999b4de5c9fbc","sha1":"17b15a21f2af0dcd872413e16e7600583549ccda","sha256":"0102df2531504dfc0fbe2b456eeb231e6f7764d4be3c87ed980f1b63c60ce52d","sha512":"baa25331fc9462c75e25999e040603a8c431b2631d2278cb87c9c472450d67df8d9b85eae508afeea086ffa6dc0ca9d3ece7b5d83956b143c248a7cd704ae476","ssdeep":"96:o2v2Kw4yGC9rIB00s9K0HVqHFs29qCXwz+TGm1L:ZwIuUD8K0qlF/Xwz+TGm5","tlshash":"9e91c6d162829d3445da659db23ac3206777191a328e5440d0ff8c282f72fd69a7bfc7","first_seen":"2026-08-28T13:30:26.535182Z","last_seen":"2026-08-28T13:34:54.857119Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nysn2cz0ca.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.586Z","timestamp":1787924038586,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nysn2cz0ca.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4420-24d3\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7d72b6c59b62d95d54d3c24027bccb5e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9427,"size_decoded":4593,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9426)","md5":"6e7f78bfcd308ca61b9791a3bfeca069","sha1":"91108b090bd37b9671f0da81df565f09e0f172a0","sha256":"711b53635f6c8d7968df7af077d0137a4901f5698561f789087c2ec5f9682ff9","sha512":"9c7679a34167e6ed5ffad6cdc04f96e5bdbaf3567b88161e25a8692067babcd0d23235fb219983736302845a31ccb755375158fabec34db12b5297221263be36","ssdeep":"192:7J1Cabrsd+6NZUI6kxMQdsLW2cfAERBvGqqhDRldYh:vPY96kxMQdsL5cf9fHwL4","tlshash":"5312a484b0d364b609f34765dc2f414721b91c5da9ced028b4bad9ea39f648e6027fb8","first_seen":"2026-08-28T13:30:26.374931Z","last_seen":"2026-08-28T13:34:54.858571Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hb9ak5j9k4.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.684Z","timestamp":1787924038684,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.hb9ak5j9k4.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4448-40f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b6261bad635dd739a20bf9178e4db804\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1039,"size_decoded":1502,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1038)","md5":"76f0b4c941dab5c9dc86721a850473a5","sha1":"6d650d6b769714b0131c37cd3c3d34978a2afb37","sha256":"a7990da5e2f6928a76049d065a21a2b1dc886ea854c23828c7289c8b30a30aac","sha512":"0c6846f61a514b469663a6f5e110b6a6bef0669f3b690cb6cff9ef5b944464f831c8afe9d471f44c8e67ce48ce3782b6d160e86214915f980b05c38cca705004","ssdeep":"","tlshash":"b011216c57b6eb1a312527ed805902412bf09033d7bd45e5923c4b2a166acd2844c3fb","first_seen":"2026-08-28T13:30:26.630115Z","last_seen":"2026-08-28T13:34:54.85991Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://cs2go.money/ws","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cs2go.money/","date":"2026-08-28T13:34:17.472Z","timestamp":1787924057472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cs2go.money\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: /cGSlez6ZXRnCVicINntLw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039; currency=RUB; user_currency=RUB; locale=ru; user_locale=ru\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 28 Aug 2026 13:34:17 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: BunnyCDN-NO1-830\r\nCDN-PullZone: 6131853\r\nCDN-RequestCountryCode: NO\r\nCache-Control: no-cache\r\nCDN-ProxyVer: 1.62\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 404\r\nCDN-CachedAt: 08/28/2026 13:34:17\r\nCDN-EdgeStorageId: 830\r\nCDN-RequestId: c4bc0724b1efed15d939fa784829df24\r\nCDN-RequestTime: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/ak-47.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.746Z","timestamp":1787924037746,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/ak-47.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 369520\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a28e804-5a370\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e97f8c4114ea0ff1466d07e0ec9881de\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":369520,"size_decoded":370425,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"73c05aa78bd5305df999acd222c240b1","sha1":"9de086ec12d35ce876fa6d667b4da10a09026d65","sha256":"00aedb7622bbcb31980cbdca626566110331505076c8196b73311a86e3957324","sha512":"195b4623c1ee80660ab8845ab1921f209341e88ed61b1338e52ffebdcd3a58197a168137309c07ccab48f46f3922ace86105c61354ddbd272b0a82b3c18a5cd7","ssdeep":"6144:oSlmz7nrCroVFg0XiKAfivz5MUZg3JeXlgGIyORgahQFd7xfiMFOappG2pR:oSwz7nrCroFg0HAfqbSeRHT/7YIko","tlshash":"847423bf27c23d3fe541996e1122954ec7e11d62828fdd3ef022be92822347db985875","first_seen":"2026-03-28T00:06:33.500801Z","last_seen":"2026-08-28T13:34:54.861149Z","times_seen":8,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1O_eG7e5tsLc-XAXeAzetkj_FhTjq2xiIrujqNjsH8dSrDOgZxCsdwQbIKshHqlYa2Y-i35wzW2ItEn3mtjysdvS9s4ekET-N7rUzmvdlV.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.765Z","timestamp":1787924037765,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1O_eG7e5tsLc-XAXeAzetkj_FhTjq2xiIrujqNjsH8dSrDOgZxCsdwQbIKshHqlYa2Y-i35wzW2ItEn3mtjysdvS9s4ekET-N7rUzmvdlV.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7662\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295da9-1dee\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a950d2227219fde7c633308f301982f9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7662,"size_decoded":8564,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3b0dd3f61b95bb57ab43754393c249a3","sha1":"88faf30aad5f15676fe47f28c629588ac5987d95","sha256":"351b8fcd03efad2a29a191778b1b70f5d9d6fc7941ca67594d1fb9ba154af3a8","sha512":"8a02766a87b3fbf259337d75a3546c9ba53a36ebd6a9ff48d30c491f3a1e0dac9f0bf936bab2e5dde085eff2c079683517f35726bc5e9cb13a4ff4e2a9b616d1","ssdeep":"192:VgU8IMjYz8X6Mt6ne9IaapNZhtY2/marsH8rYGhKASNml:VwvUYKayaSZPY2uarGG4Vml","tlshash":"c3f19e6aba457ed5cb0f383dae8e9f5342c4f76950aca4993b009c84bdc8a015d929b1","first_seen":"2026-08-28T13:30:26.514454Z","last_seen":"2026-08-28T13:34:54.862034Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1U-uaqZ6t_H_GeMWqR0-x6td5vTi22qhEutDWR1NqsdS6Wa1UpC8cjQ7QJ5BHqx9zjZurgsgfZiYgXn3r7hy8b6yo_5OocEf1y7tM7KOE.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.768Z","timestamp":1787924037768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1U-uaqZ6t_H_GeMWqR0-x6td5vTi22qhEutDWR1NqsdS6Wa1UpC8cjQ7QJ5BHqx9zjZurgsgfZiYgXn3r7hy8b6yo_5OocEf1y7tM7KOE.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 15080\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290b83-3ae8\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a55b9bae3e9aacd29e5dc8929fa4f5c6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":15080,"size_decoded":15983,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"907db0a3398f5c7771bc407216a71123","sha1":"0ca4faeef7f4f60459e1ceff1ee37bdff2f76476","sha256":"510fe4456581935bbdeaaf55a98f696e3e230289c043231ea6d45d9db2f5f8c4","sha512":"ecdb97cd7c11ed1596f554d3f92bd435c33efc12bba2ef2270c198b3f2c9a64f35d491ca9a4c8493fde23b80e2f524c5c27b49249fc70bcdba231c79dd6f6ba0","ssdeep":"384:3tq1Ah9iJjUxL8VkBf2Rh+CgBTw9u/c5wgFo2l:9qQiZkgRwhc9vH","tlshash":"b062bf8a4214caedcdd88dbf46e4d33b853159aa12a7cc2bd1b57020129bc035f8af24","first_seen":"2026-08-28T13:30:26.539549Z","last_seen":"2026-08-28T13:34:54.86342Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1I5PeibbBiLs-bF1iHxOxlj-1gSCGn2011t26Bytr_cn-VZwciXJskRLQKuka9k4ezYrnqtQXf2YhGzC6viXxXrnE8k9yhp-k.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.775Z","timestamp":1787924037775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1I5PeibbBiLs-bF1iHxOxlj-1gSCGn2011t26Bytr_cn-VZwciXJskRLQKuka9k4ezYrnqtQXf2YhGzC6viXxXrnE8k9yhp-k.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7438\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a291233-1d0e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0039a9cedf0fffb32bdc03f30d1535eb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7438,"size_decoded":8340,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0edba7fea84dd107d56cf8d70b4ef1bd","sha1":"c03ba0d57e8d5c34b12d40f09d6a5950f4cb3aee","sha256":"60c12ff300b9ab77db4f3b4f0da742197313068434048c2799b5fbcfee8a9de5","sha512":"8724c32cde4756345bbd484bb6f1ba2fdd4ca4c513a3825df43bde71e432cfd0739beb991d33a43b63631bc5fd7ef74a914f4063805f56e17bef8b37842f6a4a","ssdeep":"192:GOeKiiM8x+wIW7KimNuObZfcB+ui0YHP7HyqtxQn3ysl:biiD+w5KdbZfcBi0ejSf3ysl","tlshash":"fee18ec5b0835232e16b90bf3c876bbffb91a55b2259381a36602c447b841afc949481","first_seen":"2026-08-28T13:30:26.637724Z","last_seen":"2026-08-28T13:34:54.864581Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.e8h1fjozuh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.476Z","timestamp":1787924038476,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.e8h1fjozuh.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4425-6cb\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2e71b337239bf4db61e00c0cff42d36a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1739,"size_decoded":1755,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1738)","md5":"0265a955cfb62f223146cf743e12ab90","sha1":"65a4529d9428071602e5c61b50f678d19cf99e2f","sha256":"9cb541b97514c99e51306f7cc17b3b321a9a0226430a16ce6f5a61b7a40615ec","sha512":"33593442da633afee55377d05e40c6cb4ea1856792cc8a3116ed82a5959bfde83a52348699e9f3b3460673896edd47265ac98a5d0474c26e0c69ae21457f8906","ssdeep":"","tlshash":"ad3156d554ab907c519dd7f6d4255302232403f31b6886e4feb84db267728c3c62aae6","first_seen":"2026-08-28T13:30:26.493191Z","last_seen":"2026-08-28T13:34:54.865752Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i7xfo1k0uz.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.592Z","timestamp":1787924038592,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.i7xfo1k0uz.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4453-da2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ebda8cf1b69a32a3b1fa468385695977\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3490,"size_decoded":2663,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3489)","md5":"fa04db7283614de1b4712c6d28828a37","sha1":"208e321b493253e595c7ef9df84da2d76c3caf98","sha256":"f220db342bb8480e0e04bf743ea04a81346dd4d8629eacf9a566b2a2c8866c06","sha512":"8465ed7497b3d4afa5d8124ade86f98a5338889ec888c333327c4b5ef51fbfa11f663ef47a36e2ee378c59a1f492dd542f5cbd9f78bdfb1d41453b93e9f7ab4f","ssdeep":"","tlshash":"4d71a9e6f160e634905b46ff812e551137253a3da2de4a90d37c8d1d2f31845ea2abcb","first_seen":"2026-08-28T13:30:26.669712Z","last_seen":"2026-08-28T13:34:54.866982Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/karambit.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.755Z","timestamp":1787924037755,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/karambit.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 260814\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a26c524-3face\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8a78696b91c1076e58c314150283a5b9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":260814,"size_decoded":261719,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30118a745d33a6420dfbf7e3bbe6aaf4","sha1":"3d9ddcb82a8734cd8b8cf1e02fa617f0b9436196","sha256":"9788df545f2341337d74e0587a0d9e24c4cbf9942802976f2005d5ff35475900","sha512":"ca98326c751c5d94aca60c7154fe5c468acfb08890120ae0dc4c64641f2176ccf4f14d138fd743b45020f001366c23c6f28ad46722069b9ebe74cdba6c89deb3","ssdeep":"6144:1upsRN5naj/RigpWOn3iKN+mQgtWm7Q54blE:1Q6gQO3tQgtWsW","tlshash":"8744230e99bf7df9e9d616f347517a5a90372102c225a15a213a903cfcf1a247ccc67e","first_seen":"2026-03-28T00:06:33.48052Z","last_seen":"2026-08-28T13:34:54.868076Z","times_seen":8,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1P7vG6YadsLM-SD1iWwOpzj-1gSCGn2x8hsW6DmIqpcXjBZgYkCZt5F7VcthS8ldS2Nr7m5VCMi4gRyyuqjHtXrnE8oar8MtU.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.788Z","timestamp":1787924037788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1P7vG6YadsLM-SD1iWwOpzj-1gSCGn2x8hsW6DmIqpcXjBZgYkCZt5F7VcthS8ldS2Nr7m5VCMi4gRyyuqjHtXrnE8oar8MtU.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9240\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290b96-2418\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b4ffea22ff37f20bb20ad97d36e5d076\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9240,"size_decoded":10142,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"327b029c1b0a465706f343e0b6471c04","sha1":"468f1b258d476ac0c92b0629c2b62f1fab15793d","sha256":"489bfb23a2d6e54e8c3c2dd054e2642935a89a0c2d361cdf5f2df7e05f91433f","sha512":"bb4f4a759c0c5af3d50402a34cb3f1249e662011ef188914df196eeb6051989455f15ba13d81eb0d4919aac6e865d6e46431f07470ead77bd76f005fc925089e","ssdeep":"192:5I5vefxe6gLPQ5R0mqE/aWQMiSDOPZy8O76QxSRnIuyqFatqcIXl:52WJe+LQiDOPNz4SRnLFIqc4l","tlshash":"ba12afc539074105de4e2eb024f21f4ed5748852a2bf1d7f623a9aee31885dfbd9c119","first_seen":"2026-08-28T13:30:26.657702Z","last_seen":"2026-08-28T13:34:54.868823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.odzqybxv3z.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.453Z","timestamp":1787924038453,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.odzqybxv3z.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4446-e04\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a182661ad8925e25f26b014883071fbf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3588,"size_decoded":2481,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3587)","md5":"3818253c3dcdc35a4297d5f78c249713","sha1":"eff22a8350890f6c2d851331ff0063eccf315ca3","sha256":"e1862b222cd5a8995c8f9b8f6e0362e7cf5b3ecdf51a091334d424aef44b5827","sha512":"e750e67d513f8584db402f59394a724485fe9a10b34f823df98907e3b7e279bb59dfed83a00095b6edf58933d70d1acf977b26437992793e58d95e2fd1d6183f","ssdeep":"","tlshash":"f671b492b272947302cda6dee006406257dd2976e71b45adf87c8ee706b9c8cc03967b","first_seen":"2026-08-28T13:30:26.274746Z","last_seen":"2026-08-28T13:34:54.869899Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.dnmqow1uhh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.638Z","timestamp":1787924038638,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.dnmqow1uhh.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39362\r\ncontent-encoding: zstd\r\netag: \"6a2b4456-412\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d3ffabe2b78410e213bcd950e1dae4ab\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1042,"size_decoded":1542,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1041)","md5":"3de509dbcc691ec99e28482084a360a5","sha1":"5b47c11ff8d046ef4807769ffa08a57a59192b77","sha256":"3f4977eb33290fc0c6d3d518fdb81da19658843bdbf63167f9d6f4cc8fae877d","sha512":"e3ec5bfe980777826a84d68ea8d55623d6a4833515a8213cbf76d5c7447ded74e4581157cd1d968f7eca535d30e4c95d77c0753a04b89d054c7f825154639b8e","ssdeep":"","tlshash":"9711da9007b80a4d904d46ebea24680a77e8163e578d067192ec8e3cbf7edc4121cbc7","first_seen":"2026-08-28T13:30:26.687166Z","last_seen":"2026-08-28T13:34:54.870964Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/pointer-karambit.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.757Z","timestamp":1787924037757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/pointer-karambit.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3414\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a26c524-d56\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f2a1c1911cd6afc14a529a6965b366f9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3414,"size_decoded":4315,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7594802ef1cebc0bd8b0adb5a8c0f55","sha1":"e24ddc87746cba68d82703e62dfd3ded9ed4df15","sha256":"c0afccde05f4e6f285ebb4d9a8b8ef4f8aac1a9fd673722c9383ad5d2f93635d","sha512":"9f3a52e9ebeaf7c475f226ea9f8def82b1d451f27c573ab2f0439325aa2df1628aeb959f55c67bec3837aeeeada86046a5b8f926955afc6aa3dbfc19b0eefc9c","ssdeep":"","tlshash":"8c614bcbfa628128da83e5384b7fef2f932508a9063dd541222d5f855a33d46078446c","first_seen":"2026-01-21T21:58:44.874323Z","last_seen":"2026-08-28T13:34:54.872019Z","times_seen":3,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1P7vG6YadsLM-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8chTLN1F4ToxwTLFe5EO5x4LhYuvi5w3eiIwRyi2qjXgYvyZj4ugCWKssr6XRhwiTL_RjthxPDqn6.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.769Z","timestamp":1787924037769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1P7vG6YadsLM-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8chTLN1F4ToxwTLFe5EO5x4LhYuvi5w3eiIwRyi2qjXgYvyZj4ugCWKssr6XRhwiTL_RjthxPDqn6.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10900\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a2926e7-2a94\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 384a397ce8b915c6c57bd7a6729d3504\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10900,"size_decoded":11803,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f52c42aca6a6249136a92f92ddd65da2","sha1":"b611f55d6f4985145c384b0158828d7d2d5e1761","sha256":"2c962b41ba4f4f9742c5938fb2a7c2942869163254227a7a9cf65b244d46bbf9","sha512":"1f51339becfe7ffaee574ab5022385ed19811777e9291d654076ad74e7eb1fb5cbc07c320c3a27a5b3840750f6b369285fc1ddb207cb0af272364b439797d879","ssdeep":"192:/I5vefxe6gLPCgzKJUwcOSYWXlq6rChcYBhFasJluYVKel:/2WJeAuKFNS/lq76YBhFTJluYcel","tlshash":"8522c0630ae28052dc505bbc55eb0b4b9ad8d1c071f69efe7660c463e70513b3a791ed","first_seen":"2026-08-28T13:30:26.672316Z","last_seen":"2026-08-28T13:34:54.87315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1P7vG6YadsLM-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8dRTLN1F4TowjF-ULthGxkdDhZuqw4A3diYwTyiX33S8f5yto4rkKUKsirqzTigySL_RjtsSe7bgM.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.778Z","timestamp":1787924037778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1P7vG6YadsLM-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8dRTLN1F4TowjF-ULthGxkdDhZuqw4A3diYwTyiX33S8f5yto4rkKUKsirqzTigySL_RjtsSe7bgM.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10886\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a2926e7-2a86\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c3184922609ee846d02d4893c020bf2d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10886,"size_decoded":11789,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2455dc849f1db78c318ad7a7dae2ee1e","sha1":"8162a82187d30f7835dee995a99eb5c847ee5fd7","sha256":"9fb844fff813a11aa4434efe8022f5953d7b3c1e773ee95fa7b01174702f662f","sha512":"6560177682877d5915a8fa805dafe0ea3e4e058c742d99b48e782805205ae344e4888da47cd5a9f7d54323b62225a7319851957d51dac3050fbd8ceb54323ef6","ssdeep":"192:lI5vefxe6gLPwhNee3S1cjUAU+fER6q/PfOOIscTvwL8/mmrM3Q9rxRwG2fVl:l2WJe+iiSajxlfERzOzscTwL8OR3+x8l","tlshash":"5122beadca951053d12110be0b336fba4dace9d7a35f103359d44c8cba188d4dcaf856","first_seen":"2026-08-28T13:30:26.451043Z","last_seen":"2026-08-28T13:34:54.874282Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1M5vahf6lsK_WBMXSA_uB_t-l9XD2hnA0ijDGMnYftby3GOA4pX8EiReRYtkbtkIXkY-y05FeIg4NCyi79ji4d6Hw65-0CAqU7uvqAN4w4WLQ.