{"report_id":"7fadd2d5-d336-407e-b217-300e88efe015","version":0,"status":"done","tags":[],"date":"2026-08-25T19:56:54Z","url":{"schema":"http","addr":"caser.one/","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"title":"Кейсер (Caser) — обновляй предметы CS2 вместе с нами!","dom":{"size":208682,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65251), with no line terminators","md5":"9dd09b36c6ec192374c49dfac700c168","sha1":"50347a2d52fcb44e2f717c564a0e8214d79c428a","sha256":"3cab919ac6fe3e71df34121c489f112f57570fb43783de959c41d2cca726954e","sha512":"e79b4e05c14b817a5c56e7208c9c196f2825acde036e5a27b48faf2f78defe3187c9394121890164d766197aa82278b90ba46ce370a98fc2e67af37af86fb082","ssdeep":"3072:maqQdMTvVCSVvotPGp8CnXXGTr0cZGhMyFXsZNui1cTGlPQX7GQT1uuch/PLcGJx:mnD8Ekg+1zQtOZ7","tlshash":"7514e9301106e5661103bddfa431bf1f64c6c23cde23d51863aeedaa26f6cf487a5692","dom_hash":"domhashd62c3a71b1108c4fee8c772f8cd4858b","first_seen":"2026-08-25T19:57:11.426988Z","last_seen":"2026-08-25T19:57:11.426988Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"caser.one/","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T19:56:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"chat.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"metrics.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"s3.caser.one","ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-06-05","domain_rank":0,"first_seen":"2026-08-23T04:24:30.673883Z","last_seen":"2026-08-23T04:24:30.673883Z","alert_count":88,"request_count":88,"received_data":1090254,"sent_data":50495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"community.akamai.steamstatic.com","ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"domain_registered":"2013-11-07","domain_rank":177446,"first_seen":"2021-01-05T18:54:34Z","last_seen":"2026-08-21T20:00:06.551937Z","alert_count":0,"request_count":70,"received_data":1300327,"sent_data":53329,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"caser.one","ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-06-05","domain_rank":0,"first_seen":"2026-08-23T04:24:30.674961Z","last_seen":"2026-08-23T04:24:30.674961Z","alert_count":94,"request_count":95,"received_data":4752109,"sent_data":54787,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"RxJS","description":"RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.","website":"https://reactivex.io","common_platform_enumeration":"","icon":"RxJS.png","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]},{"fqdn":"image.crisp.chat","ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-09","domain_rank":456330,"first_seen":"2017-07-02T12:33:45Z","last_seen":"2026-08-24T14:15:21.133313Z","alert_count":0,"request_count":1,"received_data":2629,"sent_data":582,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-23T22:33:38.023236Z","alert_count":0,"request_count":2,"received_data":876868,"sent_data":961,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"chat.caser.one","ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2026-06-05","domain_rank":0,"first_seen":"2026-08-25T19:57:03.676556Z","last_seen":"2026-08-25T19:57:03.676556Z","alert_count":6,"request_count":6,"received_data":434727,"sent_data":2917,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"metrics.caser.one","ip":{"addr":"172.66.1.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-05","domain_rank":0,"first_seen":"2026-08-25T19:57:03.674084Z","last_seen":"2026-08-25T19:57:03.674084Z","alert_count":2,"request_count":2,"received_data":195352,"sent_data":970,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/1ki3c_-3ksgx3.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ea1cf04d2a14fc833a624c60e9a4497","sha1":"5bc0757f030d0b86d7be8159653cb36cf42af495","sha256":"1634317df4059fc0f4a24bcc774775f47f81d4b336ae00af818962c1c0cc109a","sha512":"3731414e3d7b2516642ade23a5ee07c21020862a56ae99f3a8fe74d6c8f0f9563ecbb0962efda932d4d4068d6fbc48675d451b4d4baf6d0f0f82e9ffd99958b7","ssdeep":"768:nSlErWNwhxTJsEX69/cwdfrtt/3g2jEGjHwMe+JavmW:CVCxJsEX69/cwdfrtt/rjHwMe3vmW","tlshash":"4be2e80021275afdb7262996102ed40ea0deab4ccd0fc954b5bf7c253ea90d47297bdb","size":32738,"data":"","first_seen":"2026-08-25T19:57:11.633968Z","last_seen":"2026-08-25T19:58:16.076782Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/3p6b3ql599bru.