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.779Z","timestamp":1787924037779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1M5vahf6lsK_WBMXSA_uB_t-l9XD2hnA0ijDGMnYftby3GOA4pX8EiReRYtkbtkIXkY-y05FeIg4NCyi79ji4d6Hw65-0CAqU7uvqAN4w4WLQ.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 6442\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290b86-192a\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 329727aab8c4b5fded1de764bf01249d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6442,"size_decoded":7344,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fcba9205030ba690fd3ad1410767196b","sha1":"e2bf373ea3fcc983ea83eeec23ca46ebd8ed9f07","sha256":"99d46e4b2da06647cdcc7fccd700000544e9315f80b5070b1583af24280a1f3f","sha512":"0cadc762ffc59c7577406b20a5627ae9e17fffcb0b54986d21bcac0a797674a3c68efda38324121564a1a47a5ff3693edc7dbaef8bd155a0b5e6e8fe2d7d6dab","ssdeep":"192:IPDObU6bFnqpO8VzzczEBruf/zOdc32k0l:IrA5ba3zzQEwXidcB0l","tlshash":"e7d15ddf6b5816168a227d341ae74f394ca1dab0d22a4b3b070d5056bbfe17d2c9284f","first_seen":"2026-08-28T13:30:26.27878Z","last_seen":"2026-08-28T13:34:54.875187Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1c9uK9cZtnIfOYBWmZx-tJsexWXCijhRUuoTi6l47rIyfCN0x1Xv0sHLBS9g6_m4GzMr-xsgOIidhMyC743C1O53ti5ecCWPAmrqeCjg2QNbU06ZBROr_5GjZZEpGb.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.792Z","timestamp":1787924037792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1c9uK9cZtnIfOYBWmZx-tJsexWXCijhRUuoTi6l47rIyfCN0x1Xv0sHLBS9g6_m4GzMr-xsgOIidhMyC743C1O53ti5ecCWPAmrqeCjg2QNbU06ZBROr_5GjZZEpGb.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10190\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a292f9c-27ce\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 54ec0491f98e11c99dcb85cebc876102\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":10190,"size_decoded":11093,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7fef2ce565cee0897f4c7903481138d5","sha1":"6b872c5ec918d4e2eb6444d617fa1ece465eb45e","sha256":"32de2158d0a90092df9df14d3fae34d7047b07b2c850bcbe2ab3deaae171d7ae","sha512":"a72d4e127f826aa96d1230c8d3fe40b2b3eaec6cb2442263f117967e1ef2ce690c17e3c5d24f88c8599737fe7886a28fe494a018781387e7c4d0bf2e93fda745","ssdeep":"192:yygyegtRp2yYYfgPq1nAZQSJrFkMD02XgkOTA0ZG2wLbYZ3ST+j004RjABAMl:Gg3HVfswkQ2RD02XoNcgCCQ04RsBl","tlshash":"fa22c09fb588c833e79dfcb8132133390b03951a95e98096287dd41a38f940a561aedc","first_seen":"2026-08-28T13:30:26.314529Z","last_seen":"2026-08-28T13:34:54.876137Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cj5r3010b6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.934Z","timestamp":1787924037934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.cj5r3010b6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.3c7dshfnbg.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4423-326\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 148625348c9134a165d4d186d9816fb9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":806,"size_decoded":1322,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (805)","md5":"5056a21ee034a3c95f0639ae86443cc1","sha1":"91ec4bf0a09d5303647b5b6722e57e4d3b8fb027","sha256":"293ff0f77bbb3e9c3d7a61b85294d31ddf0e5ab58b8a47ce39e7963863d14eb7","sha512":"b041be916f2d0e05166e68db49a12cb6520d358d71af063f9cac218f3534ad7f453e8f8c2ecf9264fd118a7c7b027c043c21206baeafa572de7f9a87f75bccb2","ssdeep":"","tlshash":"8f01ced126e98b166079627ef0273353b10408b31b4c7573b83f69b5e9146834b507e3","first_seen":"2026-08-28T13:30:26.649727Z","last_seen":"2026-08-28T13:34:54.877037Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.o6gjkfl42q.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.221Z","timestamp":1787924038221,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.o6gjkfl42q.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b1111-67d\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 720181b6b0c9bf8ef4b4c7f1d4ea7d61\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1661,"size_decoded":1743,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1660)","md5":"2d59ae2ba62c55d17a960d1c648ba14b","sha1":"45960fd1970816091b8dad4244d0c3d9974cf495","sha256":"66e9552447b6c6c43a89059665b2d608b8afc3f704fb4de7652ac95bbd9fa21c","sha512":"af56ab45ad9f26c1205519026352a9e40a65fbad03fae3bd3353169fae68722fc73b800a0adae23664aa4ba899812027f9519450ba0f27d8c2bbc8d39aa4363a","ssdeep":"","tlshash":"6b31c9bbd564e96b45c89efbd12ac1321076043b13d4c7b2d1ef0b7a1b210bac419a43","first_seen":"2026-08-28T13:30:26.506417Z","last_seen":"2026-08-28T13:34:54.877981Z","times_seen":2,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jwfwq9xh3i.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.469Z","timestamp":1787924038469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.jwfwq9xh3i.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4447-601\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c2d23650766c71f55dc34645107ec0bb\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1537,"size_decoded":1703,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1536)","md5":"3c4053b65f7b04fa641a9451aed2dab5","sha1":"4eefcca0e539fa9bce20ea8bd8fe5ae41939af2f","sha256":"426f9b9dcd527f96c6aebe9563cc4aff191ddb615a3634de066720698cf39074","sha512":"d65317306a323cfbe62edcd82b8f4ac09786aafd24bd048f3df482430d37eda7969a52f35ceb8d6a0ff3b21eb55baf2df378e81b66cb023472f802013fe2008e","ssdeep":"","tlshash":"c631f24e07708e39b2a617ad875f1002aff5c973d2fc4e656228079858c1d65819ebbb","first_seen":"2026-08-28T13:30:26.536619Z","last_seen":"2026-08-28T13:34:54.879045Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8cxTLN1F4ToxxF-4P4BTtl4DvZem04wbejY5AyyqsjS0a6Xw4tuYFVvcmrvfRhw2TL_RjttGzwP08.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.764Z","timestamp":1787924037764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8cxTLN1F4ToxxF-4P4BTtl4DvZem04wbejY5AyyqsjS0a6Xw4tuYFVvcmrvfRhw2TL_RjttGzwP08.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9848\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295d8f-2678\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0d57666d51848f7205d8ad34b39c4c40\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9848,"size_decoded":10750,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82105f5474f2bacc5c40fee47f3d99b7","sha1":"da2eb826ac70f9f16ac5536db0c9e6939e95b3d8","sha256":"bacbcbfd972c46ad4402ff55c48e6fd3baae59837628338aef997f2ba374acd9","sha512":"e9321cfac2b9889cd900917e743467da60c68d486633635c311ea584bf577373cd7949c5ea2238dae7b78e252b5259f5901222646815d18bfc766f1aa18551a3","ssdeep":"192:4agoJuYgQ7aCjUKEpNPm9BajPlj5UE2NdoKc/2ga7pvIjVWC7O7Fl:4gTgIaClEpN+WPrUl6ag0an7Ohl","tlshash":"be12ae01b656dd0ac96101bcabdc623712295f651bb6372dc4fe19007d2e87c7e0ce27","first_seen":"2026-08-28T13:30:26.651782Z","last_seen":"2026-08-28T13:34:54.879929Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lqj9c088wd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.465Z","timestamp":1787924038465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.lqj9c088wd.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4434-3727\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 37b00f007a2bb0c9edc7d485b293a2cf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14119,"size_decoded":5612,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14118)","md5":"7dbb1d5150384e9b8f1f5c14965046c3","sha1":"9ce357ec0f7268c2a4d217065209ad67bef4d0bd","sha256":"c0c107e36b3d6cb8bf3af91a81b7b8eea20f436a41b2f59cae16d16e4fa866a6","sha512":"6aefc0f2994b6def2f6fcc436e3f7ed86caab2a064867046c6ace22361378bc7258239768fc35733021462ba51e5204ad1dad838950a4e3577d5f53748ef3015","ssdeep":"384:kkAY8Jiuz8pyp+zKCjlEc/T25OeIFrvTbs1NURit:kpvz8pyp+zKclEc/TXFr7bs1NUU","tlshash":"8c52748af5f0ad6e731f658ef05a3900efc66e6dc014bd80e17dc8edeec11964459a22","first_seen":"2026-08-28T13:30:26.495881Z","last_seen":"2026-08-28T13:34:54.880812Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.u29w0jc20k.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.636Z","timestamp":1787924038636,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.u29w0jc20k.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4456-437\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f2b20de9fc4639d99edf78e9f6b5a96e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1079,"size_decoded":1576,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1078)","md5":"a672d1b4a683b2e7cd101c9f3de7bd08","sha1":"7ff2ef03165438e4eb6e5966e35c6c77e2cbebc4","sha256":"7ab20018009774433ad23072c897ff20f1e0ea12e08a78fe944c2ec53af3b802","sha512":"381f5605cd817c589d780e6cdcde5d95b9cebd1f16c03e01939e1c61c76194dd05ce39ff74fc0f14f21b5dadc22a11f4425edafa0cc122a73bb9b49c2272c41c","ssdeep":"","tlshash":"a111f09017bc4a4d414e13eaee352906b698153e43de493092ac4e2cbe79ed019287c3","first_seen":"2026-08-28T13:30:26.325379Z","last_seen":"2026-08-28T13:34:54.881616Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.czkx6zts7p.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.655Z","timestamp":1787924038655,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.czkx6zts7p.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444f-1f9\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d2d9200c0974bd32f6057ec5f8e42326\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":505,"size_decoded":1235,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (504)","md5":"6e3e1ab90b093367f9c4abf3f6653ab7","sha1":"37cb22da3f424fcf9d9a51e9fd8f3bc21a6bae39","sha256":"d4cc2083f5cee99710581bdc9ad6ad04acd0fd8d20abcdca33ea8efa536ccd0c","sha512":"9a96b4bcd6702621bdd9db53bf240a52f2a9c16102dd2b7b594d05df475fd80272ab7f76ead0e74f3126b914b71269ec8c02bddc05fe079d78516f675c4fa246","ssdeep":"","tlshash":"3ef0b48847b04d56c01913fdd267050267a4443793ed4ff2e2784b297a65ed581987e7","first_seen":"2026-08-28T13:30:26.509295Z","last_seen":"2026-08-28T13:34:54.882784Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ikumnipz4l.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.658Z","timestamp":1787924038658,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ikumnipz4l.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4447-b06\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9836da4e5d9ca26958c20aa0db34f220\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2822,"size_decoded":2228,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2821)","md5":"2a4416d3489475e98d1f04a8153f36dd","sha1":"f2f9a99313b79b4b03114965c2e74b3d5d0e46e0","sha256":"6fa7d13f2f9a9d5f2e330fc2e455a2211ad30de7cf28382f0829a792d87be88e","sha512":"0176dbdcf1cbaab12e8c58b4e8d06ae1da8ed2c341cf52641682e07132b273e6e0817338b7b8f07d9a0faa47a21e1f005982b911b3a5842358f2c82eff729ecc","ssdeep":"","tlshash":"f851510c0fb4fe3d7151135c9e9b120127f9993bc6f9c96d92a48354c4d2eb5896c37a","first_seen":"2026-08-28T13:30:26.332719Z","last_seen":"2026-08-28T13:34:54.88367Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8chTLN1F4Tox2EecPuha9m4bhZuLhtQTZid4UxCT8h39PvCo54egAVqF2-PaF3QGSL_RjtnjgxS7B.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.780Z","timestamp":1787924037780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SA1iXwON7sd5tQDmjmRg1jC2Nm5z8chTLN1F4Tox2EecPuha9m4bhZuLhtQTZid4UxCT8h39PvCo54egAVqF2-PaF3QGSL_RjtnjgxS7B.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9948\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295d8f-26dc\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 07ee25d2fd313d75ef21119894090df8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9948,"size_decoded":10850,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"972dda755c31b1300def1f03526429bb","sha1":"d365bc2fef137a175120b35474796afa50328192","sha256":"c7e41cbc8b8fc921024133d825d2930eec7f3ee1e2fac034e81841579b0d4a15","sha512":"aaa2f2d027ea221828b116b3ba54a972ed08b65805c89f0e6592d1965911d4d61d017007df6177aaf38e30d2e70820fe0fea7b6054b53cbd2527958ba4ce442a","ssdeep":"192:8agoJEdR/XJsohOyZfgNm5aGY8E63sCRG+BYq99D0W3llmjiZ2zCd8+Fl:8gEdBXGoUyZfgNKaGUuG+OlWXFkzG3l","tlshash":"8622bf5a7a86c607e8c114fd6287733d72adba23e588b9ed94ba04933e754c44724f1c","first_seen":"2026-08-28T13:30:26.653418Z","last_seen":"2026-08-28T13:34:54.884499Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1U-uaqZ6t_H_GeMX2Vw_x3j-1gSCGn20R15TyGnNv_cS3GZlUnA5smTLEM4xDpx4bmY77h51OMiIJNziX53SJXrnE8R49sMsc.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.784Z","timestamp":1787924037784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1U-uaqZ6t_H_GeMX2Vw_x3j-1gSCGn20R15TyGnNv_cS3GZlUnA5smTLEM4xDpx4bmY77h51OMiIJNziX53SJXrnE8R49sMsc.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 9130\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290b83-23aa\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4ac03ead41485c0d500d9e2ca600df26\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9130,"size_decoded":10032,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cee3543998a883e054b1d0608abc609","sha1":"c0b891081d477250ade2c1c0ca34c6244d57ffcc","sha256":"ef2718ceae7dfa5831ea73354151291de871790394bb2c7e3838783f16b05f4a","sha512":"299a8ee38e5eb5b23df97a1e7e1d81fc40dbc7212696c4c7333e4e478fbf37b8871e020aea359779f107526a79c8e232967ed0181dc0b3207af7a8e2685fb74f","ssdeep":"192:zWNNJm/Z2VA9HErIRwGVJSJiOzUfvtDwHmlisNgZxZuJuiFIl:z+JE2QkrsHSR6dsXfPi+l","tlshash":"a0129eca2a030210e50ef0f69e5a0a06aa7770e7975939ee73465745dccd1f786fed20","first_seen":"2026-08-28T13:30:26.615946Z","last_seen":"2026-08-28T13:34:54.885349Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support5.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.801Z","timestamp":1787924037801,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support5.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 21486\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a29124d-53ee\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 29f88524447b342544d31bc638a40173\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":21486,"size_decoded":22389,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74a8335da7788722fbfe35e247571a24","sha1":"e5177b142897dfc4c5cb2d159609735162188025","sha256":"950e8a375ab1b540018c9ea3a1368ed7d33f2d79236ddfb5014c474a3d3d3d25","sha512":"ee11af71baab48dc9b5815d9dc5909b9694b095bf7ca491cc52b8494925f3a050ff6d0e022eeb4c53c19f3d06967aae58e716969f3c9a73f839884e3a6efb114","ssdeep":"384:60CtGK7CMQhVSeG9qjI0X34mMowuAEzBwqCatwxv01FC7W9HDYobBIWEiljrj0fF:lCshweG9qjILvowuHwCCOFMSvbGWEidO","tlshash":"c0a2e1d56fe12f5ac0401b7342d7e21b603e275c49bd1e2e278441fb94c9c66d4d8e9e","first_seen":"2026-08-28T13:30:26.46761Z","last_seen":"2026-08-28T13:34:54.886173Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/modeCard/weapon_market.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.804Z","timestamp":1787924037804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/modeCard/weapon_market.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 85506\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a29124d-14e02\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f95dee0b7f6b70ec81317b52f9388c0c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":85506,"size_decoded":86410,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0cf36f618f5d31830c109a1a361afa31","sha1":"745a84a13695016f115076f92540ef51716aa510","sha256":"a42345e553a3140848d5a4889c0c5e1e15a82ff26e3131061e740529debe8088","sha512":"4f9dcec7663df88b52014da3d6c7eb08a3807d0df7281372c02c2f7d7575d3a7ac2de27709098bccfb10cbe30684c5ea4fa8a264a45ba1d674e2da58f29eeab2","ssdeep":"1536:Qc1g8gX8qStD3CFapmVbX2s+YGGfi0E5auPz2HQXMqQmxUJQoG0YZaN9x+lmNoFJ:QCo8v3mVb2Gfi0E5xPz2HGTLaJxhYQN4","tlshash":"7c83024f94db80587e8e4eba07baf57b16e04275780b279cd39474a1da05810fe3e7b8","first_seen":"2026-08-28T13:30:26.491393Z","last_seen":"2026-08-28T13:34:54.886984Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nhwiyuxg8z.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.976Z","timestamp":1787924037976,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nhwiyuxg8z.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4420-6ad92\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: beaf0a17f4f00fe4705a5eb981a24443\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":437650,"size_decoded":135417,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65530), with no line terminators","md5":"2d436d1cb591acc44c5f4b8908e66b62","sha1":"c75736215b3a7657d1f8d069d144639ecd22b162","sha256":"b041112e9ca2c8f05ee53431f24ab0ae9326f2143e259459cc5000f1eb672178","sha512":"995b2935cab96c64fbaa0f93d9af59201d90f39ce7b76cc07a6e6529089e9622e00e486fe41ca5744cdfa1c9097e3b7c2e7fdbff0545d62f96a4461472d37fc7","ssdeep":"6144:wGhF8L8A3o9KphpbXkbrH0wK53K5D+xz8hiisEAnnmjKTByipO/zGdq+Mxvs:bFzA3gKphpjsH0F53K5D+esPOZA","tlshash":"b3942a2aa1057f7544632269f94e2a9ae77c2184c3f0c4335dad885813b29e7d2bf7dc","first_seen":"2026-08-28T13:30:26.639438Z","last_seen":"2026-08-28T13:34:54.887814Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/images/favicon.ico","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.420Z","timestamp":1787924038420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/images/favicon.ico HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: image/x-icon\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\ncache-control: max-age=39645\r\netag: W/\"6a2aadb6-1242\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c28a354075bb704f4d8feefa6443bbf4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4674,"size_decoded":5250,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel","md5":"497b08b3d012ae7f3481c09ac5599d85","sha1":"5b496b89ed14eca8e68eddb458143f4efe5e44f9","sha256":"52338fdd35d85dfd4d883539ccf782d9d23798b85615ec8e72522fd28fb5b3ad","sha512":"da400fa0533d806c963fe84e4a6f43ea5240d7101ce9ead2441b79790ffa7a337d77f2071b41fc6972befee6df1f90b628124d8a4256a7b6522268ab049db57f","ssdeep":"96:rYGr3iVuEKuPmk3rTlUtgZqibgUxLFJyL5n3aURUCQpQFmNpwUPJgHn9:MGr3ioETOk3rpUtgYipyL5nqURGNfPJM","tlshash":"98a18dce59e41975ff229e7b0b201861d179fd8b211b5548d64ab8bd8d1c40ce0081fb","first_seen":"2023-10-31T18:50:42Z","last_seen":"2026-08-28T13:34:54.888652Z","times_seen":39,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.906Z","timestamp":1787924038906,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cs2go.money\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 12:33:49 GMT\r\nexpires: Mon, 23 Aug 2027 12:33:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435609\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-08-29T20:29:04.98533Z","times_seen":20800,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.doypyfa7i4.