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7290c08242ef76d05e0d91551cdf88f0","sha1":"040b8bd37062bd371e4d6cd47b4e06fc568e620a","sha256":"fc2573aeb805c1109ab67ba9cbbe7b1acb6efe13d67e9da0de76e2dbefdfb630","sha512":"eec6240313d9425429c0af2366a208538b33797b70cf8b6a66aa8fa8dd697475c456e9d5f5b262892d5047774151cfd5183d058a6ec04f1f5418231d4a3eef93","ssdeep":"768:nSSLaGWb54fU5t3hBF/QVRPjaBcsttCtg7Rat8b48k5An:7LaGWd4fU5t3hBF/QVRPjaBcsttC2Ra0","tlshash":"e5e28800502e6bbcb6163966342d940d60cdab4ccf1fc864b5be7c261da50d87b97bee","size":33987,"data":"","first_seen":"2026-08-25T19:57:11.725228Z","last_seen":"2026-08-25T19:58:16.179028Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1dce35c04b38bfdf20451764bcb07faa","sha1":"ac671b9ff5506da2370f1084722ff12c9ffe3b1a","sha256":"3617ef0eaf7991fc96b4889349513133b6e81da99f75d6230cd73104f4774eba","sha512":"bde3c4d6adee4505d85a6d774436938e8c9ca3f9dd1e2a3929305f4e7fa5dc20f46ceff39c7dd5e7c78e946bc39647cac0d97eec2404dbfefdeb381ff6a03ae1","ssdeep":"","tlshash":"dcd095b4b15068b8406da4d4b47f87593d7364497d0008b6f73dc944056c8a10401dff","size":272,"data":"","first_seen":"2026-08-10T05:31:32.007763Z","last_seen":"2026-08-25T19:58:16.194561Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-08-25T22:30:48.632584Z","times_seen":238835,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7268aa7bed44d4c690a39f0de66a80c","sha1":"2c20b511b51a414cd73931ce4c64bb851582d875","sha256":"3512e20092e48d19cf1b25995a45c87f4ebff8dd56e8ac13c33c25bae0617325","sha512":"9ddb357b2859d68881c4dffd4643e9242b954c0dfc81ab8b310dd1913219a6487f0e5b7942966bbb0a82a39fe52c9aca4a46a38bfe5bec6ca47e6fe5fbf37ee9","ssdeep":"96:LP0cV10cVI0cVF0cVLC0c/0ctk0cY/0ckI0cd2An:7DV1DVIDVFDV2D/DtkDY/DkIDcAn","tlshash":"0691f51be94bfc457934cc9e102e0f7398c8e8b6d431146db38cedda612197227d8d92","size":4355,"data":"","first_seen":"2026-08-25T19:57:11.873078Z","last_seen":"2026-08-25T19:58:16.195637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"503507f999c505420469559067a27986","sha1":"8077fdf05c10e8298860cd62cc8594b422c1a9f8","sha256":"3c8ac4ceb518f1ebf99552569c8432ad057bf65b02fb4dce3a7dd5a69f291dff","sha512":"388d75a5770de9184ce99d74e2b4d2bc3fcbd4d3e0c790b96988fccd1937c5be55fc21ef61ed61b6b222f58cf87095195f2fe9d44e83050ddb428ea76d9dbad6","ssdeep":"96:L2ceIy0c20cjT0ccZ0cwZ0cO0cV0cH+0cDq0cRyc0cgV0x:d7yD2DjTDcZDwZDODVDH+DDqDRXDik","tlshash":"8191df1be95efd817a39cc9e107e0f73d4c8d8b28431156db39ced9a612183227d8da2","size":4341,"data":"","first_seen":"2026-08-25T19:57:11.874707Z","last_seen":"2026-08-25T19:58:16.196182Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ee837678617a304bf1f8262bfac7c579","sha1":"483a0d2f834bab1b9e82b659e1a67bfe4f81f811","sha256":"23d2551375a2c8afc6ac22c8122d749aab3a504842cde675c62ab069520de33d","sha512":"c584f700e503a2cc22b37535998240344a2ad3daaf59a9b4ed54b670951aa4e5d31ce50a19f6127e267501b53313189c34632ab673542eb906228137496888d9","ssdeep":"","tlshash":"d731ad5bf94bfc85ad31cc4e203e0f7280c4ddba907155a8b3ced9da42219721399d9b","size":1611,"data":"","first_seen":"2026-08-25T19:57:11.876252Z","last_seen":"2026-08-25T19:58:16.196751Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4cad7cc564735576ec8989084bd61d77","sha1":"b380ac2053cbc6bc6fbea3567a3b07030dff9b51","sha256":"8783c3579cc6652ad936ba2d7bf28f09ff35eb34feb259626106521bb3c34f3c","sha512":"a099baf48cb1442b53369c105f95534eadfdc16c4659cf6ff1be94b313ce66e53622b19b4258044a5ed1cb930781ec4b827fb9bdbf04da6ffb130fa8ff6c2751","ssdeep":"96:LVc7a7cg1xqzc/xmWqeuNNe47xzAI3cTC:mgnqzcpm8u3e46IF","tlshash":"9bb1391e7c05de46ec7e7c6d023e9d3a10cc897b87a0ddb881dece050a465b927ea9c1","size":5515,"data":"","first_seen":"2026-08-25T19:57:11.877755Z","last_seen":"2026-08-25T19:58:16.197387Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"86b00bfb63141cee53cbbda284fd2840","sha1":"444d4673873dbda93f2e261881152a34e6c18428","sha256":"aec61ff6b69a162fe65dbf4f7042c571b64f35e7d6bf54c6293f4e698d51852c","sha512":"2ea17ec2127921da89303b666f39f06bdee9415feb5055fd21dd5e47f1316479f24c2f11e2f8cc46ee5f5a600417b4e18e0aaad347f5f4c41a8e4f6de5f56968","ssdeep":"","tlshash":"e701f96f6808dd47e83e7d1a953a6c3510cd8c3b0ba58ab88bddcf05164557d2be9d40","size":792,"data":"","first_seen":"2026-08-25T19:57:11.879279Z","last_seen":"2026-08-25T19:58:16.197973Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"90a32bc217dbe3542a0271c89e3f797f","sha1":"bbb60951bf9b0447304c1697be64a2062601f479","sha256":"c2dd2bf0f7a76ead64a0f43e6a2307685eb6f5bc86622a609e5696a1fd692c3b","sha512":"b2cc08dd03874f13116c5b246a8a61a012e4422a8bc3dd0daa1f8c57d7c50e3133743a331671cb4ecb658136852c8ba2e62abdda72ede4aad189e0a77f9821c8","ssdeep":"768:023uHVI51HEZWn/ijPAJ0P4ZRHT0nFU+s1FFfD5EJ1bbTNG8N81YOOPw4D7DnaIh:0232eHEgaD1mQQtOPw4vD5AWh","tlshash":"4a23dd605699e4bd8143b81fdd387e2e38aa40fe2f5b73652874bd7e30e3034827a655","size":48669,"data":"","first_seen":"2026-08-25T19:57:11.880703Z","last_seen":"2026-08-25T19:58:16.198606Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a769a306dd61a5a17e599e98e285eadc","sha1":"9d4d43c196c07c2163163be1bba150ca5bba2e69","sha256":"0297ce5fa576c4ea5a8187b46676c2b803eaf5883c08c78d09796fa9000c1e59","sha512":"508a8f968b90a7263633f60ffeeaf351a528e50a7653f51266270ebfd85226c4a384f0ff7fe2ad468e5bf3cd6cd07d85216a1eb59597f075eee647f373d6ba5d","ssdeep":"","tlshash":"e73139ba440acc26ee5cbd452e3d7c3910cd857b02d5efb6c6c8ce401a0297a3796e82","size":1607,"data":"","first_seen":"2026-08-25T19:57:11.882295Z","last_seen":"2026-08-25T19:58:16.199221Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c125e0f973a24709be6eb0dd34a0d3df","sha1":"08f14c9dd744202340b32249c526c46294b13e14","sha256":"a55592138b338a9c8c557fbc69748c5e55b6ff93d3f4a168d18611fb0ab43dae","sha512":"2a948f60799d34bd53aac252816df188bc0f3b200171189db4302a7654f107a5d93ac3a0868e98feac61bae04e5073420636f183d9159272e58f5da6d61a68a0","ssdeep":"","tlshash":"585147a7b407dc4ecb52ad45a27e3cb4e0cf4be805d3bd369086ed964063eb439d2a51","size":3125,"data":"","first_seen":"2026-08-25T19:57:11.883611Z","last_seen":"2026-08-25T19:58:16.199843Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"c2d372fcb070cffb2faaea0b3b43ad73","sha1":"8702314b57ec860f4f685710a1567dbc6523ac89","sha256":"3a54b04dabdac79e5b56643a9d911567e34765a3898a47e3c24119bd87cbcbb4","sha512":"52d68a8c8b1e42d8c11b23699ec0cd791a5002bddcd0bd3f6248e7245a966ee95174e6a190a5c602407280a8cc897acd77b2b22e289d0dec68837d444c4a05b1","ssdeep":"","tlshash":"83c0800cb525d2c8de704875851d1374705d415c49160e11d239f845345c1cdc57d65b","size":165,"data":"","first_seen":"2026-08-10T05:31:32.005906Z","last_seen":"2026-08-25T19:58:16.201074Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/f371da23-abc5-4ba4-bdca-2fae0d18e407","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"","is_inline":false,"md5":"183116394d4e4f07340feacc13867569","sha1":"8872dbe6e2fe1c92c4e5442c3c86a3a98aa2e672","sha256":"906939b9707bd7cfb976b95c71787b626df037851580c5ba4af830f641b7a1af","sha512":"092d27f61aea29e131359ee43be609bab777a36d43ffdca4c144073decc1f64efacbc4cc925a84c5d4213ee936ec65faf7af63495aae437d47639d01d6b98b79","ssdeep":"","tlshash":"0e3186c0b279973411a792e2206d7b20c92e0135f8fe8cc1a23edbc72c3188e9957f09","size":1645,"data":"","first_seen":"2026-08-13T10:47:34.032547Z","last_seen":"2026-08-25T19:58:16.205552Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/16or-h3u066lk.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"55a2d71288a068a24c7b4e51eeb85872","sha1":"477b5fc552ed02f23950300a27cbeeea7f242f97","sha256":"724c9cce13cce523e33faeb01ac3537d5ffb280bcd7fb1ca02bbd69b7e0d5902","sha512":"f7309e9ee3071276a11bd925fce386d1477bbaf2e0f944ec1282f82fa4b4a860f7dd48501c636ddefed48a235762ec92367b6999120c47566cc8ba93f471f512","ssdeep":"","tlshash":"48f0d8442e209094162e05dcc23f810732a12a3f83ce3231d17c88702a38baa325928a","size":613,"data":"","first_seen":"2026-08-25T19:57:11.610741Z","last_seen":"2026-08-25T19:58:16.130293Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2pcfs0_xhh0_7.