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.019Z","timestamp":1787924038019,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.doypyfa7i4.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4431-20f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 27de03d96815a15385b71bef62051a2c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":1245,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (526)","md5":"40d643cb6cbcb38cd4f4e6d7d7e0ba2a","sha1":"fd9155e63ea77df8c4b2f632a06abe5ce481c815","sha256":"caaccb0ae2e2a2a2654a3c9bd8fc3d55d56bdaab42457db9e5a0353e3e6163cf","sha512":"b8c60ece7321498fbbdd4babf92c01b89f00472bc197dce7690eac0f2b926c2e804e550eba59cef5ec16c383f4bba4652462c301bfe5a047c986c2f06266a089","ssdeep":"","tlshash":"f9f0598947f02a2a852917fcc12b14037694443f57cd5b72e27c493967a6ad68a18ec7","first_seen":"2026-08-28T13:30:26.545087Z","last_seen":"2026-08-28T13:34:54.890267Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.eimiz33j98.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.022Z","timestamp":1787924038022,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.eimiz33j98.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4432-4eb\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: aef381f17f8981255b0f154e17591c45\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1259,"size_decoded":1556,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1258)","md5":"6616f04476a4e7a3f60d3c46a1e736ea","sha1":"5e8b37965edbd06ed59ed2efba9141bcb10fafa8","sha256":"2e2b02a2439657d665e10e9c7350fa05442904cb5df444ad63a3a462a9f37f36","sha512":"f9a4de229356a7b13b52b9cade3c6c5048632184b5c7056613ad42aac956fa5bfd2887ec48d393cd06dd8522e2f121771b5edde474725667bd49c15aff369678","ssdeep":"","tlshash":"6a21322e4f724834b12a03aee615901573f641376b388561717a033a606df5b4b4c237","first_seen":"2026-08-28T13:30:26.301285Z","last_seen":"2026-08-28T13:34:54.891108Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.c7nd1p1ei8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.029Z","timestamp":1787924038029,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.c7nd1p1ei8.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4433-23e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 26d7c18866e60a413626d93f0dacdffc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":574,"size_decoded":1273,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (573)","md5":"e5ac02493d9edd8e06588319a3932c97","sha1":"845c79c32ae32e14a55ad8340788249713b46738","sha256":"c4a26e5511db6eb83f6249dd2c3d836b7ebaa2d9f12f4ed706c3fbdc3f8b9348","sha512":"4dd8d19fbfdce51243b649a3250d043a3e9ccaaef31a7f05b2377490dde9cd070b5012814defca2128d006abd70149fe4a0404e5c00122ea27202c3ed4f5c8a4","ssdeep":"","tlshash":"37f081090ff00b15716923aed2268102bbf4403b5fae0f71e13d473e366ca854349ab3","first_seen":"2026-08-28T13:30:26.248542Z","last_seen":"2026-08-28T13:34:54.891955Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nhz0k8zze6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.678Z","timestamp":1787924038678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nhz0k8zze6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4448-20c\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 56a72804c06411d52c0a69f29c8ae067\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":524,"size_decoded":1250,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (523)","md5":"19ef17680221bb4314cd93ed9caf85a3","sha1":"ade9627623c074865dbb0b29ce6df677ad745c9c","sha256":"f63953b9efd1c1a103a657d4c9f778e34c8342b58fdeeb5834801ced8f3ca1e9","sha512":"5ad9f9d63a028d63def7040031906398491ce07d386611039edda8e678473e4695ef2bf61b2b09dbcc0a4bb46270480476470c9147972703a77de3b814e0b35c","ssdeep":"","tlshash":"f1f02b590bf04a45503923add5664402a3e04c3743bd4ff7a03d473a696ab894248ab3","first_seen":"2026-08-28T13:30:26.628372Z","last_seen":"2026-08-28T13:34:54.893451Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iuoc5nhm7h.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.724Z","timestamp":1787924038724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.iuoc5nhm7h.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.nc0tcvei9m.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b444a-1947\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 44f202998eb540b089b95b8581cb1bca\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6471,"size_decoded":4016,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (6470)","md5":"c999d553664078829bd0fbf3e67ed03e","sha1":"325176a182482dc750eb108a4f676e38b0f6a4d7","sha256":"12100c9974b1f61755409648c77967d2f3154746946f30583ca5cadd735d839e","sha512":"cf2d46234439f3bab394fbe9519800efa5562dd8e6faf8ff4bf31b8909c225473706b61375e252a13b4c6073c9e1fd2f682d1b3c0662b34542359c593e75f948","ssdeep":"192:haRfCi0hSbcQ9F7kR81xMp7G3mYFLqa4GvpHknn:ha8iKKhMR6Mp7aLq7Nn","tlshash":"06d1b5dcaf70dbf4a48423fae6110489b999acfe57814a75c2ac4d08b1561dcde0dcc3","first_seen":"2026-08-28T13:30:26.311262Z","last_seen":"2026-08-28T13:34:54.894964Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.cilm56heeh.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.722Z","timestamp":1787924037722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.cilm56heeh.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2920cf-244\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 309116de7c9f0708d4ce8fd65af52ccc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":580,"size_decoded":1278,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (579)","md5":"c27b0a5a1fc8936c3957b27bb0205b3e","sha1":"8bd06a74fe641e9b0afe76bc427ac4c4c55752a3","sha256":"ef71952e9c16c6e746a57a66f2e00c415d4415aa8a0dd7cf2ea17bc0a2d38dc5","sha512":"d529e2d90823f4469bd4579cf9d2a7116417eabba61be2baa1c6196682ea258aea4f009e483afcd85f55fba7a7a51a2b9bd5aa8c708ab6c5a5722693a6d95810","ssdeep":"","tlshash":"d5f04c510bb04eb9902a17ede1b7260333c54537578d0b71d2798d396a25ac7825c2c3","first_seen":"2026-08-28T13:30:26.358982Z","last_seen":"2026-08-28T13:34:54.895986Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iqogp8kqtn.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.996Z","timestamp":1787924037996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.iqogp8kqtn.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441e-2515\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c430a14db76bb6bf1d3c396a435bd964\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":9493,"size_decoded":4095,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9492)","md5":"9bcb862899988d51056ec869480f106b","sha1":"c8f5040e86b227bd41ac1e92190dd6bc74ac1b5f","sha256":"bfbfabb240a4b08fb15fdf4039e7f64657c0b1970cef64ee8ed3a2f312d6172d","sha512":"803a2d330b65426231a067d51f4141d9f2ede3a12b9a3211a66221fb57d46ee29fb15f2571f4d9e45ff4d403762410d9756b3039e002e7f0cc4c6a46594c5623","ssdeep":"192:7Y6rMmq1o8pdRCOPxrXuMdEIpQv0Vca8MGtzPDpFuz:7rq13lhIHuz","tlshash":"ea12b69c7b50701841b6e2fbd21b1803e3092d91d40a4dad76e8dccea6dd608bc1ef35","first_seen":"2026-08-28T13:30:26.583428Z","last_seen":"2026-08-28T13:34:54.897039Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g2ksfk9dx2.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.612Z","timestamp":1787924038612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.g2ksfk9dx2.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4436-20f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7a9957c952e31204a1cbf6599f6deb44\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":1246,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (526)","md5":"83d07f6ea72bbb5347616e9b0e3b177a","sha1":"a4b26e49e99d7426e3c542d7d14e8eb8b9cd9fb8","sha256":"5eab12aac41db8e20086e6196bcb5f25d9296c7a7263914ebb1c90cce99993ba","sha512":"b9ce34643ab0697f917820d7d59c42dd9bba9954faef12fd873fc8e48e0d700b3b2e12970886a80bee8f8933a8f24ef63514d4c465ba61757e364a4e8f763f0f","ssdeep":"","tlshash":"36f09e9147f02a62812c27fdd02f55036755847b478d5b71e13c0d3a6779adace68e83","first_seen":"2026-08-28T13:30:26.436601Z","last_seen":"2026-08-28T13:34:54.898003Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/style.CBTawW3Y.css","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.459Z","timestamp":1787924037459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/style.CBTawW3Y.css HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: text/css\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39646\r\ncontent-encoding: zstd\r\netag: \"6a2b039f-a6bc8\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:14\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e248cfec633f3aa9c7e57cabf2e1b6f2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":682952,"size_decoded":146433,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"8c1853504d7d0ca2b2c7cc25499f856b","sha1":"13169f1d70ea230a6cd00f521edf797f76b31460","sha256":"f724b11fd82e09a01eeaa9fb3d373bdba039008df31d171f00b89ddf180f32bc","sha512":"389b736e5c32bceaaf2840d635b06a9b0415e06f24cb95f300f863d9713b15db0d8cabc9d482dbd5d8888ac237eef36e05de7d4772b572959fb923a0e9beb02c","ssdeep":"6144:DZvE4HQDTHyv5Ow9I+4CqjPuUuDdVYbW/cJ6k4:DlE6xv5auUuDdVAX4","tlshash":"68e4937d5370f13cf82b2c1eee74054eef18c46a9d26eaea9702524484c77eb2651f89","first_seen":"2026-08-28T13:30:26.201618Z","last_seen":"2026-08-28T13:34:54.90026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/pointer-ak-47.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.751Z","timestamp":1787924037751,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/tryOnBanner/pointer-ak-47.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3630\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a26bee4-e2e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6667d93d80a599f7631bff5dcd9e15e0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3630,"size_decoded":4531,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c1b0aee341e8dedd22b4413e5f630dd","sha1":"d69fbc62b5108a5832001153cbaffbdfb4668428","sha256":"e196732435ec408209159da378d2badb93230373091da8288d5ad2851e1d5e7b","sha512":"1399ee80b67cf3ff631ab1d904685e4f6a53d7b8437b3b8e29888fdfb5c0f6ad8224da76b98150e1a8335ce874274f8a01828750860a725566b0a6205ada6d03","ssdeep":"","tlshash":"e6716defa937aa40f1934e7c57ee5fed1a43824912104c3bea5f8811dd01c816a38a65","first_seen":"2026-08-28T13:30:26.518743Z","last_seen":"2026-08-28T13:34:54.902084Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y4OCqV6VgH_ScHnecxPxJoOloXCznqhEutDWR1Nz7eSnCOwEpA5twQu4CsRe8ltyzMOrntAaM3dpMzS2siypK7CY54-4cEf1yr5PbGSk.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.783Z","timestamp":1787924037783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y4OCqV6VgH_ScHnecxPxJoOloXCznqhEutDWR1Nz7eSnCOwEpA5twQu4CsRe8ltyzMOrntAaM3dpMzS2siypK7CY54-4cEf1yr5PbGSk.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 16418\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295da9-4022\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b89ff5ff63fb38936e6a07bba46596ad\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":16418,"size_decoded":17321,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ab5a8cb5cf36563aeebbd717851ad7fe","sha1":"a29076b6598181c5a37eaafbf678b7fd4fe9e92f","sha256":"6c91e8742c6241c958041beb34d02501d6ae61633b832b49bf8c403a494e33b6","sha512":"46465b3ef61a6db578800362e4ecbaad315a0cfc86ac5ee05ab182ff91e8601b9792a46d330bcff8586322bfaea8f45798f6be9da87ffaaf02ac09eb7a584764","ssdeep":"384:2VBQ0gEE2QV/n7GG1JAbBONk/Rv5Jy6wYUombFeKl:2VBQ0q2QV/7G5Bx/RC6QbFeC","tlshash":"3372d0cdbec9efe9d6537220732385d6c110a00ff8fa4f479a44e0999080683a8bb8d5","first_seen":"2026-08-28T13:30:26.400788Z","last_seen":"2026-08-28T13:34:54.903569Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support3.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.798Z","timestamp":1787924037798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/cs.money/reborn/images/landing/supportBanner/support3.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20146\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a29124d-4eb2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f52a29a205a72473768709c4799bbf5d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":20146,"size_decoded":21049,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6bf802a33c7b4e5a806f366c2f429826","sha1":"105ac3000205c5a4272da765e5a288cbd8294115","sha256":"56bc582d01bb9b3402b2ce18e6ad6db140831dcca2a1b228bdbe0c7ba94e5734","sha512":"12252360e52ea6e16a71f2c5f7e4d1d318648e2584f85b375f697b1427b435d5e95ff6f9d63aacaeed15618684c005337feb5d422aec68d1d540a09f2a734146","ssdeep":"384:wn8rP07RW6U6h+LIBnTJbPjGqHSfVkfMfiNhUcwEssYaqHCo:/rP0NtILIB9jG8SdCMfiNuEfPqHz","tlshash":"2b92e1f78a65169e89c979f8bc27b353e17ccc7c950e900b9e3244357b128767c22ab1","first_seen":"2026-08-28T13:30:26.720205Z","last_seen":"2026-08-28T13:34:54.905856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lrcn6997q5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.739Z","timestamp":1787924038739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.lrcn6997q5.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4459-98f2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: cd5398d8270e0be3bbcdf2916f610926\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":39154,"size_decoded":15501,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (34554)","md5":"5a821ad29b5c53e0d08531cff186558a","sha1":"605aa6da01c30758d24691df527270a1c49c4f21","sha256":"a6c5a0581f505cf31a0355237d6e5439e54eca5901f31801768a4579e6e1d836","sha512":"054fa7835eaf4a34fecab8d112b8e572cc80ede0b12ec923c4a257e675fd7ad4fbc1ea37aaba94cefbbbf3c48a35e5002d66d90cdf444cd141ffc5ff15f6740c","ssdeep":"768:ipu2geeijHrwDOlyM1jF+/llRyXhP4IMA3Tsz5MYqsZgtEOD3G55jnt8y6wR54tc:i8krwDUv+/iwgsZA5TQ","tlshash":"8603e7dab381b47247fa59f2d07f8103e2362562384d85e4f29d94ea2c37019d1a6f3e","first_seen":"2026-08-28T13:30:26.631685Z","last_seen":"2026-08-28T13:34:54.907175Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.evwfh70q5k.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.579Z","timestamp":1787924038579,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.evwfh70q5k.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4435-20f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8bdabb93defea9c1da427d2e65f9beb9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":1245,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (526)","md5":"f56f15f4aa11c7012e6b1c682257bde4","sha1":"1179f2d30f29a08c9805414af43d539787d49368","sha256":"aeb4ab7e5cf35079b1d65dbd278c39e332c379c0845ca42486836d177b5d2223","sha512":"e3dc0274dd81b127b570ea4ae5a3abbcf2c9deb477ba558f669bccb3dba80a0118409534c19b3fbec986362d3cdb102220d25c8e19eac400321e01dfa1328c8f","ssdeep":"","tlshash":"b6f024c6a6b04932852a17fcc02b0813b686427f07dd4bb1d23889392b359e6ca18b87","first_seen":"2026-08-28T13:30:26.225035Z","last_seen":"2026-08-28T13:34:54.908553Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lxirs4oypu.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.936Z","timestamp":1787924037936,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.lxirs4oypu.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.cilm56heeh.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4422-728\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c8ecd813bb6824d543e578e73327986b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1832,"size_decoded":1912,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1801)","md5":"560494ed96453e7b1809b52b2f44e6cf","sha1":"f0948c4c10dced0c0b5a7481759abd3b1240b0d3","sha256":"9626d40de35da4865cc03615a518763dd484ba357fe53a2b3190a85f75099010","sha512":"1fe4cd6b8859493dedea1c76e68ebafe9b6ba36ad67c66f36b85782df5fa0701481b3e761098fc1a47572e1eab872d10995e29ca998f34d09466565f501bcd4e","ssdeep":"","tlshash":"193195d932e45997014b15a8463f1143b2fc0a3bdfcd8ba09324e4f417706a642aae97","first_seen":"2026-08-28T13:30:26.261206Z","last_seen":"2026-08-28T13:34:54.909634Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ft2g09uep3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.039Z","timestamp":1787924038039,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ft2g09uep3.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4424-44a\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0968995a7be49cebf6076622014fb739\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1098,"size_decoded":1529,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1097)","md5":"6a48e8f785b4fb6081ef4505748ad818","sha1":"dc95fd071707fb00b162a738268d4da7e14c39b3","sha256":"779277719edb899c0d6c24d9dc7b997d731966de378a30436c6b347a58ff24bd","sha512":"33dc1d247f9c68e82805e7ee6aa3c84346e7feac3c8b33c959738629fa0bf413eef8805769c3c1c855b3b2066bb2ea5cb24b676ea6c40d6a5fd5e45a814bff66","ssdeep":"","tlshash":"2e1133c9aaa1f07ec32827bcc09f0857b056383783cc5340d06e8871773618ac12af55","first_seen":"2026-08-28T13:30:26.140419Z","last_seen":"2026-08-28T13:34:54.910803Z","times_seen":2,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bet9gnpw62.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.571Z","timestamp":1787924038571,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.bet9gnpw62.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4450-88b6\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f4838328aa919e4a1a66001dd62b94ed\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":34998,"size_decoded":11506,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (34997)","md5":"96d224a5087b1a94bf567e62e471f0d4","sha1":"136f677a80e26b5f1b24fc30af6eb12d74366cc0","sha256":"0fa962721a3051e45c11e77076e25a1e4c6aec86919709d3aa45d33c04442bf4","sha512":"3089e84a7b81af6e71b3e08ddf21826a5b34de483fcdafcd1c5400b28a63b90fa0a7ae19d26a8b3672aebf9b3d1e2e120059f580897f3a5c1412ce4a6539e7bf","ssdeep":"768:D1BpwYOnS0YNRF6VRXpD6TJ99do2RMK6/4m14/oymCX0o4TGoyimoJOZoYO2Z8:ZBVvJpE4XI90O","tlshash":"5ef2b7e967ec92cc500a83ea89293559b7b83d7f7bfa491042c88d18fd689d03d2cdd5","first_seen":"2026-08-28T13:30:26.264113Z","last_seen":"2026-08-28T13:34:54.912Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mrtovgibpd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.610Z","timestamp":1787924038610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.mrtovgibpd.