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c81365888ab9be0734fb8450590091bc","sha1":"64f7878d40e435dfe2b6fd620f8d2ee7fbb221fd","sha256":"48b832784935dbb37840307f619f8ea8147992137610d6be80d16ee49afe89cc","sha512":"000cccc8861eafe2c2f5fc11b0597b06aa600af89c4fb09f2d0c3bfaac77664ab3984f99bfdee0fbb04ccb92f4405af1127d0e4a600a3e58e0d14fda0a8c93e7","ssdeep":"768:nSIuzNtEHRSZoqAqcrmxMTZbK1goQCEM6eW:dkAqcruM1G1gp6W","tlshash":"14f22c663287f482179b91c4942f000ef2795db9509e5424f3f6acb9297058ea1f3fbe","size":35101,"data":"","first_seen":"2026-08-25T19:57:11.719787Z","last_seen":"2026-08-25T19:58:16.0601Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"be3e6610f4566b0995ba3ee08a89d747","sha1":"59360ba645c07b0f9bf12d2e4bd5a1fb1d36f181","sha256":"31e294ddf2c597358abeb3d85a0acb6920c4734df49603e863e4ac11911d7383","sha512":"f165a5d343f5b5010b8533f0d8d0bc6cb3b946c38e247bfdc961aafe8160dfb0224cf27fd81cafd97b1f9d2eee3a265f011ecdadddbb27db79cff5b4f771c1ae","ssdeep":"","tlshash":"00e02dcb70190cb274ee09f533f0e238b1032608b8091c32cdfecc242858a87c81748c","size":338,"data":"","first_seen":"2026-08-10T05:31:32.032988Z","last_seen":"2026-08-25T19:58:16.203533Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.caser.one/l.js","fqdn":"chat.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cfb27fef584fd7f7ef8b5a44ff9d47f7","sha1":"cfd13b3261c5d677d496d9da8049652e3a54b31f","sha256":"f9d4dfd1278a71a4231e7d12625e6ebe8b8d0d5a909c972f77ec2a7ec3fc52dc","sha512":"1effb401813ff3f1cce99eb8d875d1e9cc59093e5af7ae1045f5316fce5acfc322aa4b8c7d8c2cb11292d833386d552585987df9b35cdaf7062d4eb60d4f704f","ssdeep":"192:EnSfZ0VsUEswg2r/gAbe39QoxdpsxGVkdlY3AyQL/aCSaQwiY:N+SS4/M9QoxLkjY3AmZ1O","tlshash":"49f1711732696132059362aa163b6b05f43361295cc5815cb169ecf22d7ca8fa13bfff","size":7631,"data":"","first_seen":"2026-08-25T19:57:11.677047Z","last_seen":"2026-08-25T19:58:16.108423Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TQ4MT2MS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18e7870e868672187d47fd37824ae7a","sha1":"6c1d65469af2cff95f63c62c2523dcfbe73fe97f","sha256":"6fdf1c3506879f275e930eb8c38b171620170f553e64f348f020d5ca9c6cb2db","sha512":"5f101c600652040a6867d7576a2f1875dd7d198ff2ba8e367ccf658ba429f4f9568e14bfbdb49dc4bfc77062b622c3718044d4ba54cef203f30b32accf2c7b4b","ssdeep":"6144:p3xs8hMk39tdZkzMtDHYcs2TWOEr33a5FElbJVxR:9UB8EdJd","tlshash":"6774f9cdb3d674229393e478503f018ba67a79a2f84cc895f186d8d42d74a9a4237f7c","size":363824,"data":"","first_seen":"2026-08-25T19:57:11.574979Z","last_seen":"2026-08-25T19:57:11.574979Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c0d3d5f5c41904a86e35559dfa1bf9b","sha1":"215455bc533efaeba411916b35ae14372835f3df","sha256":"384243fa6b84300ebc0db8291c178c9070d45fefd536266db75f2b96a705cd3c","sha512":"7268373a5853621da78ba51ec3872c7274c5ffca2cc21082f5840b9b05603b9d2e2fd9b03cae7f9a799f1c31d9cda8ac39e9eec2e34a519b72d6cdfe5f9a0659","ssdeep":"","tlshash":"2ad0a7847a428cb409f723d707df310024397554f262456000b2111c2da4fa3b157bcc","size":230,"data":"","first_seen":"2026-06-20T04:19:03.17812Z","last_seen":"2026-08-25T19:58:16.204602Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"eval","is_inline":false,"md5":"427dc6d9b31b09116ba27e0747c46d02","sha1":"72704172cea1298b4a4152131f867c8acb0a89a6","sha256":"1046e31ac6f3a9a06fa2cf24be184543b63136bbd218d6cd5ab5395bb13536c4","sha512":"c653b22776e251b73412d73ccf5b87a23ede616015a1d18ba4095a1d973f7e7dd71f42e717d6bdbeb34a01d46013e324d5d9e5fdb2ce9b248f8d74253c8b3ebf","ssdeep":"","tlshash":"e0c08c2cf48a7622e7b32a7801b6824638fab8228529695490e8258c812058484b3f8c","size":167,"data":"","first_seen":"2026-08-10T05:31:32.035448Z","last_seen":"2026-08-25T19:58:16.205082Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/1zzi2w2ce1xmy.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"338ee9204b06dfece57885d593b1ee2c","sha1":"9f61f8263ebc42db48a9e3e8287af6449724c605","sha256":"3b002e1e4da6e130511f5ee9ec850ce8c6a97eff0873d4e0d35da98c0414a70c","sha512":"95dd3cc210551d6c5867b9cd312f6fc4849e1bd4f469ae37f04c1ed469482456c82714ad312e7b562041a26cbeafd5829a07c113a8c58289ce070c4a9ad3c01a","ssdeep":"49152:vryrhOo8vB3Cm+hWoYcDHSUQeliHhIKF7sZ3ssFHQwkB8qq42FwHCAeZGB3KI:sHVliHhIe7sZHI","tlshash":"db955de5336570278bdb909a10ba0542b33a74d61809442c7e2ca8eb7b99c4573fffb5","size":2015477,"data":"","first_seen":"2026-08-25T19:57:11.889435Z","last_seen":"2026-08-25T19:58:16.20229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.caser.one/static/javascripts/client_default_a7f5f2d.js","fqdn":"chat.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"71e1781ad89f3f8eb096ff1c3a8cd0ba","sha1":"ef337e05c22e119d37b744a0f28ba615d376971d","sha256":"d7d84f7e0484e24773f373d92bf21884e8a74880a118eeb1fc365bbecbbfa4da","sha512":"0337c5ebc4e6296dd181ad772d7b0b468b21ce572527c704d525c271d0746d72321e3db88b616fc2abcb86258f2631adcb1abe86bc728252a28b8549704a298e","ssdeep":"3072:1ZnV21wKa0xaCjtCaYcN698k+zP4n3oZvLaoKNVAhn2OmnYD2YSbkqajwSb:n0Jtx7jtCaYcF4n3oNpnenYSYHqajwi","tlshash":"b044188a3265a83303fa42c7a4721582f33625ad2886407cf76c6dee6a5cdc571e7f74","size":271969,"data":"","first_seen":"2026-08-25T19:57:11.52832Z","last_seen":"2026-08-25T19:58:16.152287Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-91CV07RNJK\u0026cx=c\u0026gtm=4e68o0h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e33e038852b41e8212212a0bf74a0622","sha1":"da856df256d0a12d2c15fbd010325a230085e90e","sha256":"b463bc43b1eeadd1444f2329ac776f6c5b670404de85e24464ec64ff8214042c","sha512":"2326db3cc8d21615089bc4336d0d4b55e8505901f0be8140eea39a1bc473ced0ccf214fa81386e031ad01121a56bd6f51b70712278786265b130ebe1530782fd","ssdeep":"6144:/mkxs8JZMV3ntdZ9sE/U7yHYcs2TWOEr33a5zNNXEvlDCo6meuPvR:PfuWfuNivxK/MZ","tlshash":"bfb4e9ce73d674229396f479902f01cba97b28a2b45cc8a6f189ccd42e7459a4137f7c","size":511810,"data":"","first_seen":"2026-08-25T19:57:11.521279Z","last_seen":"2026-08-25T19:57:11.521279Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.caser.one/static/javascripts/en_default_a7f5f2d.js","fqdn":"chat.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cca1c7873906505ac437cfd1670b22c8","sha1":"9dbadd75612848154bfec4070e9d1f96f60978ae","sha256":"1fd8bae6b49e451e887237c30383ba9a81e8a2626196050319883be4503166b6","sha512":"b98c11851f12ddeaca7109bcb2b6cb8ef9750220412a26255e76b1e92a177a26574f038888b5898401da3836e50e7a2cd453536d6d2e2873732ecce58e43767c","ssdeep":"192:viJbPFmXDS83jwhKwPteE2WZXgkEeMeTAFSIPAU1RrUWBGfj7nOmrY2FYXCYLvv0:vePFmX28+XgkEeMeYSIPfRrLc7sQrSRs","tlshash":"6e72ca0edf32de7b03b74b83b185ba024eb5117106e0687ed45d497d02a4ecab69bf49","size":16215,"data":"","first_seen":"2026-08-25T19:57:11.776478Z","last_seen":"2026-08-25T20:55:38.764729Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2iv1o913x5e12.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca255fe6f35518ab521859b25ed39469","sha1":"25f03237617d5269a79db29803944f42ff6c347c","sha256":"1daf35410b09f1632dde43196ac2e79602d02023ceef4eb9f2d939f0f05eb07f","sha512":"7af471ce9711bfc7f530588f9a73e2460ebb20c06b824cc8b0c44f8bf26b9e83bbfeb47d1d1de988e7bb530b3f0ced657997e664b0bf54e921ddaf204473572f","ssdeep":"768:nS3nBJU6K9OCmEsWUIgoNtbN9MffjQRcquxWP:0nDX9YFduYP","tlshash":"5c33c6b53291fab702db91d9d0370012f2780c7120ad64b4b394dcaf799dd8992faf69","size":52595,"data":"","first_seen":"2026-04-04T01:21:08.716491Z","last_seen":"2026-08-25T19:58:16.172305Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2maed7hpfelmo.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"634416bd69e824d3ac5bf7e21b3495f9","sha1":"f70c2cf07fb73a5ab02d49d69ce12777e7912a3c","sha256":"ab07d817ad97f9efd10e383ec8371bc45dd945d15de30f97482f4c0d870f353c","sha512":"39f6e5d5bebda8b7b99657701c9545d7a771e967075e07835275580cbb56b2aa7469b07a1454bbb5c49bea7fdf9b052379d2ee0d7660657fb021e248eca2fb47","ssdeep":"1536:kmro6CqnLBnAzD4pYBeDHWRDbzUYk2PbZ:kYo0AfwGbzJZ","tlshash":"4743c6e5b3967631479b0125907a0107f7ba8d90104b4938fa7cc9de3aa844ef2f6f79","size":55498,"data":"","first_seen":"2026-08-04T16:27:04.703207Z","last_seen":"2026-08-25T19:58:16.088129Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/3n22tcw-calrp.