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4436-4f2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2f0cec57f8a0192f825001dd06271cbf\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1266,"size_decoded":1620,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1265)","md5":"82a8fe1c0471776cacee3841ccda1228","sha1":"57132dd54c40498ba3ada812193643c4c7503762","sha256":"239c313765a622c4544a936e7241a162072dfda5575ca097acf0384caa6f657e","sha512":"d69bee5091788ef9165f41ef76ba332183d5b17877c947f2dbb93f1e2d3c313e0015b4f7f241654c4f0bd70b18aee8afc087d763f7c29ee2273e6376b946e93b","ssdeep":"","tlshash":"a321f09ea1305a79450f4beee82f20169060013b8394c7e6c1bd8e351bb699b816ea0b","first_seen":"2026-08-28T13:30:26.354567Z","last_seen":"2026-08-28T13:34:54.913168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ka71gczjcy.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.712Z","timestamp":1787924038712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ka71gczjcy.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.nmgs6dxlq4.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4451-536\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 659793ffbcf9bece058a516a581b65c3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1334,"size_decoded":1617,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1333)","md5":"6aa912c87c85ff9ca0889d6d9929e868","sha1":"a7a3d40669edcf6644103daa179e745225da016e","sha256":"04fb1e297cfe0803e3c837413ac6232ba62a567d0145752b2c34f2c542d0ca8d","sha512":"84d2548208e1b4f5a5401e51240c904de3e99b3824c4aaa258b67ee2ac82d013d1d59ffff46a586743ec09c9b989d6f76031cd703cafba02deb06bd9b03f1316","ssdeep":"","tlshash":"cc211e0aa620a665752f16dfd429500273b80137c7b806b2d0bc47396e7a58b7256baa","first_seen":"2026-08-28T13:30:26.462675Z","last_seen":"2026-08-28T13:34:54.91467Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.olespolimo.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:59.047Z","timestamp":1787924039047,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.olespolimo.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.cq6l8031i4.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:59 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4445-5b5b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 208b30b480086539fd2aaac1ecc9bae6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":23387,"size_decoded":10125,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (23386)","md5":"cf1510d19cf0045ea423770ddeb17543","sha1":"24c19116dda438b356fccc00935df202ecb0436f","sha256":"ef5a2b5c9a4216cb1c97af923b36525077cc1740264f9e280681157f733837eb","sha512":"acc8e0795e20bce142859ec5bc0e1d2f7aacaaa710b7ed7fc4c354cdf3a240db1ba89875be495e993eae9dbcfd59a0540c7ad8c7b30bbb6ba0410d81ff261392","ssdeep":"384:MiszckxTdfozJi/TS0JtxNn2tY8byCjpuiIdem/9sWd4EWhYCLarqznQpPKVw:FsIkxTdfozJi7Nn2qCtuiId39sWddW5i","tlshash":"3fb21aeaf28063dc25079be8d8577559f22f3cbbefd90b90819ccd54aa3a1d0a44dd90","first_seen":"2026-08-28T13:30:26.477801Z","last_seen":"2026-08-28T13:34:54.91601Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d4_u-V6VjH-SaCWKC_uFkse9uSha_nBovp3OBztqpI3yTbAIgDZslQbFbtUbuw9y2Y7y37gDcjooQxH__h39B5yxt_a9cBoXwL4KP.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.789Z","timestamp":1787924037789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d4_u-V6VjH-SaCWKC_uFkse9uSha_nBovp3OBztqpI3yTbAIgDZslQbFbtUbuw9y2Y7y37gDcjooQxH__h39B5yxt_a9cBoXwL4KP.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8270\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290e98-204e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9295884080662633226da8873499fb27\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":8270,"size_decoded":9172,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"90bc713cc1086f8245838702e39f28ff","sha1":"b9c5eb7811ee77d86cc5ea0d55e84e54e96aebb4","sha256":"8ff6948e9a35309dd7e013975a537a9b1e70d1f6ef771519c4a0357505c56567","sha512":"841e3c9acc845da810db50223d3c3063d90c9ad5cfc8200e353fc08b58a38b022411592e58476745339c55633a0c3e8cf51f3cc2d218f0e06890752f77d1a95d","ssdeep":"192:jRBOirxcorkEfSTZ3yDVvNjiYECCa4qltnW6J3l:7O+TRaTZKZF/LnW6l","tlshash":"f302afd79714032bd819b4b0a5a7b32a75690f1bce2479f763835790a68c049cf4673c","first_seen":"2026-08-28T13:30:26.724247Z","last_seen":"2026-08-28T13:34:54.917377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.kja19motlt.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.957Z","timestamp":1787924037957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.kja19motlt.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b451a-320b2\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b7da7d00ce9e5d483113c59df03148e4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":204978,"size_decoded":67780,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65216), with no line terminators","md5":"f4781400329d89148613c7a331e4f9e5","sha1":"38474519af7709c26f247413c3212f7aaa591dbe","sha256":"fcb592dd80c80c27451a9ed1984b5605fe241110271e7134bdd1025b27016087","sha512":"fd761e992fa55308cd195cc812039c9605cc94632ad3e3f169b21adf0920d30f20e2f7785b53872206245527a573712d6de8f8dbf80b97dbd43a71f64362e003","ssdeep":"3072:Jil0CiCcIM9tpfxn19iVhK9eHHIMaEXeI3vYFL56rcbYi:Js0CiCcZ9nft1UVh0eHHnaEXe7pYi","tlshash":"371409c672d3f42947e651e9042e0002f36c1d75a84d985cf6a8ece67cb688a9277f3d","first_seen":"2026-08-28T13:30:26.684654Z","last_seen":"2026-08-28T13:34:54.918714Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ig7g9c103w.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.005Z","timestamp":1787924038005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ig7g9c103w.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4429-23b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b1e037aee2cbf8f705e01169cd827d7f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":571,"size_decoded":1267,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (570)","md5":"11a82c3a3ccf524ad470ea41eb1b3ffa","sha1":"5a0b4bfedc3f94b5c768748b87fbe31233cc9e15","sha256":"c0d8953afbf1196746e777e69933b7a9b756190cebc8a26abc70fcad4034796e","sha512":"2c8ed93454a12d8de6b013424ec3f243bfa35b134f6026f31b60395f593bfbc493d37decee38d535d5230e206c20200e3a1e412565b8604d750e931c720cb7ef","ssdeep":"","tlshash":"e1f0a6c922b04969812c12fdc12b06036246157703cc07b0e2b809383b7a9cb8245f83","first_seen":"2026-08-28T13:30:26.485538Z","last_seen":"2026-08-28T13:34:54.920652Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.f4x87szd6k.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.211Z","timestamp":1787924038211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.f4x87szd6k.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b110e-66fd\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 687ff736193970c373ba99fac770c2dd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":26365,"size_decoded":9092,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (26364)","md5":"336616ec4492ce44300034c7f9e983d1","sha1":"35af8c8cb5ee22e0ec34ec988057d8354d424003","sha256":"460489da532b9b993335896f95c2981e1f9c318d555cd9d694e4e30c160e45a6","sha512":"c7512bff3556a95ee033b406c1e23f4a99ab185a3a2f2e0f6b20a6b6a8e6c2c4c4a20a7148b50a08c83a995fb5d7f3c1337c7444b9139aa57cbc27f2aed23b9e","ssdeep":"384:8R2zxe4q5Dh2bPRFMg1nEiF0K2HBKzVSJPs73:80zsthjiNeYSBsj","tlshash":"34c21b31f064f6fa46e6b5fce52f5101b2392555e790c190f0ffa9a003e5882b63eb69","first_seen":"2026-08-28T13:30:26.37221Z","last_seen":"2026-08-28T13:34:54.924529Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.cdkddogwm5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.216Z","timestamp":1787924038216,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.cdkddogwm5.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b110d-83b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a71cf119463365a7005f2e51d03a3182\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2107,"size_decoded":1936,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2106)","md5":"f7fa8d7d82217f91c639ad80f4396bfb","sha1":"e8f2177c1f255f6d6f44f655ca48fb10d74ea0ec","sha256":"7535057dc9080dd44b223659a6165dd6170b3d9ff46e3cfacba719ea1881d04f","sha512":"8886d19eb84fcbc65522361eabfc4251d4f2e7fc92d4e5948d925a68c046b00948ee711ef0890d7eb4f5ea9ce1fe68145083d830b4f324168b2dac393cadba25","ssdeep":"","tlshash":"ec41117ad024d87b94a98dfbc11e90322276053793e487b2d1ef87315b721b6d006b4b","first_seen":"2026-08-28T13:30:26.550291Z","last_seen":"2026-08-28T13:34:54.926224Z","times_seen":2,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.e7phbvbyu5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.988Z","timestamp":1787924037988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.e7phbvbyu5.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441e-1eb\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ce1d27636eb3c2452bb7ff78968bafe9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":491,"size_decoded":1225,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (490)","md5":"71966bc3fc603333fa671eff24fe2b6c","sha1":"9e9c22e137b296128ec92925a198f55c98cef2b2","sha256":"55930125ca36e9717369cd54b68f151d4957cbd8e11d737e93f5f13c9348418b","sha512":"dd5160c31a842df8f1159e814f8a3082fb2f0dfafc2cb2a033b4cb861dad04051bf71556ac889f5910a04fdc8c7892b3c4a4ca7b62759c6b1162a845eb78146a","ssdeep":"","tlshash":"f2f0e2c687b005ab80ac37edd13e40036290453b4bec4bb1e27c0a392761bce865ca83","first_seen":"2026-08-28T13:30:26.316161Z","last_seen":"2026-08-28T13:34:54.927726Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nqjwc2n906.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.997Z","timestamp":1787924037997,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nqjwc2n906.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4421-81cd\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5d010a62ab1f3796ea25edcc0e622a7e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":33229,"size_decoded":13435,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33228)","md5":"77154e4be23ff40ba139b584de48c277","sha1":"010c5c1d633cb63ffaf6f67323585de8822b4367","sha256":"ee3c190cf105def7e5f8e686cae660ee4aeb70f6aaf41b0f45365475d73e9ea4","sha512":"8dfd3486d01e3d8e3cceb4dec40d57ef64a24b5a22391cd07696ba4d25079dd386b03153eebbff35bcc1f7225ed4e81ff4b7414d292bf708e565eb33920045ef","ssdeep":"768:6bXD2fQbdmEi2MGs7J28Aimy99h57aEiTrq/XlEh9mFuK:rYx2h7J28Aimy9v4ST","tlshash":"7fe20885b0d2703462b7567bd03f420dbb7a2d4ce90d9410b1bad8cd3ee9989c227f69","first_seen":"2026-08-28T13:30:26.703806Z","last_seen":"2026-08-28T13:34:54.929202Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.d4zwzm6eaj.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.460Z","timestamp":1787924038460,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.d4zwzm6eaj.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4446-75f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3b1d7e71ee15f298734808892d9d2fa3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1887,"size_decoded":1827,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1886)","md5":"ad33dca1a9a936b91bb87d98b8ab1685","sha1":"7ceed9fd733c1d7855887cc541383582586d9902","sha256":"0859baa834d828f57758b082c9129da6d7772b9bbcd69a464c7028ca237b4d88","sha512":"6b7bb0fde370c90f43e18acdc46ccf15aa34d7b0b4d98a3e2c08ea8aec9b291fb48096f9aa68f3c757bd8aaed995720f89c774659b1024e7107d37564fc9e0d8","ssdeep":"","tlshash":"c54128f5d7f00298520a57fcd95910136ab834fb57790e50027c8a3cb2595c0ec1c5a5","first_seen":"2026-08-28T13:30:26.279973Z","last_seen":"2026-08-28T13:34:54.930849Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ldw7s9vwt6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.564Z","timestamp":1787924038564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ldw7s9vwt6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4427-20f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ef36530490ca65e8d8a510f936e5f995\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":1248,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (526)","md5":"6956637f66a565e46443403ddf95ef26","sha1":"4d027e1715399d9df4a6fe55161e8ea1d0fd0215","sha256":"e3d9938dfd917750de443a327869ecf49386f39256239dd9482778d1dfc86e21","sha512":"7d7ddb2c0b85f08d9d4d4faa297b9ee4f752de1ea5336b7abbfcd223459c951763da5beee4592c7ab28b7496994c33d6bf4f61542f397355c7a281a8bfa38fd9","ssdeep":"","tlshash":"5df02be556704a77d02c1bfcc03f5417a254507b178c0bf5e1780a3db7259968558ec3","first_seen":"2026-08-28T13:30:26.258066Z","last_seen":"2026-08-28T13:34:54.932143Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.d83se06iye.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.627Z","timestamp":1787924038627,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.d83se06iye.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4448-3f5\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6fcf1d8c578a8f95ce717447b92e32b1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1013,"size_decoded":1541,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1012)","md5":"4651703e19c89b230ad4081493fce90b","sha1":"b7027cf71f3a118c2b42245a6ed34e3af100b2b7","sha256":"4d6bb41893401e5b6d9be4858eae9ea1f5f33771b2c948882ce6bde5b23e8df6","sha512":"92b8bb174324555489a5342d53dd292aeae90fd30d9c9bdfab3821c7e43bda6f4d59d475a98c9d6eca7bb88626ecaa7ac16b63fb6e1166821bd71df42f447eb9","ssdeep":"","tlshash":"6d11efe082f44ad9811d07edd93a1d0a35a828bb278c06a480f5493db6294d8951ce87","first_seen":"2026-08-28T13:30:26.497587Z","last_seen":"2026-08-28T13:34:54.933447Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o9yf3jjn22.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.702Z","timestamp":1787924038702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.o9yf3jjn22.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.ebp5f8qjr2.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b441f-20f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 77e1d6b046c540eef5e27953de7e3188\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":1250,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (526)","md5":"ed4c177998578a99c2fd0b04539f8b28","sha1":"7aa3e9457d664549104fb6309122c35e0219e099","sha256":"b8af83544ce2099b2c46d3a7632bcea1bb2803da1144aa32c058c52f2b740d83","sha512":"42be66dd772f656eb25b67b385613cd918c8303d12157aa0b66f176979257486c57b19cdca4324882d8b8fa6971eae3093169cf43edf96ce56211005e6ab6793","ssdeep":"","tlshash":"32f0598157b04a66c12857fcc06b1c03b684403b4bcc4bf1d1798a386b3a6ce8a99ec7","first_seen":"2026-08-28T13:30:26.590045Z","last_seen":"2026-08-28T13:34:54.934744Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bmq0t2f9ws.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.992Z","timestamp":1787924037992,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.bmq0t2f9ws.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4425-1f1\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 51ccc57aa844c9256ee55bcc2dfdcf94\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":497,"size_decoded":1225,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (496)","md5":"d34cb8d2ec1a45473ec3a0017eb510e4","sha1":"ab481aeb7985ed4e0562642bcf55824553ba36f8","sha256":"c414a03313afa199e774196da1fc50b445b106a53b7f42107ad643e24b6bbadd","sha512":"c529202f602d53af9c35a4f06e3a6317dbfcbf445d3665607e7af538b88a8179ba194413ad19c8832f72270653824d0f9e69c5ba6fe532c9d3e871c067e08d0e","ssdeep":"","tlshash":"b7f09e966bb01605802a13acd57e1103b698147b4b8e4b72f039893d3b208d682287cb","first_seen":"2026-08-28T13:30:26.299691Z","last_seen":"2026-08-28T13:34:54.93589Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.h498turysz.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.031Z","timestamp":1787924038031,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.h498turysz.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4425-49b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a6faabac8d1515c9529ce89ca80bba56\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1179,"size_decoded":1567,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1178)","md5":"2a9757878517caaaf05c7770c32ac356","sha1":"3ebba1cc335253f1cccb55d7e655d0841233249f","sha256":"a715f89837048fd63b74b87b3caa7f35dcb9788acea814eb557cb89f5e4baf23","sha512":"ea0c5c368b009da2ed45a906111f7469af644422d8c6c81c1c1572af2d71435bbecba7d1ccb2e2a03a1c195b506447edcaab287eb47385242b61a0504657dee1","ssdeep":"","tlshash":"9621f19523e6d17f529a95eac0155103732804b7178c9aa4b03cae726f61c879a2dba3","first_seen":"2026-08-28T13:30:26.268138Z","last_seen":"2026-08-28T13:34:54.937104Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hvx7bvleb0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.607Z","timestamp":1787924038607,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.hvx7bvleb0.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4439-545\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fa42d0c6354de24eea3092b5dab42c90\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1349,"size_decoded":1568,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1348)","md5":"34008fd4f05478cbe0aa1610bbb820ab","sha1":"61e6f391948b0f54b3661cb40c060839f048b74d","sha256":"06cd23cd9e61f51c50741bac675c202325d6c5e400cdf9cf85d1ebf419b3cc85","sha512":"91fcb129883bc018a93f85d06d61a2f0a654aa48289edfffff96f405b009ca975cff67819a98ae57778fb763d30e2f217f4778557e7d9c896ecc477ce287c93e","ssdeep":"","tlshash":"1f21df50167c854d411c13afb9757a8ebac42b7f93fa052090dc8d2cb677ac0761c6e7","first_seen":"2026-08-28T13:30:26.679229Z","last_seen":"2026-08-28T13:34:54.938261Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.l4gq4st3dc.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.614Z","timestamp":1787924038614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.l4gq4st3dc.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4458-27b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2790726caa061844dc43ea3cd2ec6017\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":635,"size_decoded":1307,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (634)","md5":"e76940dc64102392b335d756910958dd","sha1":"04fe22e0bcb63258788080735cae151cf281c1f3","sha256":"e94ca6753c872d2f7f8b91b1145d005a92b03672cdc1360125263a803d39d892","sha512":"d7b3f05732f68008efaae30ef0f484f7a3da822916aed74b3c09d652a2b89df45a8b7ffa5da254e4e6915ad5e540fa30428a1e961ddd8524632073ea7034165a","ssdeep":"","tlshash":"d0f07d4a0bb09725a11417ae81ad11835ff8807387fc0eb2a239473961958cbc5587ab","first_seen":"2026-08-28T13:30:26.680505Z","last_seen":"2026-08-28T13:34:54.939374Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.n81y7cbb1h.