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ccd3eae5e7ba68d41d4088e0a6a4778","sha1":"3446c2638d4c109feef871f98d79701621b3a4da","sha256":"72b4cad2006e92584ac7cf09c28a3d27dc811b4c5acf501152377760bc6cab25","sha512":"e8f8d030a4452c561a0bf827e052856a03152a15cbedfe3c3642bb405901d3b4983c20f4539fb4689a9a0992f664a5b474a0e0ba3267d0b4f4b4270f98c93991","ssdeep":"1536:7vTtRH05lGJdJUxBeEU4fvz5D2+u2M5NiX9TsjFZ/:7rtRHdWeEUoZ2EXSjFR","tlshash":"e8331baa7353722227e68085d82e0111e239591a540e442cbae9ecfb3557dcef2f7f35","size":53203,"data":"","first_seen":"2026-08-25T19:57:11.466889Z","last_seen":"2026-08-25T19:58:16.142255Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/turbopack-1dejhlmr_w8c5.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8672e2f87d9fe64a9230450d922c7793","sha1":"8040a4396d8c7673c565d2a59492db836672d3f5","sha256":"f068349c1a669b2fb74543584fc3e2f1f17583bba041219d9162dad87147df7a","sha512":"7a53e3da46afc30d299fc70dd676513cd20c22f3af221ae4fdfe8f13e1e1ccdcdda53cd1548cde5044badb6bba41a9c15ea38144a0adb9321d7403ed7d4f86fb","ssdeep":"192:nnS74gMSBC8gEsg6d2hE7oGkldTTN/8S3sBT4fCT3cXX6PpH2:nS74gMStLskl/0ssqCTMn","tlshash":"a732d6da37a6f07343af91ebc06b4001f17944a9145d141cd3aca8fa2c394ae85e7f76","size":10916,"data":"","first_seen":"2026-08-25T19:57:11.632879Z","last_seen":"2026-08-25T19:58:16.174341Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2-j6diho78ige.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"74cf6268306787e60e59281da7c077e0","sha1":"3f3db778e0d001e82a1754f0233512ad6961c63e","sha256":"78a7cd56555d3f031be9ea48d462744bcce0ae75451b7fff0f8d1f988c918701","sha512":"a40b0feca6ca9f204ff575508688605dfe110c3014efc885d24646470108c6a23a6eff3427baebee59dea78c7dd500e55d864abd02a221854ae753eb1205b1bd","ssdeep":"1536:G5UtLf9c0GV0s1GBAlwhk5L0Ne+5gqLP3lyYDFZXaYMXzJxQxnNi8FQ2AH6j7kgn:AQy0GlwKYNFgmPlVMXzgxYL6zj","tlshash":"95c339e5b667717897e91191a02a0104b27e097a180b402cf3f4dcef3969d46e1fbfb9","size":118517,"data":"","first_seen":"2026-08-25T19:57:11.556188Z","last_seen":"2026-08-25T19:58:16.118756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/1zbx24pb9l-b7.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a747685d83a12e4ff281f87a36c2b6a","sha1":"ab81e2f9bba1b5a7f4900fb56541dc26704acdbb","sha256":"0eacd02d9eaf39faa9515ff82f19c83a0b624d7144e79363c15ac7e2d5c5c994","sha512":"3594f48e64f1fa01d996ce8e30799f1d856d8ea1a0bb44416e4c2e52a8c308378bd889b5b7552c1e3602b21fb9f0adb3a478c5dd55e3643e9152007e36579e22","ssdeep":"","tlshash":"3f514610522926ac3132365d632e900b11eea75cdb0ecd74b27b7c313db65f867927d6","size":2628,"data":"","first_seen":"2026-08-25T19:57:11.543354Z","last_seen":"2026-08-25T19:58:16.072009Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrics.caser.one/web/v4/xxJkFDXmQQzv2KYlQubQ?ci=jsl/4.1.3","fqdn":"metrics.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"172.66.1.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"54fa1d53ffc9625a9c03ed35e9276b74","sha1":"6fd189512656da19f0de5fbee9632172182e94a9","sha256":"724297f789fa4362c0f42c531dc0869ba1aab6c484a779f167a27afd0cf83491","sha512":"378ff6198784384139542f007aab2402e48fb151f810518f704a54830d51e837235ad8c2a8fa965be94a61bb796f18feee805f368d233da3d488538ae012dd1c","ssdeep":"3072:fEyFQ7SbohDTvDbq9y8nni76mtR/6w+pbhoTx:N67S6snnmtRSwtx","tlshash":"3d14a3d8b2e6f2916372eca140bb040af67f3c96350c5984c1199ad53e3958bda37f1e","size":194060,"data":"","first_seen":"2026-08-25T19:57:11.623037Z","last_seen":"2026-08-25T19:58:16.131757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/12o_qz1yhki-_.