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.472Z","timestamp":1787924038472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.n81y7cbb1h.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4440-d3e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8e56c03ec03c6eb1343fc6e9c4003281\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3390,"size_decoded":2526,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3389)","md5":"003d2f38efb05d94c8154011592508bb","sha1":"d54ea2795a3c47eeee0a517b48c8e63e6e1421c3","sha256":"ad36125ec317bc4cb361efb8f2db6569adedcd20f7bc2826d8017c33dc22ad64","sha512":"adcfbb10602941e768f1752c911d5b0621e970fb76c750d5bf81fc81b84970edb2c53eae5f123fb8160c8be5a172944596a3b1a1e38cfa74b57d74cedd1245f8","ssdeep":"","tlshash":"bb6186a5f1f0d2ba9128121ec42b1109f7801d7dcb38ad62c75adfdcf62814cc5c8b2a","first_seen":"2026-08-28T13:30:26.665729Z","last_seen":"2026-08-28T13:34:54.944531Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gdohygj6s0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.953Z","timestamp":1787924037953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.gdohygj6s0.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4421-87e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 054311f3e0ee9e003626db84405b79f3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2174,"size_decoded":2032,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2173)","md5":"d9925964a17ea562184912863616cd9d","sha1":"270c00342792ee054d2f294a0bf116a9e1726522","sha256":"287b04ce3e58aba8de560942e84631866fa8b31d9b5d97ba009b4bf332921d90","sha512":"2f52ba50cf2fbe83f9842eddfe7e34540a1729ed99a115023c9344ec08afddf3e7f8eed2ed6b82c82592c953f5359ed7085942f84c2e85b49ee4cf5212a37e6b","ssdeep":"","tlshash":"2941f0c9b2d9bc62895723a5403e4263f32d1df21b9c0164d5b82cfb3d61dc58267b92","first_seen":"2026-08-28T13:30:26.636246Z","last_seen":"2026-08-28T13:34:54.945814Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g1an7xr298.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.972Z","timestamp":1787924037972,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.g1an7xr298.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4424-1a97\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 118fbf8cb19dd8b6b73d45c11787972c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":6807,"size_decoded":3990,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6806)","md5":"a14e016d5e29370fafc6011ad2fb29f4","sha1":"1e52ce6007bb01c0ccbfbc1ddf7a6d80cfc1dd9d","sha256":"012de8796c3167cb580a6e9acc4aa4c10d4cd91e66cee50e43c86c4bd1dee4be","sha512":"f8a230be8df77e599daef693be3b8dbff6259afc6116d62af364ff303b2cbca0656beafceaa7334e60f967b6f38b8cbb521244821b0ef1e364dc0c85f196f37b","ssdeep":"192:i2iFLfmbxnZGighpWc62AXJ+lYs9NZxmonJ:iLLmxn8pWcfAAlp9mA","tlshash":"7ae13ec971e3f0a583d260bc406f4446f32d6d26d88dea58e1b7e1d47d7844ac232f69","first_seen":"2026-08-28T13:30:26.659036Z","last_seen":"2026-08-28T13:34:54.947064Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.mlkelnio3m.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.991Z","timestamp":1787924037991,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.mlkelnio3m.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4424-1535\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 902ca0c625e719e93e6e3ccd6932e056\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":5429,"size_decoded":3259,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5428)","md5":"b6718e9cfb2b09b5c287a91fb89758fa","sha1":"5d5b0308775b947dd617dbf05d2f7e3c4af9dd0a","sha256":"6a983c55bb00531db0f3de91f2b72903786b689646b2c1127543321623c04865","sha512":"ba14f1d06c0d7f59162772925ab2a3dceebbef77e7dccac27d31ed0e022bcdad59e541d731ec473a815233cbfae5ccdac404911a7e7c7b712b8f5033823c7882","ssdeep":"96:oaUkHK9zGU5qnPlL86FAsNyGCpIGeheom550vhZU0dp6tGduecrRrpcj/FitnM6j:lHK9zGqUL86FAEyGCeee9dpDduF9pcjQ","tlshash":"51b194ce71f0999a111a21cfe03a4906ffdb18bec6183dc1d26cc5f9b9971a0984da77","first_seen":"2026-08-28T13:30:26.593223Z","last_seen":"2026-08-28T13:34:54.948352Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.203Z","timestamp":1787924038203,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cs2go.money\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 183754\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-29T20:23:02.754225Z","times_seen":269362,"resource_available":false,"data":null}},"time_used":149,"timings":{"blocked":-1,"dns":0,"connect":55,"send":0,"wait":29,"receive":64,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.oxamrkcgsl.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.628Z","timestamp":1787924038628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.oxamrkcgsl.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4427-a73\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d182707cc192eeb677d7b70c75d24849\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2675,"size_decoded":1797,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2674)","md5":"10b5b12476dc0cb460bb43b53a1ff705","sha1":"6cba282627c8ef3c5a31e84fe9aaeb882200512d","sha256":"389b0bbdc6070f838903ead7f1541a374f45c4bedc82ddc9c2a4d1832d1072cd","sha512":"72fc6fa172ef31eeaff592273d1098266c74320035c439a1520be5441c0a100649b115c9f88ba1ee51494e5acbd22e8d86b03afd84b61191c1b360b2960ce806","ssdeep":"","tlshash":"e851d47843bc9130602e62fae8af07a0c31b8917d7b211d976ee47b602269d4c735fb5","first_seen":"2026-08-28T13:30:26.259619Z","last_seen":"2026-08-28T13:34:54.949578Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.h8t2w1xgvn.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.980Z","timestamp":1787924037980,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.h8t2w1xgvn.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4423-c03\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0b019b0fb312860b36cd515edb9bbc48\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3075,"size_decoded":1963,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3074)","md5":"64d11ad81c6544cd099190e19454596f","sha1":"699c8a21e2670c61295c9603dcf01592a146901d","sha256":"24b26e0489e5b00a184bdde48b1163c3895d6f02e417f131e5ed649ff9650fd4","sha512":"6f23451287ffee360e5a83f577b855d438e94cb4fc9d643b0f81c1d6bff1a1969c5cdfa90e5af4f697c7fd8840c8ffffb8ad070cf8236dfcc58feaffc8809d43","ssdeep":"","tlshash":"f65120976311b811916421e7f2355707e30d3da7518b056ef3a48aef2b0f9227868f7d","first_seen":"2026-08-28T13:30:26.5603Z","last_seen":"2026-08-28T13:34:54.950755Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.bchznqck4d.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.581Z","timestamp":1787924038581,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.bchznqck4d.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4443-20f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 48ce46e2fae35bab44b34506405f7ca3\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":1248,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (526)","md5":"74e95aa285f58e639418b9707d04de78","sha1":"cc34d8702e5aa5a401c69669bda19ef46dba1e7c","sha256":"7403cee1c740e2bcd51e6122ec84f5b8dfedd9e11fbb7b868ff2e2f6519b4b92","sha512":"a1063e8c711267b18731c90f796c358c8731effe87234eace3f53edcaa519ac77677c56a1547232105291f4b07ca566476da137e874f377e202b7b5a311de2fb","ssdeep":"","tlshash":"53f0508546f00577c12c1bfdc12b95037589407b07ce1bb1f17889382735ac68758ed3","first_seen":"2026-08-28T13:30:26.668341Z","last_seen":"2026-08-28T13:34:54.952496Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.m86vo9xdis.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.621Z","timestamp":1787924038621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.m86vo9xdis.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39362\r\ncontent-encoding: zstd\r\netag: \"6a2b444e-411\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: dd4c99ec2d96a9804fc7efdbf3a2cc5e\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":1516,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1040)","md5":"01ee548fa1825e57eb668e2931f117e1","sha1":"cfcc15107577641e778698a2edddc1e49e5ddd22","sha256":"ff86fc1eb47f76a1108598ac137494771068772040506ea4f83393e0a360ca93","sha512":"80010b444603daec3eeda5ce803bcda1b04c792fba009937dfa40f6cd7340d4953c4282a942d6b7a5be61ed0b8bcd0b9b9b28878c6610e875563316e605ddd85","ssdeep":"","tlshash":"7611af96a1b46779521f76fdd22b70222260443f430cdfb3e2bc4ab41be965ac41d953","first_seen":"2026-08-28T13:30:26.242007Z","last_seen":"2026-08-28T13:34:54.95358Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.909Z","timestamp":1787924038909,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cs2go.money\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 12:33:49 GMT\r\nexpires: Mon, 23 Aug 2027 12:33:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435609\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-08-29T20:29:04.98533Z","times_seen":20800,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.720Z","timestamp":1787924037720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700;800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 28 Aug 2026 13:33:57 GMT\r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12635,"size_decoded":1486,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"4b1d52c19ccef2398d1de007b3c9a55c","sha1":"c57fa2bcac927a7d60c526cb7ec2b6249019dfe7","sha256":"05f842619ec9f615de0b749034eadaea60e3554d798683fb01ee1eb27abd1e68","sha512":"9dfc4ab3832325eb1438bd85674e15ceb62771b94f06ea8e48a2e286453d571218df3f6727b8df4c1bdfa47218eb5fed0298601da289391a736a76a230d68c3b","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGfNx0NO3kCxHx:vXuM0p2+g7r","tlshash":"1e427892002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T22:54:08.549336Z","last_seen":"2026-08-29T20:24:04.667162Z","times_seen":16502,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":33,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.f5mm3lji7a.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.949Z","timestamp":1787924037949,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.f5mm3lji7a.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443a-5d8\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9791c8d1d0cf65802b6c18355082e3c6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1496,"size_decoded":1775,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1495)","md5":"a69d12b63a8431730c4ef89752db799d","sha1":"7d5adf53ac90259fd4628a35287a72af3eb08c7d","sha256":"65549de23c06a2279269110d87e9d31d3b49271e948b0c32e918832c24d1ba5d","sha512":"f200a9899765b8c6d6c71661bb8ce894a50d05aa0fc88f19c9b4785717aa9ecdd869d8e42e4d2672a9b81a0ff28b0d8b43a2c00740bb6c0fe24f2f9f8a627900","ssdeep":"","tlshash":"bc3153d223f0a232422d1bddf1b59313f7a01873611d4a60902c4c76aa5aecad1a8f8b","first_seen":"2026-08-28T13:30:26.717731Z","last_seen":"2026-08-28T13:34:54.955382Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k951i58gfd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.977Z","timestamp":1787924037977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.k951i58gfd.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4428-103c4\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 881753f7fc83f4c6fb0df113e415379d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":66500,"size_decoded":25185,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f42fa897f5e191d74d576062470ab410","sha1":"b5fe8a82b85e9e3b0cae5ab0218e006db88e0e1c","sha256":"96735dd5a687d5d14965ea7be01ea8a2db665122a2673b4935c5c704928c4835","sha512":"bb861b6c5aa6b33acf572a935e5e085cdc34aef34141b5bde127deaae2986c121826918daa886682ed0e93f73d33d33dd8020cfe6322ceb75735bacabbcf2484","ssdeep":"1536:8RVbTxe2qJMC97zUt1NndHRV98FFnvsX+jevkO+meiK6zKq/37kBe+:8RV/Q2PriI+urGf","tlshash":"4d531a8871e2f0b486b741b6803f410af3372958a54e9510b17ad9dd3db4989e23bf7e","first_seen":"2026-08-28T13:30:26.169042Z","last_seen":"2026-08-28T13:34:54.956451Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nu16e83zql.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.635Z","timestamp":1787924038635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nu16e83zql.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4456-ee5\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 06fda2aba0a48d5ed91e06fe900f61ca\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3813,"size_decoded":2623,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3812)","md5":"271342aeeb32f6ba9ffc45ce6dc1eeea","sha1":"daf8c6a3e668bc19f608dc323e7449c1b8aa1cf9","sha256":"f125df174546e7b5c63b8dcf2edbe356756d9950a3c26e669e7e4b18fb93de11","sha512":"5f90d1346c0506e142d73c9a76d16612adfdb6a8793169d415fb35c082b65289855f2fc41e67272ffebc1dfcb36bc5a91e5500ce363c5b0e15e00c5897ffcb3b","ssdeep":"","tlshash":"0171820f4fb3cc38729627ac4f899100ebf9d90bd1f88d5a15ad035490d2d71924c237","first_seen":"2026-08-28T13:30:26.45295Z","last_seen":"2026-08-28T13:34:54.957599Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://cs2go.money/ws","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cs2go.money/","date":"2026-08-28T13:34:20.604Z","timestamp":1787924060604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cs2go.money\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: oAhIJO8Ejka8YaCgweTZdw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039; currency=RUB; user_currency=RUB; locale=ru; user_locale=ru\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 28 Aug 2026 13:34:20 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: BunnyCDN-NO1-830\r\nCDN-PullZone: 6131853\r\nCDN-RequestCountryCode: NO\r\nCache-Control: no-cache\r\nCDN-ProxyVer: 1.62\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 404\r\nCDN-CachedAt: 08/28/2026 13:34:20\r\nCDN-EdgeStorageId: 830\r\nCDN-RequestId: b0c7d07575298c8ec90d88ed33d806fa\r\nCDN-RequestTime: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jb932p7ona.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.444Z","timestamp":1787924038444,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.jb932p7ona.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4451-208\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: aa8bf8ac372dd6297c2b099775710f41\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":520,"size_decoded":1245,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (519)","md5":"ad616821c60a7349bdd1b59f58d447fa","sha1":"959394db5efec6a5246413d74abc546b17f86f00","sha256":"a7febab9022f4cc5a08f789d492b9dd7fbe4fe1e501d0207ba449b828deeafee","sha512":"a0bb3b6e1f3cdd504756f29c71e907b5d072638c8e77be409ce4ea8c08906a60a24634d8805ead5d8f06ecd105653f58bb2e8e002758e5eaa7bf367418385a9b","ssdeep":"","tlshash":"fbf0599a577046b7812c23fdc06a14437254017f078c0ff6f1b98a3d6732ad9824eaa7","first_seen":"2026-08-28T13:30:26.546329Z","last_seen":"2026-08-28T13:34:54.958707Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iyozdtu4i0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.999Z","timestamp":1787924037999,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.iyozdtu4i0.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4425-38d\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0e19f316d3b9940619ee1d3b1dd83461\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":909,"size_decoded":1450,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (908)","md5":"23a554bfe1cade98f5f7713f64ef04e1","sha1":"442cd1cead9aa82fa567ef27ae0554718fcacef3","sha256":"8f6e5fb8ffb250e16626748d25099efb21d25b5f36df53e693bb6e21342203d9","sha512":"0ba9512480ae10fb51ded2bcd49c16e484ee3339a456684341d1a17a5e5febc701180ab67320ebab3fdd1047076efdd06aee263107c1d311024444cb257703a0","ssdeep":"","tlshash":"3211d08667e0857ad11d06acc12a0907e7a0193f874c5ee0e1bdc924b7b49454518a87","first_seen":"2026-08-28T13:30:26.531106Z","last_seen":"2026-08-28T13:34:54.960019Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.inwrxkvwmy.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.035Z","timestamp":1787924038035,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.inwrxkvwmy.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4433-9880\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 53c46dcfbba0296c9a0536dae36fb9b0\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":39040,"size_decoded":15860,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39039)","md5":"db45987b16c8543c998d35da9008d0c3","sha1":"f409cf3bc7057825241a0f46bfad549f69eb7bb5","sha256":"1ccb74fa9bc86dc36f94c559592ca869302441d065ca7154b5a16878c4badced","sha512":"bcd6a4213019192ce8d0e453c4dddee9935151a7f3d2240f5c0c0b099f4130b809e552c04dbbadb5973bf0a375970099e4e2de52f9a8751c6116543bc3d9948b","ssdeep":"768:kqYGYS1Nnm6b1NKhMdbKu5gbYse4Qmz5DfruhLAGsqFlbXnAdZdVItx75Q:kqDYS1Nnm6b1NKhMQggbYse4n9fruh0v","tlshash":"e60309cc7591f0f0867b52fa403f521eb3372a24614e9510a226d9dd3c74daad23be6e","first_seen":"2026-08-28T13:30:26.689668Z","last_seen":"2026-08-28T13:34:54.961215Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.hgho10tacq.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.265Z","timestamp":1787924038265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.hgho10tacq.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b110f-12b6\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f62714e357e340d1183cf62f37cf7a1c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":4790,"size_decoded":2955,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4789)","md5":"460470b6dd46cc2cb5daf6d0627dfddb","sha1":"e6aad4fbfd866efa551eed6a85cd434c1c30a191","sha256":"7c4c1f81bd79940174b2b65811203b588d4008083692f387d7c94d4d4151db47","sha512":"9118988706dff8c7e791109b97c50de7a6582f026810d2e8041a5c64ed38216eb7a91f13c86973748452c3db81f95bbdb51d4a38e5189fecc228617e08af4ffb","ssdeep":"96:o+BZvoMFaq+/YSLjemJjrJYXcazKdKTZkdCB:zvol/9emRJZazeCZuCB","tlshash":"eaa193b6f011b8b6d26654e6d03b843433316729b24985e0e1be980e1e65692e127eef","first_seen":"2026-08-28T13:30:26.620457Z","last_seen":"2026-08-28T13:34:54.962774Z","times_seen":2,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hv7qce4qgd.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.585Z","timestamp":1787924038585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.hv7qce4qgd.