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8918c52430ceed0b48bfdf3363f64690","sha1":"0fc71bab87227b88855c64fbd1a9955121563ace","sha256":"73b7d8990f5a779331b7cfe1a381495d1b6232b410d25e0c76704e67dd4e618e","sha512":"b4511677f95841d927fe78ee22be63503bddd89c2604e62756454b9134a3f861def7ee5ed4384664be09fcb4b8305759b222bf3e26e0f7ac0158c8061d4832c5","ssdeep":"768:nSUw3fDwhHJNPkOsCH71yZ+ATNkzzZLKFbldMgmta33v5aCEovhKaBtl5N29sBaN:U3bwhHJNPkOsMIjT3oy3v5aCEz+vPaFR","tlshash":"2403b4a1a28131260e8353d6542903095fbe79b4178c541fb76c9ee72d52cca4bbeff2","size":41154,"data":"","first_seen":"2026-08-25T19:57:11.60896Z","last_seen":"2026-08-25T19:58:16.107857Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/0r5y64tuo09rx.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8bd3c374c0965b3dacf6b2294effdc7","sha1":"2c3132171a2db7b30d6c11cf8c95506e9dece1c3","sha256":"8b4862ffdae763ea6c732243123e19190affd9537e744357f76fc69b2af39252","sha512":"8ea12faa140c3178f460c4f6864f92195d8d3c9877cb235f26324e79b3ef238eeea5f403dcc9e4b799cee2d75bc2b4c6502122bd03ee2dc8607a568625b4809d","ssdeep":"1536:AMHmm5SXjx+7KEPX5LcLdv7Os4aFv8aMUB5F9V6JZEFSLpu6HjpBS/0F6zNpxpf8:A2SX0KcALj4a9J5I7FdExrZ4OPyANti","tlshash":"5d433db2569d209e0202b50be8097e497ebb80fe3f67576618a42c7f31e3434c779799","size":59878,"data":"","first_seen":"2026-08-25T19:57:11.859984Z","last_seen":"2026-08-25T19:58:16.127928Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/3n7shpixe6zy8.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c437dbacd3cbf88d5a81362dcd635b06","sha1":"5c3b8336019443487fd36b9c6c5788a89783d40e","sha256":"d94ef17f901f9e2245e9da0a47204ac61d746c88862fcb3f05edbdf3a29073bb","sha512":"046b0eba67abeac7f20a3c1652f033f9683bc0f3f05c4a042ab77d4d13b5836f2ef3c69a141f415f07573cfa988eb68aac3735e8b0870f30e32c6830cf69acda","ssdeep":"6144:KmDK5SG5hdki3/RHLIW0kBsBS6QYfFlj1JRBbstnUp8vfpX4k0EA30EhPNS:XfQCFlKmN3S","tlshash":"96944af93696f5225bf302a6507f1402b338192b240e4860b365edde757844eb1bbf6e","size":420828,"data":"","first_seen":"2026-08-25T19:57:11.686843Z","last_seen":"2026-08-25T19:58:16.062783Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/1sx53lx3cj4n6.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff6a92f6d35aa66f24c80f59b2d3bc67","sha1":"8202cadcf1780787294ca07dec31ad3fc16e34c2","sha256":"aff85c14441248f407d94aa36b84dfbbe13906e1e2bb05b69677086842675ecd","sha512":"e9027d93b323030cf7995520420b4327fc35b75063c858cc838ee2831e9dad4956761c4cacaf62eb39eedd4edff412a7e784f287964ede9cf0674a80f58e7cbb","ssdeep":"384:nS+cFiGkm2JKwvKV4MjBPxGl9ikyEWa5mopZUNQOX3v3smkp0+:nShFSvmV4MjaLi1ErXpKNlX/cmkX","tlshash":"09c2e6b936d5f8a107a345a4803f5007f2391d7a349da4e4a3b2cde979b494dd033faa","size":28281,"data":"","first_seen":"2026-08-25T19:57:11.454759Z","last_seen":"2026-08-25T19:58:16.12129Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/19m7dku3xpnu1.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7799908773f1277aef54e74678525f2","sha1":"be34c92382a35c08c38663ba5978febd8e55cada","sha256":"f60dd0a607334d669393a56e4f5a1c39f4efec966d9be7bec6111110aeb8df29","sha512":"0801070baee9e63fb95306fbda3c989f9e6e652097ad1c54fba3f5df408cd1725a7bed6730d18ad8f9d3f2b4c8ad1e477b0f15bc7bb1c6050efded31e37363ed","ssdeep":"3072:3rQ9sGqWu/bgpev4DcH/a4uo0M9J3cxSiRxqCYdoYvOqqtq0NQ/wxt1OGaeQqp/4:k2H3GYacx","tlshash":"be34c81061167beca6233996252ed40d60deaf4cce0fcc64b27e7c212da91d476d3bda","size":232220,"data":"","first_seen":"2026-08-25T19:57:11.47375Z","last_seen":"2026-08-25T19:58:16.137021Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/20xsc67yv1u55.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"61577bd9d2b17a7433b74902dab621a1","sha1":"cb8432dd9cca63d4e06c9b2fbe335a05fc3dca36","sha256":"57a42eda3c92f1d9bc01d246aeda6fbffe5445ea9e76ca68420da1758d8005b8","sha512":"3ebc17b1e07c530a5903fd44de8b41c638f86441697b2bd880ee43123f51bebd5aa6a46698a4bbc9f4e3385991e976c243fbb9db97c4034985dc61016eeef778","ssdeep":"1536:zN5V3PcXsVZHDEj1iRHLdH3y8PkGGMBIapy3yGxRtwBIYf5lrYzoZzsmwj/xXo/L:R5V3UXsVZHDEj1iRHLdHi8PkGGMBIapz","tlshash":"0e83e9507112baece9223594e57e800e706dafdcd90ac91ab2bd3c241d860d4b797fdb","size":87896,"data":"","first_seen":"2026-08-25T19:57:11.615715Z","last_seen":"2026-08-25T19:58:16.12466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-25T22:38:56.451273Z","times_seen":390134,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-25T22:37:40.736156Z","times_seen":425602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2e7vtv3v9k2ri.