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4439-692\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0e54b7479503cfe14913e59ff2aae9d6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1682,"size_decoded":1792,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1681)","md5":"210f06e27fc5b4c4ac6ffddd00ae5450","sha1":"86f1c0ffbd369df545b56ed1ee40bdb732f009ff","sha256":"8c2132c6906e0156aff360674f22e5680cb4a218b04e4e95c32188dd50a635f7","sha512":"6a72dcf1a5b640947926720dcd1452c88f3e1f267f8222e3f94f5d7b594b9e5bc0e0ed6e88adeea0880707438352e561098a2e62133133406707c436db535999","ssdeep":"","tlshash":"5a3144d6103498b7417de1fce81910131258247f6fca8fe9f86c0ea99f569cb46189ba","first_seen":"2026-08-28T13:30:26.226818Z","last_seen":"2026-08-28T13:34:54.964141Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ab5iex94ri.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.012Z","timestamp":1787924038012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ab5iex94ri.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b442a-529\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 23e6af82284351ef452a056f6d946f6c\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1321,"size_decoded":1578,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1320)","md5":"2585aaa00513bf02cde315b91f060546","sha1":"0a1a417db3de8cfaa60c63d56479d4d17a3c93aa","sha256":"c99ab8b3d6ab098bc430cfbbbe6739f6156b448a5d67d57de80810706354e3c1","sha512":"fdefee05c38ef57f5c9ec9d6e80444eba69b4a5b541bea8e1a2effb1bf19398953b2db353b8de41dc4805dc1b82802c0b5b1d84a265afaad853ebca16ebf8e75","ssdeep":"","tlshash":"ca21501cc7a6a937910713bd551e90016ff4503307f88baab232439a9861e6b009d73b","first_seen":"2026-08-28T13:30:26.516197Z","last_seen":"2026-08-28T13:34:54.965441Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.33bclquyju.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.594Z","timestamp":1787924038594,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.33bclquyju.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4437-92b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a527b94dea00213f8a4bdc04c3bd912e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2347,"size_decoded":2216,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (2346)","md5":"2e08dc25ad3be7e47e72dd2b965e3e40","sha1":"44f97f860a311eca7d6749f042cc795b209c1fa8","sha256":"cd500826beede629696cf1bbc858863482a5901af6f62276851eddac8a035036","sha512":"11f3f479623a4c3ff6747d24597f70da8ea9c64708be8abed83699bf99df32b13615dc380b6d989b9c2d0f4527b764252ccdc1453e8c32161f1045b012f2980c","ssdeep":"","tlshash":"384154e893e08ad4d005afb8d42658662bff1cbf7f5907c2c1789ed0e7200d48c5d98a","first_seen":"2026-08-28T13:30:26.62235Z","last_seen":"2026-08-28T13:34:54.966891Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lcd720bdp6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.659Z","timestamp":1787924038659,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.lcd720bdp6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4447-9fb\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5c799fac105c4381dbf8ddc8960e5277\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2555,"size_decoded":2338,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2528)","md5":"10add7775e7be1dcac514d64d46b873f","sha1":"59e2b917007716a5d16bbc6576706ebe3523b0ba","sha256":"4e0ff0459e7aa0d265f08b12ed506b4cd034b6152a70e7606a09e84d832c5148","sha512":"d80b0a118487c8707cf58a1cf7b1fdb2586d5e36d189e9661b11aaf30096af64487febfc722028173f5931c44710e5e0d489325bfcc9dddfd9fac81e91f565ea","ssdeep":"","tlshash":"bf51a5615d75c73310cc66fdd036b2422208107b5f8adc9cb89e6cb4b712aca9c28bf6","first_seen":"2026-08-28T13:30:26.699994Z","last_seen":"2026-08-28T13:34:54.968473Z","times_seen":2,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nfadakw2b0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.009Z","timestamp":1787924038009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nfadakw2b0.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b442a-1c5f8\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1efc9f1b4fb83b27c9f7bd5251a7f8c2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":116216,"size_decoded":28579,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6e2671a084ba96f8ac14e003a625caf2","sha1":"260a83009120ed0daef1a81b14f2e8f2b45904c8","sha256":"b151238663cac94fc471ee1caccd3811e20c543bbe058ac012d8a01e156554d8","sha512":"3d2834b940b7047d2bd790454d924c15b92cec26442ddd783f00bf00ddc8d008b48c6247c3a2e5c95f67bb05f6eab4819812a1b1c4936e1aa20d0d1ed9731fa2","ssdeep":"1536:2oTxZ214cM9geYs1Nnm8LMgt65FMbhBZSHZOWCNFknV0387HSGdxJsdpCN9ZxBY7:2Oz2DMLhCokpySDsmRRA0GIqYrs","tlshash":"cfb31a887192f0b455b742aa803f410ef33a2e18a44d9510b17ad9dd3db5d99e23bf3e","first_seen":"2026-08-28T13:30:26.396432Z","last_seen":"2026-08-28T13:34:54.970036Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jtcyasau6v.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.037Z","timestamp":1787924038037,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.jtcyasau6v.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4433-1b3\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: abfd33397a453ab7d852c69dcfceb72b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":435,"size_decoded":1185,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (434)","md5":"18c4a6cad1d6068f4996256b83c663da","sha1":"28b6f3df1e080ae6aaa9b2a7346304e1adeae7c8","sha256":"87636f890f745ae377e8593d4a17e659d4bb34ebc0388514b2652a3cccc04cc3","sha512":"8d8f544dd619c0eaa126cbeadf8139a24f0e9961e06beb0496f7f1ece9be79059c77eaa5ef1064edb23d6fdda55bc59d591d8d5ec28ca878880a0a9f5803d1d2","ssdeep":"","tlshash":"71e0e5895bf40a59816823bce56a4507aad0003753cd0f75f33949396ea9dc58d4ca83","first_seen":"2026-08-28T13:30:26.214274Z","last_seen":"2026-08-28T13:34:54.971572Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y7vyne5tsLc-XAXeAzetkj_FhTjq2xyIrujqNjsH8dy6SbgFyXMAlQLIMtELuxNTuY77j51Hc3YJGyCX_insa6C5ot-5QT-N7rXTHzhfD.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.786Z","timestamp":1787924037786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y7vyne5tsLc-XAXeAzetkj_FhTjq2xyIrujqNjsH8dy6SbgFyXMAlQLIMtELuxNTuY77j51Hc3YJGyCX_insa6C5ot-5QT-N7rXTHzhfD.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 14448\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a295da9-3870\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7cedd922f5ab35a1a6af345181848d7d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":14448,"size_decoded":15351,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"21b899e76b04b4570a842d5afd4ac393","sha1":"101f1b2e9dc3fef0eef35b19bbc2f2147c2bfbc4","sha256":"ecc04819a83e208b1c862894b9c5e0bcbc6439264ac492363c6ec26b94cf38a6","sha512":"b3251d08c000be0e40ee4056a2300f8010e1d48af3d5e3511695c57ffdb3980be2c60efbd9be74c408053bbfbd4eb9f12ebbc33d5d2ac8c24ac759a80d6877f3","ssdeep":"384:LEIfTsAyDsIevRmzPCZKC/vmO+eoZi93l:jwo4O7lf","tlshash":"6052c0d262b1846df0635efd4242b2d7774e42ca720451c6c2b6c24ad8baec4e9904ff","first_seen":"2026-08-28T13:30:26.722941Z","last_seen":"2026-08-28T13:34:54.97305Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.e1e3ate3r7.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.508Z","timestamp":1787924038508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.e1e3ate3r7.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hgho10tacq.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443a-25b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6f8a35bff4583514a25cabc4ae0e9e59\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":603,"size_decoded":1280,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (602)","md5":"b1611c9d50277553af8d46603b77d819","sha1":"6b8d90d3bd44e2f6363f2ace0b4a833fb8119dd9","sha256":"5d7ce179792fba7e12aca224fe402cca9f90772f829bec05c91bbc40a1061faa","sha512":"04e3c6d0089ae031358673088d53e41dda9c3567e793106bb3c1a7630ece518512091ab6f92e7a89a9860971ba1e39669c07973a58f764f2d61b025840679f3a","ssdeep":"","tlshash":"52f0acc9aff019a6402a53ecc02e0143b958097b1b8d4bb5d2394d397b7298a45a8e87","first_seen":"2026-08-28T13:30:26.67662Z","last_seen":"2026-08-28T13:34:54.97439Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fnb54a62dx.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.573Z","timestamp":1787924038573,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.fnb54a62dx.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441e-23b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b7830a93a61499c5597b1383b9cd3b39\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":571,"size_decoded":1273,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (570)","md5":"92359926dd5410fbc34d6c9053648dde","sha1":"995bcc8e6350d489ea99b1775f6787bc0bb03701","sha256":"5dfbaa5f4feddc2dd9cad7abcdd5030b3a4e8ff44efb284f1bfe7e7986d81457","sha512":"8ad199cfc15793f6280add2d469ba3f2fd151e3a2cf78daed8154767d77d1b14897df759332a41a78c9161159240e87b1afde233357a3b46e3fce1eb23fc670c","ssdeep":"","tlshash":"4ff0ac869bb056e6852a16ecd06b60033a6a187b834c0bb2d13d09383636a9e424a6c3","first_seen":"2026-08-28T13:30:26.67774Z","last_seen":"2026-08-28T13:34:54.975744Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ea2v2uoc9b.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.620Z","timestamp":1787924038620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ea2v2uoc9b.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444e-25b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fcf7e938e4f9a24e8e2dff636f56f9c2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":603,"size_decoded":1268,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (602)","md5":"c66f5d607589cd62e1f7d4adfe5dee5c","sha1":"43760a2cc3429ab6a42a2f45f8dc0d46ba123fe8","sha256":"d5d09db84ab2b9cac524e7cd5f4ef4ce0b6a2443de8a495e27b135ccd629b5f8","sha512":"576f6f9f7dde7f00866bbc2972e59889df8a6db1cea4f83702a24e03afe685a9ca4b91896e6be06c94c9fa466eaa089da39d4809d653a9d2c78fb83741eb47a1","ssdeep":"","tlshash":"85f02d8d4fb14a62e004179ed26a450767e0503b93bc1f65b1688739dfd5dd98808993","first_seen":"2026-08-28T13:30:26.527268Z","last_seen":"2026-08-28T13:34:54.977141Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hezb7ksgm1.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.697Z","timestamp":1787924038697,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.hezb7ksgm1.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.ebp5f8qjr2.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b441f-3f7\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: fe408f191f12e303634dfd9c6d309d97\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":1543,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1014)","md5":"cd81b1e3ab87d81737b9a4626bebcedc","sha1":"c3f1ffbce937c01ed223640161cb1ba47f5e461f","sha256":"9b49878095d00868143e57dfb363011d2c39a1da17a27ed6228222dd36cd6e0e","sha512":"12406b2c64f99ffa4f8847b67543b94372e6fa1089e3fdd9f2223bad871e1aeef60b3c4249e7e6b357dab166640ac42cac6f9f9a051c88064d79936aa8182d2f","ssdeep":"","tlshash":"b811ef9017b04ee9c1161bacd62618063eb418bb9b9e1760d2b40e3c7a255d8c58c9a7","first_seen":"2026-08-28T13:30:26.558923Z","last_seen":"2026-08-28T13:34:54.978634Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1L-uGmV6VgH_WeC3WRzepJveB7TSW2nAcitwKJk4jxNWWXaAYgXMBwEe5btxKwx9O1Pu-0tg3ZjN1Bzi782iwa6i1otroAVqAh5OSJ2JW4jdt1.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.787Z","timestamp":1787924037787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1L-uGmV6VgH_WeC3WRzepJveB7TSW2nAcitwKJk4jxNWWXaAYgXMBwEe5btxKwx9O1Pu-0tg3ZjN1Bzi782iwa6i1otroAVqAh5OSJ2JW4jdt1.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17066\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a292ca1-42aa\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 398f5fe2b214c5da2a8b0d7721680f54\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":17066,"size_decoded":17969,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ecc0a7f04edfe61c809f78d0de5669d","sha1":"a4890d7ade9fbd548a94c5518258e995dc6c3676","sha256":"e38c7410fbe3718c5efec4826e8a1d7effb87e0a0aee1fec699f41e0799ced84","sha512":"45905b37751d8d1eab912772ba6138485e50dd1ea989899b92042631af908b9c9781f579bf7d121b0dc018ba5fbd99c8ec689058f93350385da42c8a536844eb","ssdeep":"384:i7CV8S4zJsXFDQ4SGxpl7+IjkIIDR5DCdQUUI1QjB+qJizvkRmAbCgl:i7o8CDQyVs/YQUUI1Q9avkR9H","tlshash":"c972d04806d5aaa2dd20d13d6bc097da290bc3040ee545ca63bb9c358dd0ff21faf1e1","first_seen":"2026-08-28T13:30:26.207577Z","last_seen":"2026-08-28T13:34:54.980479Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.iqus80yrzp.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.710Z","timestamp":1787924038710,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.iqus80yrzp.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.j9cqfjfjs3.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39644\r\ncontent-encoding: zstd\r\netag: \"6a2b4444-f3b\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ed1aacf05af5b14b7a25fdf53c2d721f\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3899,"size_decoded":2778,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3898)","md5":"3345feda74398f8b57c75a145255b600","sha1":"0e27926483b6f24baac9dcba8641132d52e21e81","sha256":"0be18cc6450b4664bb92fbd9fa6b85fd898c3d8fe420325771fa282090d8204b","sha512":"212c55f45d0ae325fb5b764538e2e0bd1d2877a0c40a86e5c722ac74c54138a4da943984d99948c61330fa500a3e7608d091390a00771d3f6debaf2d1f1c341f","ssdeep":"","tlshash":"6381b6df2fb08de5d084c3deea650889b19a98ff57c24730c25c9d0c7096ae8992cc47","first_seen":"2026-08-28T13:30:26.613439Z","last_seen":"2026-08-28T13:34:54.982383Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://cs2go.money/ws","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cs2go.money/","date":"2026-08-28T13:34:01.834Z","timestamp":1787924041834,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cs2go.money\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: a0/e141MxJljnvznQrcwCA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039; currency=RUB; user_currency=RUB; locale=ru; user_locale=ru\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 28 Aug 2026 13:34:01 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: BunnyCDN-NO1-830\r\nCDN-PullZone: 6131853\r\nCDN-RequestCountryCode: NO\r\nCache-Control: no-cache\r\nCDN-ProxyVer: 1.62\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 404\r\nCDN-CachedAt: 08/28/2026 13:34:01\r\nCDN-EdgeStorageId: 830\r\nCDN-RequestId: 48fe58b120e1bbe11a792f295c6f8bdf\r\nCDN-RequestTime: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.oihbp7rja5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.499Z","timestamp":1787924038499,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.oihbp7rja5.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.o6gjkfl42q.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4449-1d6\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0c8c19ce9f698f1e9d4ad07890a43d36\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":470,"size_decoded":1220,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (469)","md5":"f69d2cecabbb8f9fedbea82295301d52","sha1":"a091ac620afe2627679d52c3f8a22976f352aad9","sha256":"806f0efe71c74e115e4fc6ba15f771e5536c3aca8137ef24273e25e3653eb513","sha512":"876d77ad9fa039af76c69726f6a82f2e58240b58e5eeac8f1ae834c1b242b76f472a0481bd2eec9d058f4dfb5760094c091714cdafacfaa140f2aad844bb8ca4","ssdeep":"","tlshash":"36f0a7966bb48a5a401913fdd12b5103b2a4003b5b8d5bb1e13c897a677abc78568ac3","first_seen":"2026-08-28T13:30:26.56981Z","last_seen":"2026-08-28T13:34:54.98387Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.907Z","timestamp":1787924038907,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cs2go.money\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 84924\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 23 Aug 2026 12:33:49 GMT\r\nexpires: Mon, 23 Aug 2027 12:33:49 GMT\r\ncache-control: public, max-age=31536000\r\nage: 435609\r\nlast-modified: Tue, 09 Sep 2025 18:33:55 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":84924,"size_decoded":85737,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 84924, version 1.0","md5":"f5b588b5cfef2173838149769c8a0269","sha1":"5312086a01f8e8299094ddee5819b9727a19cae2","sha256":"b8811a6cd6f7e0707dfc9e9e6f1daf5f6f450b51e887e163945a9ade91c2720f","sha512":"05d5271c633bbe102775c0b6df9c5e110dae3a2517061714bb5c26ec66a00f8e1b62961135ec96962e7ccaf3942d8e32bd86f42558cbac8ee16ff6c333117886","ssdeep":"1536:PABWz4rSN/GzH27xN5UR1OnX+uyRsd1osLZBi/JGyQI01xDj+C:PAG4rCGa7L5UR1OnX+fGd/VB03QI+xP","tlshash":"378302b4ae71b3968f1c7fe46396273c2a7bdf41053950aeae44e16787f00dba148784","first_seen":"2025-05-29T19:39:57.235915Z","last_seen":"2026-08-29T20:29:04.98533Z","times_seen":20800,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cbbrvhzsl5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.458Z","timestamp":1787924038458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.cbbrvhzsl5.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4441-98f8\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a1eb447e38ab7a918cda01bdff4dee3d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":39160,"size_decoded":15844,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (39159)","md5":"0ebbc28a3238620ba6d64a6e4ec6b531","sha1":"d2bae579d9401dcfb52ffeafa3a0f4306425a6cb","sha256":"620e0e8b328b9153fcfdad854a342c753082535585a679f03ae1192613fd6c23","sha512":"18c4970a013e70d8fdf5bc7442870e7707fe4f6b266cad4b9b21c1539a77fd56f4e10eb634dc81dddbad858c7b4ab0d63bbe7d96179f19db2a310aeb68f472ea","ssdeep":"768:UQlDYN1NnmjbjNjteexAB4emhs1f0CxMKm87FgSUkKE7v8ZQxIdNB3Jao2UR:UEYN1NnmjbjNjte5lmhIf0CxMS7FgSUN","tlshash":"c30309cc7591f0b096bb52fa803f420eb3372a64614d9510b125dadd3c74e9ad23be6e","first_seen":"2026-08-28T13:30:26.254907Z","last_seen":"2026-08-28T13:34:54.98697Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ckm6wg7201.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.670Z","timestamp":1787924038670,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ckm6wg7201.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4x87szd6k.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4448-2e6\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1cc2b9f78264bd7e676a7f597b2023fc\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":742,"size_decoded":1385,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (741)","md5":"981b27f42ba04e7264edae6fe2ae350c","sha1":"16907756c8999721e3565efb67139dd010bfaf65","sha256":"8fbc118ad8ec331deb6851a6fb41830de8c2ad845b8400c075054c239eaf1393","sha512":"b9a552737f7ae75cc0b96e0fb10d0af65095f0212d6f28c6c777b88d27e09609cc796d69f95a980adb79f18c73293d37a05f13efeafb7388df445c6eaafb3f16","ssdeep":"","tlshash":"1b01dcaa1670cd72412c53fee026652325e4447ba78d0f60d57c093cb7669cbc469a8b","first_seen":"2026-08-28T13:30:26.356776Z","last_seen":"2026-08-28T13:34:54.98879Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SD1iWwOpzj-1gSCGn20l-tmjVmIqhdHmWa1AkCJRyFuUItBW9wNTmY7jh5ADa3o5Fy3-sinhXrnE8OtZmGks.webp","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.794Z","timestamp":1787924037794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /assets/images/dpr%EF%B9%952/rs%EF%B9%95fit%EF%B9%950%EF%B9%950%EF%B9%950/q%EF%B9%9580/f%EF%B9%95webp/plain/https%EF%B9%95/steamcommunity-a.akamaihd.net/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1d7v6tYK1iLs-SD1iWwOpzj-1gSCGn20l-tmjVmIqhdHmWa1AkCJRyFuUItBW9wNTmY7jh5ADa3o5Fy3-sinhXrnE8OtZmGks.webp HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: image/webp\r\ncontent-length: 7142\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\netag: \"6a290d22-1be6\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 24920ce0632f1723bfb6f7d396d15e65\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7142,"size_decoded":8044,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7a82a05d61071f2b81aaa12c8f15c626","sha1":"240b5c61e2163254a9dc8342defb0ee468d481ca","sha256":"bdd4d7eb35366b86aaaebc453494c1c2353f717d4d17b26df6b3ccc64507e73b","sha512":"51953553984729efd7e047f7e2ec6c959c1761ef440b5e6f0dd99f931a0a8741cb163860c131b25d9cf868961fe8a9267df057ea4abfae041279682deba89fda","ssdeep":"192:3agoJ/R68UUcKhFtJZ/aVCp5vzf9T/lCUAmTTLWl:3g/fUYhrawp5vzBlCJmvLWl","tlshash":"18e19e407e10f285caa44fe081c7f33aa26bf632f147ad1899441c4adca69adbdc6785","first_seen":"2026-08-28T13:30:26.231513Z","last_seen":"2026-08-28T13:34:54.990559Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.ch3b6wi8c2.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.654Z","timestamp":1787924038654,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.ch3b6wi8c2.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444f-454\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a28639ec5194899e4dc22fce68150f6d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1108,"size_decoded":1551,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1107)","md5":"63cabfc3736c12a0feadc7af0dce2263","sha1":"b91dbd9179925e81910dfe96e548395a25ba2bf1","sha256":"2d25c377962e50a56362ecd61014de75676c088b9540b1457e2c0bf72c7ca3cf","sha512":"19b5efba0b0f1fea335638d40597a6e106f2ef8ff4d2b343f7045612c54554ce42194bd78d3ede43dd02202d34ace0a92714ed366d0f816737c7c56aa0f5fbf7","ssdeep":"","tlshash":"3b119be962f05ac95a1803f9e27a1103b94e203f13ae5d60827c5a6cf624ab5174cdc6","first_seen":"2026-08-28T13:30:26.195874Z","last_seen":"2026-08-28T13:34:54.992749Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hg4l1rawx9.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.984Z","timestamp":1787924037984,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.hg4l1rawx9.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441e-35a\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: bdd7f356a58c012f140cee667a580531\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":858,"size_decoded":1426,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (857)","md5":"89f44737c1b86df93d3ff7cac192c829","sha1":"d8f5ed847b2eb0b9e41dab4ff91bf3aa2f1d440b","sha256":"cd28031d831edbb3e381f0efbf842e1d360fe9cfe43b4a06221c72d72b9576f6","sha512":"a2871dccc11691d870d179a26c5d758082158a9d649995c19e1c3159c1c5523b120d688fee426a11ca45128bddc3c6bd8dda12a7738184320d1b92133c1d686b","ssdeep":"","tlshash":"9c1112c512f63562676f2629c17f8103b16c2433a78c47a0e23ace392aa99d1d251b97","first_seen":"2026-08-28T13:30:26.266132Z","last_seen":"2026-08-28T13:34:54.994451Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.b2v633n8dw.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.998Z","timestamp":1787924037998,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.b2v633n8dw.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4423-a97\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 15591407aa473b7c2cdbbbdcbaeed6af\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2711,"size_decoded":1885,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2710)","md5":"07e4fca3b64c6882a07fc0589d9abe24","sha1":"a6e53f1f98107712192f76286db68b7673e1fee3","sha256":"46a13164d84580da92332dc2b09ef32995c52ace8b64ae8f4335e1a2b0981c8e","sha512":"42d211f0cfcbc4f5c6884658b6f6ee4cf066dbfbce19565ff3f533e58d683cd05e5c8b2d944c1a1d240409ba2a21ed8621d0fe25fbaae90f821c5e03218cfa41","ssdeep":"","tlshash":"3351e0ca6be5b801a294153cd6e7884369292cc3315c1568f4fa1cfcbda0bcd8e679b0","first_seen":"2026-08-28T13:30:26.285105Z","last_seen":"2026-08-28T13:34:54.996665Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.cvpzxajlre.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.003Z","timestamp":1787924038003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.cvpzxajlre.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4429-233\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8a2364f4743b7541baa9ff4a84bfa318\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":563,"size_decoded":1269,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (562)","md5":"76c1f92a53eea32b96a16a7472ca3cea","sha1":"1d649003c2682da54c79f593ade4a8b8fdac05de","sha256":"c0604b674a9b04c92b7bed73dbb5c34e13e8901d1a36faf3e4eabb84e4810a8f","sha512":"2ca2268f72f7dfb6777c836e70b262f7967bc2e849c3a95f91d58ded363608b221df65ae882afddf9c0e5644e6b4d80ea4c0d9f7cfec45e20abc70714174cc00","ssdeep":"","tlshash":"8bf0acd472f12219916f12bdc13a160333a55c370bce0661d13f453c77a6a578b28bc7","first_seen":"2026-08-28T13:30:26.292337Z","last_seen":"2026-08-28T13:34:54.998591Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.i45i6oxuyg.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.583Z","timestamp":1787924038583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.i45i6oxuyg.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4437-2e8\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 64242c855c073b2efd4624b1cc30d28b\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":744,"size_decoded":1367,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (743)","md5":"5f88bbd89293c3866b6572dc3f5f3d44","sha1":"412b652b2e46dcd9f9e2f404bdf7314b0a12c7b4","sha256":"7e9c06747c5146ff538b446c2ef46d1ed5d75becb7fb078c289271766d3b19b7","sha512":"20952b2335f4603c00c36b50ecc15a809daed609cdb3fa071c00bd438e5bbcc853f6877bf25644a6b2433c93fbd6c23b6fd52d155f844be9e2aa0fe60981be50","ssdeep":"","tlshash":"6e01b8846ab065b1041712ebd06a0813a3a8193307880e70e27d1d3aaf36dca822e783","first_seen":"2026-08-28T13:30:26.287853Z","last_seen":"2026-08-28T13:34:55.00031Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nyx4v01nz8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.971Z","timestamp":1787924037971,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nyx4v01nz8.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4428-6b7\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 864e339e287679d463817eb52e0afbce\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1719,"size_decoded":1832,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1718)","md5":"80776c941a2abc19a7e543b96c1812bc","sha1":"6e66b85ee8ccf71309a185d7607fcbdbb767796a","sha256":"4208050a2448cddab161847e83c4bb8fa47e48d81538cc3445ed8562752b1536","sha512":"92912540cd4873b07955c32a88ffed17ea3585591794291ec62a535c25dc2e8b4195efde89d87129ce492e33d4182839bad6c2cc3ed25931d50ef9278dbb4a77","ssdeep":"","tlshash":"e63147cc7be3f0b9432a90b940af0407f07a0e370e8d4155e12fd4617eb5486c12be99","first_seen":"2026-08-28T13:30:26.702555Z","last_seen":"2026-08-28T13:34:55.001978Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.jhhfrwip1n.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.027Z","timestamp":1787924038027,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.jhhfrwip1n.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4432-117a8\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a700a086e29694291ec7c5ecd647ce4e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":71592,"size_decoded":28905,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64552)","md5":"4e66637cc2a1c6289330ef54c95a52db","sha1":"c605f41f8972c555faa682a9aa21f186ce9273d9","sha256":"1251a8f5201a3489fcf3a83d3bead80af1aa5027188e1c2d7aed3cbe2ffee83f","sha512":"edeb37d69cc014ea58463ddec2de1e61a824c844d9dc04c173781eaba76eadb63c5a3276c58ea9d4e2ff0f579e05a6ae1aebe9c018db12337efdef7e8679162c","ssdeep":"1536:4JC+6dJ8ZM7zwnCTUliYPLEj1NQVnIWjC:L+U8xnCTUlxLEj1Nzd","tlshash":"28632dc839d2f016876370b5007f048bf23e6fa968aca608d1a0e4ed7db855de577e58","first_seen":"2026-08-28T13:30:26.320409Z","last_seen":"2026-08-28T13:34:55.003968Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gio9kcrqb8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.618Z","timestamp":1787924038618,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.gio9kcrqb8.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4434-679\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d1927821238bb9d57ba7159c0d912c07\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1657,"size_decoded":1624,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1656)","md5":"c80c31ef29bdd471833b2b745e14270e","sha1":"0a7b7f20095234d168a33e6d89a53aebb48dd858","sha256":"87ceda3bf03e7cbea0a12494066519c3ce1ee6103c5f746a3cab01de98eb8b3b","sha512":"eabf3950199bc29922ae3b7262922f34027f34aa1d3255ff00e5b5332246d246f503124a4f3cf8f4ff530c2c63c7fab3fb4949027e3f6453267b6b805bb51ad3","ssdeep":"","tlshash":"8931fe826bf2d43f8ca582edd2dd0533010118fa978ac5b97dbc149b121864f503c9f9","first_seen":"2026-08-28T13:30:26.367467Z","last_seen":"2026-08-28T13:34:55.005682Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://cs2go.money/ws","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://cs2go.money/","date":"2026-08-28T13:34:04.958Z","timestamp":1787924044958,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://cs2go.money\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: pWD20leYbd7j8JIA3mqgEA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039; currency=RUB; user_currency=RUB; locale=ru; user_locale=ru\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Fri, 28 Aug 2026 13:34:05 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: BunnyCDN-NO1-830\r\nCDN-PullZone: 6131853\r\nCDN-RequestCountryCode: NO\r\nCache-Control: no-cache\r\nCDN-ProxyVer: 1.62\r\nCDN-RequestPullSuccess: True\r\nCDN-RequestPullCode: 404\r\nCDN-CachedAt: 08/28/2026 13:34:05\r\nCDN-EdgeStorageId: 830\r\nCDN-RequestId: 5cf528eba615c80693b726f0ed63dd16\r\nCDN-RequestTime: 0\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-29T20:22:58.661106Z","times_seen":18172180,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.encvgg8y5i.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.495Z","timestamp":1787924038495,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.encvgg8y5i.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.o6gjkfl42q.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4449-dd3c\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 706a35b148de17e9178719ec50041472\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":56636,"size_decoded":20899,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54973)","md5":"d71d7f49547de7e39232cfda28e47999","sha1":"f1ede68466d78fd05ec8e61b381a7912f82b5030","sha256":"e7c35036b996bfb8cefe1f9e42029b161702c4f4ce537f1f98d93cd707b7ad91","sha512":"df7a232d3ee493fc30ceb6bd88ce820325a94ecd6a791d5b25a5d6f663a9230d6661d3152af11c4311244b027dd4940c276bb0a1d0f4c3a79ec6769683940318","ssdeep":"768:unLrKj6ION7MMIaZ88oPbdzs65WnU4fHZ9ItwGdUpPBe0O1LNv3KUL8gs4uCWWOd:uvh928rbE/Ug4ZwMLP","tlshash":"1d433bcabba6f01842b691ebd1270012f32d3fe9b949c445b1ac9ddd36ac5985136f3c","first_seen":"2026-08-28T13:30:26.66687Z","last_seen":"2026-08-28T13:34:55.007299Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.d8a01a43do.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.595Z","timestamp":1787924038595,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.d8a01a43do.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4453-3d5af\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c5de556d58a75a5965782c4d2c7c4fb5\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":251311,"size_decoded":92549,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (55323)","md5":"6b810c02346ba721cc2a544287c4a986","sha1":"9d40bb8484c36a214499aa848585572c19d8cc2b","sha256":"ff3e31461e417095691bb469f591a5229bcd7417bc8198f5633577922926b082","sha512":"b1bc1f164dacb00bf0ee289f12e9e396564d8300dca931b88907f4f730add73d9dba4b31b3fd368909bd1822f71a97a193fb4b88fcb40a6f6f364ae8de3d2c62","ssdeep":"1536:WlYM6kznwqsMwidhoACw9FOrYeUbFR5NroINMDSbdENx75gFvl7gvyePx/LxNEyc:0YMLw4MThMyvRG4x4od2p","tlshash":"8b345adab3d4b1e8d40793b9c43b5816b7ba3dbcbb29c5008198dc98f4645cca95ec93","first_seen":"2026-08-28T13:30:26.690832Z","last_seen":"2026-08-28T13:34:55.009818Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/fonts/DrukTextApp/druk-textbold-italic-app.woff","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.789Z","timestamp":1787924038789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/fonts/DrukTextApp/druk-textbold-italic-app.woff HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/a.li76j7h8mg.css\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large; _ga_6HJ4YYRYDQ=GS2.1.s1787924038$o1$g0$t1787924038$j60$l0$h0; _ga=GA1.1.1261812664.1787924039\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 548\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding, Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: no-cache\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 404\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3ba525422c388b29b6ffcea66b23ab5f\r\ncdn-cache: MISS\r\ncdn-status: 404\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":548,"size_decoded":1388,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"370e16c3b7dba286cff055f93b9a94d8","sha1":"65f3537c3c798f7da146c55aef536f7b5d0cb943","sha256":"d465172175d35d493fb1633e237700022bd849fa123164790b168b8318acb090","sha512":"75cd6a0ac7d6081d35140abbea018d1a2608dd936e2e21f61bf69e063f6fa16dd31c62392f5703d7a7c828ee3d4ecc838e73bff029a98ced8986acb5c8364966","ssdeep":"","tlshash":"02f0909f5f12287f2e238571f4c35169cf680a57fb9925e28748011f7aca04549f1fad","first_seen":"2023-03-08T16:42:13Z","last_seen":"2026-08-29T16:12:15.248689Z","times_seen":21103,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.k0jo8w80ck.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.968Z","timestamp":1787924037968,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.k0jo8w80ck.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4421-47f\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 8def05b1c23357241c8ac7f3768e90e6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1151,"size_decoded":1470,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1150)","md5":"ac794f4d471501fef9f52fa094168057","sha1":"de519a0fcd7a67925b70ec9078abb6fe00eda046","sha256":"7a6e59fd06f097428330abe21f2a21fd2d75a3e4eb3210c5bf16fff45836f07e","sha512":"c9bbe83e6e7516117c1cad55a4125ccc4d3e26ed28db83e5ff7105d045fa832efa480d177c7f57aeb3f5a9ebedf75a928c0cfe7c21e430281a85ddb2e244f197","ssdeep":"","tlshash":"ce21fe843bb0a6a1527916bce03b1107b35c483b43ad66a0e379c9f839b91cf4654b87","first_seen":"2026-08-28T13:30:26.673661Z","last_seen":"2026-08-28T13:34:55.012309Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.efeo8lfgd8.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.224Z","timestamp":1787924038224,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.efeo8lfgd8.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b110e-2de\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f19e9dfbf017d8e8188193f789c9f881\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":734,"size_decoded":1318,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (733)","md5":"afe67949761dd467a76082522e59564c","sha1":"da73e358346fcd38be72c9ad10bac493cb2ed39b","sha256":"ebdb24f5b0b8d2d77233a57a87e9ad346fa405d0be370d90980cb2be6a2df167","sha512":"3cdf6acbfc22ba9b4ffde6aaf74227f969c250ba72816c22788ac2791e69123658371e1d8c8d89dd41aa8b61d03895fbdf7ed27427c2de52880dafee19d09d63","ssdeep":"","tlshash":"a6017b628774c91380985fffd05ac45211b6453703e9c7b2d1fe0f3c67655a9c418643","first_seen":"2026-08-28T13:30:26.404482Z","last_seen":"2026-08-28T13:34:55.01396Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.g2vhpy7y07.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.959Z","timestamp":1787924037959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.g2vhpy7y07.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4423-2c52\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 67608a52b7faf146c8e3222e14b9231e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":11346,"size_decoded":5152,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10097)","md5":"d5eaf086f974ebd346fe710f3130c261","sha1":"4cdb690ed05c255da9666138f8ace087d80f1d80","sha256":"cab4d9a8feba0b547563382a365dbbe103cfca019618735493f79ba2c98e918a","sha512":"cdfb7fe071bdcf813f240b930ce6d00950b615ecfc32635a63ad39c58b594201008cedf340e406bc4ebe2181ff1b87341e618a11173d09a13eb2c06e96f71363","ssdeep":"192:tOzK4cQWLRDvcDdDEWJdEUpJLan9rEnwIsFT2fuZk58HYF4KV96Hstt9x/PUqeUf:M0CtvJiB1FT9ZkmH25VUqXdPUZNaK7yt","tlshash":"b132978e31eeb5d9039e86d098320306b118095528c8a67cfebcf9f11591d47957af7b","first_seen":"2026-08-28T13:30:26.295724Z","last_seen":"2026-08-28T13:34:55.015443Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.lrip74bpd6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.993Z","timestamp":1787924037993,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.lrip74bpd6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b441f-213\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2245a370c484905ae5f4ebc139f3d4e9\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":531,"size_decoded":1253,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (530)","md5":"fa24659ade5fb0d9d018ab36a8d824b4","sha1":"26deceb8b40f4f0a93de9f3fb60eab5fe9b80540","sha256":"61faf2138b0ce366c9da53dbd61dcc33267e8740615173336d394fb6a1608b32","sha512":"31e3b918e0922c4c2440ef5816651c5bb82308f9b5c8778e353d463cb553137924644802f1713106c4fb02d03e2fd34ce472b5b1e9cf8d97b2ea0d6dc026d697","ssdeep":"","tlshash":"83f02b9557b04aa691141bfcd16b0407a699103b07ce0fb1e37c0939377a5e68558b97","first_seen":"2026-08-28T13:30:26.360832Z","last_seen":"2026-08-28T13:34:55.017687Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.f4vthtsqrl.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.205Z","timestamp":1787924038205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.f4vthtsqrl.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b110e-f5ac\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9d26362d56de160dba2f7f6c2bb59401\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":62892,"size_decoded":23695,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62883)","md5":"dd7b2c3b7be7f0be9965cae8d3cd7d2a","sha1":"a160bda0c528df1678ebacce21583f5b996b4e6d","sha256":"274996106bf8502fda9f2c3c8d68ea4714f0104bf01aa65391cb0770e4480d15","sha512":"06b3546819358dffd1b72b1fcbf696af7c35f232a3c49fa70cf2b08d1c9fd9fd26c4d548389a989ca1ccd222ae9d558f2b7e7df5959ef181d5fc28cebc6b6d79","ssdeep":"768:ktsq7sKEoFmh3CXuS6mVpUucfLtsJ5GtlTsjRukooOGHMl0kdTBG4rLt0zKGsDPt:kts+sYYB/nkrUR84izXW","tlshash":"77534cb0b254f1fdc52b53eec02e1921bf2937efdb628a90c0ee8d187325594a45cd66","first_seen":"2026-08-28T13:30:26.391961Z","last_seen":"2026-08-28T13:34:55.018948Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.257Z","timestamp":1787924038257,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://cs2go.money\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:24 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:24 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 183754\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-29T20:23:02.754225Z","times_seen":269362,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hpu0rr1sjr.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.616Z","timestamp":1787924038616,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.hpu0rr1sjr.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444e-77df9\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: f0ca491c3b34b1093a3a637da1eeb306\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":491001,"size_decoded":122226,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65419), with no line terminators","md5":"1cf54bd8c4e05897a2182705e07afefb","sha1":"853d25c66e1b26d0a11b5629a9f59731aa62c972","sha256":"c83ce8c45ee80e6a485a13eab7ec03d90481d1fb69bf2e7da033d9268449b5b6","sha512":"9966d199fe5e2a04b6d587ea848b3e617f1cd905390869511d76bcae2dd186a21bdbd2274fb4e2df11ab1d59e1cfa7d528b2b09841148bb70772f2bc8a593400","ssdeep":"1536:ONBTVnjpsjLKa+X+vk4IUQMOGAJuuHwV9oEFkeYBi/8nOlhMyWNVf8puGaVIfw0B:OPwjryGvzkjdGm097cQgj6RU+F","tlshash":"74a442fd114326ced439ca5b28053425d03233bbbf9d784eefda6215eea580a19dc96c","first_seen":"2026-08-28T13:30:26.625157Z","last_seen":"2026-08-28T13:34:55.020193Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nhfzpihfxg.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.639Z","timestamp":1787924038639,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nhfzpihfxg.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39362\r\ncontent-encoding: zstd\r\netag: \"6a2b4456-3f5\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:33:58\r\ncdn-edgestorageid: 830\r\ncdn-requestid: db73ecc47915b9af1b7e5ed1168bd4a5\r\ncdn-cache: MISS\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1013,"size_decoded":1547,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1012)","md5":"0e5201f624c47d723d5ec68b91af142b","sha1":"ee9a936ac762783db4f0211cdf5f207372c3eb95","sha256":"b8b6d99832337ef6a7257cc89d0d407919b74166663d86bffbdf38da517fc51a","sha512":"1577bd9ec7371a989517782cc3f7bc099ce38d02e1186dc2a644a20f43c31e3ef1a2b57f81bd3da82a6664df4c3ad568d68b4cab37b96ce51a324cf893bcb4e4","ssdeep":"","tlshash":"b911e2f4237086d9802813acc13f590266b514bb5bec0ba0d1644f29b72d5cc554cedb","first_seen":"2026-08-28T13:30:26.146801Z","last_seen":"2026-08-28T13:34:55.021711Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o5cmqbu59u.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.509Z","timestamp":1787924038509,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.o5cmqbu59u.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hgho10tacq.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b443a-1cd\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1db90c7d68ec454549ffb5d4c2118c30\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":461,"size_decoded":1209,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (460)","md5":"f5ce8b05d10bbeed3bda8f37d4517c3c","sha1":"67059814453cb801ad3aa4046691018b4fa2c342","sha256":"3499a98cec08b445948ffde7151d081c7af06f5f07bfa077731c5d26090a6005","sha512":"07bcadb2040144ff63cb413cd6677faf450b7fa586c751f19c8260d7988d32fa674c993ba7f710f9fc65cbae99f363e5aafb2095c029c435c66eb2e66823e866","ssdeep":"","tlshash":"cdf05ca15bb04666802917fce07a22133695843bc7cc0bb3f178073856619c9818c7c3","first_seen":"2026-08-28T13:30:26.160086Z","last_seen":"2026-08-28T13:34:55.022539Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.nf1se19k2g.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.633Z","timestamp":1787924038633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.nf1se19k2g.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4437-b12\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4505c2f1de54ac96b318d22e9f6c5685\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2834,"size_decoded":2286,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2833)","md5":"de7f84044376f2400339b8c046e21bbc","sha1":"0319f3940b74a3ae0761c7c3e60251e4a8e82719","sha256":"0023d68d74cd7741bc30fe9a953b3a0437d26f8bbc295f9b72ac703e343a7985","sha512":"b55f78fe4484e45fa440996a2dbee01fbe0259a544c0b13fbe5abe33dff8c2021e923d49603013555bd87cbf8d3b756fa65221f4a2958da2ef5694af03a1a07c","ssdeep":"","tlshash":"475164c5c192d914ce2553feb4bb5452e5ac2f26140cd091d1fe0bafab285c7832ab29","first_seen":"2026-08-28T13:30:26.144992Z","last_seen":"2026-08-28T13:34:55.023521Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.dewue2b1o5.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.723Z","timestamp":1787924037723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.dewue2b1o5.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2aadc0-1b0f8\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 18fd071038da7db82043deb285362f58\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":110840,"size_decoded":40118,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (60733)","md5":"14a7ba4402ccf04c257609eeb244ef18","sha1":"847588d8c3405101d3ade538734031f0dccd4b46","sha256":"ad8e0e48bbd59ec239eb8fb0b6f4d321d5af9c4d73a038807595c0199c25d724","sha512":"807f8ecf271adfb1a5df0fcc5e29f0892f4079c77d243f89af5be2db96599987a06554dd9d0c77e194c6737860afb1cb7f4669af44529d15ec6e30ed9bf5023e","ssdeep":"1536:jWVxczsyNfrdPBcaxPALW8nIRN9dogLlxN06ryp0208Lmd:psqPAS8IzTooxNUp0Riu","tlshash":"54b34c99b1c1f5350bf6d9b5c03b0101b33a6d46784590a4b3aeeed22d794ca9327f3a","first_seen":"2026-08-28T13:30:26.228863Z","last_seen":"2026-08-28T13:34:55.024543Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.hrvprlucne.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.551Z","timestamp":1787924038551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.hrvprlucne.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4436-32c\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 7e4ebdada0dc3506744c91c9bef08388\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":812,"size_decoded":1407,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (811)","md5":"b813b291ec09d21ccee53551638a0fa2","sha1":"f86299637826967b4381e5b56b4193bce6891d82","sha256":"204396ba5be18357361e2fd590bfb11afc141edd99b45f29bf5a3ee8bc75ea76","sha512":"4304f1d162cdd50a197ec7e2b76889632f00891c0516cd2fff80ab5535bf0e447c106fb5043585107dfb68534d0ad682878f1e93fa89638e29b00a07184f3955","ssdeep":"","tlshash":"5d01f19d66b029b6101e7bfdd126010363a4043f53584772d0be4d3d2f3a999842bf87","first_seen":"2026-08-28T13:30:26.642675Z","last_seen":"2026-08-28T13:34:55.025385Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.fz12gtvcu3.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.619Z","timestamp":1787924038619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.fz12gtvcu3.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b444e-300\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 94b991e43540821ab9346b6f3c4de661\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":768,"size_decoded":1359,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (767)","md5":"6eeb41ab2ccccbecc9dfe69b6748733f","sha1":"283e09df4e194caa0acd0152e836722ce3e2b593","sha256":"5cf577bbdc62c80cef72f3e62ac031abbe7ad5443021dfc535f0f702830d7a17","sha512":"830cc200a969d7a150b612003c20b9ce8233cdd816889f66ce97304b722567231f8fac95b476c6d00cbbcc108714da1ec974ac470180fcc3cf2091af9902cc6d","ssdeep":"","tlshash":"ad018ecd65f415aa200a43fce17b480761284c33578d5360e13a8cba3b205198229ecf","first_seen":"2026-08-28T13:30:26.483223Z","last_seen":"2026-08-28T13:34:55.026168Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.o0ou3fxp78.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.656Z","timestamp":1787924038656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.o0ou3fxp78.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.f4vthtsqrl.js\r\nCookie: u_vp=1280x1024; u_dpi=1; settings_visual_card_size=large\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4435-370\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 120c9fb5b329fe7dcd0fb37691d22f79\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":880,"size_decoded":1364,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (879)","md5":"e62c7826b7baa63317a5179c3368c26c","sha1":"d67e4a83bc2f7ffa47f872b667d99fb657624d9e","sha256":"ba27491c328def52e6d49edb30a7633b22f2f0f13da208467deab0a36106fe9d","sha512":"b1a6b22a12979e0928f09c5a0b8658cbcd66d1b8b3a51ed14d1598171034fab81d833c9e066725da6c27da96e9d2dc3c7fbcadfe868af5eab3946451db5c5fcc","ssdeep":"","tlshash":"3a11ccacaba0e734917e1b7cc0b7480373f7803347789660472507aa946368a84992b6","first_seen":"2026-08-28T13:30:26.64605Z","last_seen":"2026-08-28T13:34:55.026918Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/e.3c7dshfnbg.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.718Z","timestamp":1787924037718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/e.3c7dshfnbg.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39646\r\ncontent-encoding: zstd\r\netag: \"6a227ea9-7bf\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:14\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 77d33221594f28ef36a9c1ef30a2a1e7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1983,"size_decoded":1819,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1982)","md5":"fd00edb438ed4a49ac5f04a7bf582425","sha1":"7927863882612167ddb3a867ebfaf56ed7f76b08","sha256":"6b72f1cf616799f7d4cdad29bde578ff0229d9b2477353e4561ecb5f92b713a3","sha512":"a457109967d0a035101a81cad60a11c6b80d8bf2ecd08662531aac808237088165d0e41fd399953dadf15d4f27f6413537791c338f7710b5c38576889fa4496d","ssdeep":"","tlshash":"db410fb5127c4a33486859fbe6609243b8142437724e207bba7c58fe5cacc834b74e67","first_seen":"2026-08-28T13:30:26.336451Z","last_seen":"2026-08-28T13:34:55.027692Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.wpjmcvma1p.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.961Z","timestamp":1787924037961,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.wpjmcvma1p.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4449-c55\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 43476c3d3125cd1d44e9781e3b0e22fd\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3157,"size_decoded":2293,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (3156)","md5":"1e4539591d3733391807f045d089dffd","sha1":"1064345bca1351ffdbcc8ebac8034fa049cfd536","sha256":"b96bb9ded99c7309dc2643579a34cfb03842e3c4df56fbc487ea75ba8b467108","sha512":"96f11772cb25a0092d396d2f2c9603e718c03fba01c310a79770ce74b8f3049e8a4b3bc01905b9153ae5c0dc3534329c0f1caf1165ad703a8c83fac73f87ed6e","ssdeep":"","tlshash":"ea519a4515f2c676002c51bde93a569239b015fabb0b8d10683c5c6c6f32ccb8c5dd6a","first_seen":"2026-08-28T13:30:26.318684Z","last_seen":"2026-08-28T13:34:55.028587Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.n4vlkd4wwe.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:58.454Z","timestamp":1787924038454,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.n4vlkd4wwe.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.hwho5z7gji.js\r\nCookie: u_vp=1280x1024; u_dpi=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:58 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4446-1e57\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 2aece1f7ac1f8291a16de83c03285438\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":7767,"size_decoded":3845,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (7766)","md5":"ea6fcc04e38661c4fca2c55e28cb1e58","sha1":"d14f055e25d5ded65ffdf590d7dbee65c849e241","sha256":"ed4d24a7e148bbf6288705417b6d75275c47649658c39b7a850527999cf4cf65","sha512":"a852d0530a4fc45cb4cdc3f193f671459097dfeb7d06374ad9956dc44c756a16bc1287ec086325973354760c262fe0a8da158c80636226dcdf3acd1fd7d7a48d","ssdeep":"192:N0rnkJeDu3sK+6WMYn795ccLmUsXkP86oy5VycY7q2o3995ELukc3Tg:2kE3F9q3kD572C5HkZ","tlshash":"49f1b80ba381c43b47e681ecd5a34052662d14913b554a6e3cbcdcd6dd22e48fa6eaf1","first_seen":"2026-08-28T13:30:26.252851Z","last_seen":"2026-08-28T13:34:55.02955Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/a.li76j7h8mg.css","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.457Z","timestamp":1787924037457,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/a.li76j7h8mg.css HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: text/css\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39646\r\ncontent-encoding: zstd\r\netag: \"6a2b039f-72d01\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:14\r\ncdn-edgestorageid: 830\r\ncdn-requestid: aef2cfdfa4251681c284a56ec73bd418\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":470273,"size_decoded":85682,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"6d50bf02ac99b26f1bc0e2a72a42f2a1","sha1":"d5a89d5e500a9f46ce34ffb0277941d3ce660a57","sha256":"5d764124199eb86d94b4fbd71d0d55e91a231ccb9a0d4e37a5eac473f03bbdaa","sha512":"289749ec8212962ed80969d02d92d14d7edabad426f3c635cf6d1448c284c769efa43a79bdcc1f351515b10877fce918cbbc747afc8e780cf6b2aaa98e28ab43","ssdeep":"6144:nv5sn/kzPue9fw9I+4CqBt6EpuDdVJ/cS:nv5s8zueluDdVL","tlshash":"40a454bd5320f63cfc2b6c5aae78054ef918c03a9d26d7aa9702525484c77eb3611fc9","first_seen":"2026-08-28T13:30:26.681776Z","last_seen":"2026-08-28T13:34:55.0311Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/openid-modal.js?v=80619001","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.736Z","timestamp":1787924037736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /openid-modal.js?v=80619001 HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a34657f-fb4e\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 6b45406e61694af0284098ad1399cbe1\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":64334,"size_decoded":19892,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1165)","md5":"dbede946e21da33743b1a368734c91ea","sha1":"3739010c52410ccbfd5117112f5cbda97a6912c7","sha256":"b451392fb02041724cd51e1c02d7d908d14e5bcd3e7eb745777f355c8073aa57","sha512":"be6f5897e8aefbf41ae8fa9245105ba0cfbea8dd8897dbfe0a72e7fc36197858b1f4b1da08c32a44d500f1ec9202c66cd77f1c6596eb349b218ee794c577a356","ssdeep":"1536:Cubt0kFxpwOXBk79IPw47QsuP47kh91Rb:Cm0y6ORmEQs8x","tlshash":"4c53a468b8e310b6e43f213e8a9f654c70394117240fde51799d96a00f9856f81fefea","first_seen":"2026-08-28T13:30:26.349755Z","last_seen":"2026-08-28T13:34:55.032283Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.e0130zcaa0.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.966Z","timestamp":1787924037966,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.e0130zcaa0.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4424-c05\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a957c2e34a6b92f543839683bd791600\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3077,"size_decoded":2500,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (3076)","md5":"3f190e9672bd92a86addc2708f20d7f5","sha1":"02e45aa987e7cac4b1870aedc40e181353debde5","sha256":"045b01388e379131a080f77d04b99851658a1a7c1189dceb7092f61cd11c07e0","sha512":"642b7ad4cd59d5b0f0c79d2291f1f7b1b006f427ff2f89644d891e450b7eb29aa13e9d4bd0954009a8c077d8c84b8e92c94383d6079f6c67f1872d27762312ca","ssdeep":"","tlshash":"8651dac02192453b82b50efbf01451855a24583f1ea1f4f2feac8d1be62a847871df9d","first_seen":"2026-08-28T13:30:26.306378Z","last_seen":"2026-08-28T13:34:55.033488Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2go.money/reborn/static/c.gljcfadfy6.js","fqdn":"cs2go.money","domain":"cs2go.money","tld":"money"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2go.money/","date":"2026-08-28T13:33:57.979Z","timestamp":1787924037979,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cs2go.money","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 18:32:03 GMT","end":"Mon, 09 Nov 2026 18:32:02 GMT"},"fingerprint":{"sha1":"74:56:D7:4D:A5:AA:4D:42:84:23:25:7D:1D:4C:24:01:1C:7D:81:84","sha256":"44:53:93:8F:03:DE:1D:12:7C:B8:01:FE:39:4D:78:D3:D1:0A:7D:D1:B8:69:6A:E2:92:8E:ED:E9:4D:34:1C:F2"}}},"request":{"raw":"GET /reborn/static/c.gljcfadfy6.js HTTP/1.1\r\nHost: cs2go.money\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cs2go.money/reborn/static/e.dewue2b1o5.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 28 Aug 2026 13:33:57 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 6131853\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: max-age=39645\r\ncontent-encoding: zstd\r\netag: \"6a2b4428-806\"\r\nexpires: Sat, 29 Aug 2026 00:30:00 GMT\r\nx-served-by: cs2go.money\r\ncdn-proxyver: 1.62\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/28/2026 13:29:15\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3b674fc932f88f24ad10d20293c3d630\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":2054,"size_decoded":1787,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2053)","md5":"9679c951cb2bb4c1a26c37df98035411","sha1":"9970431a5a06bf125917b9d2f3c6daa247c20937","sha256":"dd19e883aaae952f41c6e7411e2ec976e518af875339096453e811cdbb1a6dd8","sha512":"94c5b6a1804c9bbad7f752388ce3682f8861add29bc62916e8d6aa9bb446dbbd1a6874e21c833814d61453e35677af5a48d0a45a7be3fb9b699058b0707dc2e3","ssdeep":"","tlshash":"81412d49f695555086a91668c077061b2333293207c9527cb03c9ed9bd68a4dd2be8bd","first_seen":"2026-08-28T13:30:26.431815Z","last_seen":"2026-08-28T13:34:55.03465Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-28","alert":"Sinkholed","trigger":"cs2go.money","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}