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d78d240da72d3f7983496a2b7cbc821","sha1":"a10a6a1016d485e6b912e60efc65a170a15b1f79","sha256":"c076d082a77cb47681a3ad6731b97662220918881ab0e22b124f9f44a1847aec","sha512":"b31c009394b433d0adebce488a6b414fa242872d866349f11bb907e3fe96403c619847c4ce4af60efc0d6b50c7344d607adae77ad57e0c773630f7b2fbfc8d11","ssdeep":"3072:ejWwB0pTX1dUkn+mUrpNctO199jW5DIcYd+0HapRqm6:ejWfpTX1dUk+mUrpWtO13CScYTapRqm6","tlshash":"f21407f932d1f99207a740a5c03f1007f22c4d72249e6460e3e5dcda796859de2b7faa","size":200009,"data":"","first_seen":"2026-08-25T19:57:11.70079Z","last_seen":"2026-08-25T19:58:16.149534Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5398224c1b31c4f2c46ae66771226a7b","sha1":"dec23f735a6dcb143998134056c1974c96add617","sha256":"d63f5ac1dc5dfee5ae8d02c24c9dab91aae1a1683cf1d9c00b5ec983194f2f06","sha512":"a7cda3fe4f8855eb6e5627912a0868e1acad98f8439ffa6645f6b1344fe4c46459defd40507c9da5c70b6a39759c2a1f2e8e32de00cc5618459c01b9196f40a4","ssdeep":"","tlshash":"44c012787114005501a9a598b06a97547d7264527d425436e97d8684446899540019de","size":182,"data":"","first_seen":"2026-04-19T20:33:16.043924Z","last_seen":"2026-08-25T19:58:16.200547Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/0tfoq5t-jbb8y.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a70f1969237047a4482426566e6f732f","sha1":"43ef908d7cc6450dc63c19e4cadf5d9e431ae2ec","sha256":"6e9434bacd51ae2c48ef2269c6174c796ecedbc0d0e49df176570cffc820e985","sha512":"9c995aa9c231bc3d6cdfc8ce52d134e3be75fe99e096e1a65baee78c4f1d406b7e29d780d65fa448dda444b21a4f37ce62a02d9f64ec64e27b3901a474107e1a","ssdeep":"768:nSVNXrSzX2aTLxIc+rAaM26ddDuQ2XkAlXlEal1:em72ULxEcat6ruQUXJ","tlshash":"50f2d7c132a6f02643935295486f100bf27ded69980c1868f761e8f538f698992fff79","size":37464,"data":"","first_seen":"2026-08-25T19:57:11.526388Z","last_seen":"2026-08-25T19:58:16.109783Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"716119b6ab14b3a9a711ec6815246010","sha1":"cc430b8f04df8b8355a64669adb077930a8eb527","sha256":"fc907d421ad974adfd3da9e5edeaff3edca69ee7e9feea8cc26f000a55106abb","sha512":"241104aa1e2da68f5b869a1630f1d4fedd265008d27971cb7564931e2794769f64754587443391925c8903983c65c5046292e907e4f8c382e1f1fb28ed58e0c4","ssdeep":"","tlshash":"e3f0c0e73c888074c26603663733b6997422263e7c5fbc61cd4c1c451050f5e8897d8c","size":541,"data":"","first_seen":"2026-04-19T20:33:16.06105Z","last_seen":"2026-08-25T19:58:16.204028Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/414qdzszey3ex.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"973a8097df3fd9ceaa3084b75f583b07","sha1":"06a0bc3c7af8cc79f04997c8b43c7c1fa15d0564","sha256":"88cb0a33339033c6d1e75c07a7c8839fd9494fb3da5b9c12fe747d77d1114faf","sha512":"b3a6ce3e8f3759c6aa60a87ed5fe4284d54f117bb3e279a92daa73f4ab89d5ef1ebbee9e5bd07908c70d5f019a59db7452b24827afdd939757570c7bd754ad74","ssdeep":"192:nnSOGURTVMuCBv0FgHZcdu5d585I5h3GcjpNnINXNsUuNs0kNKjEuCqfT7HeJzwZ:nSlURTV3GHZzFlqS9SHuCqfFK7yA7Y","tlshash":"8582e9645215bd7ded723594891ec40d21be6e08f00acd1873fe1c272e6d8e8a71abe7","size":18941,"data":"","first_seen":"2026-08-25T19:57:11.79448Z","last_seen":"2026-08-25T19:58:16.122263Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2pdhj1kp68xb_.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"25d78e8107d9b84fc5d7a0b520dc5cbc","sha1":"884382be95d659a9623bb379775f6e8aff913229","sha256":"5ad860880c9a492fdae19c5c30352426c479de9a59b4a9a9490d7c8f1b907d8c","sha512":"026374f6e0fdab0656273dc56d1ce1ae3d26b2ec85b33a1616e3815e5eecb6fdd7a572fe6bece59828a2fd2e6c36a85cb9500190ee28abc38ac2a4485161b1ec","ssdeep":"768:nSAeYQagKHsvBvFlQ2qPYxsAWXq94xJLkP94j6cbEDBLvuOo:beYQaZM5dlQ2qP+wq94rLkP9y","tlshash":"1af2f6483be17c34828632e6603e0a177b722652585e264cf01ac9ed6f6c6c6717ef7d","size":36655,"data":"","first_seen":"2026-08-25T19:57:11.531188Z","last_seen":"2026-08-25T19:58:16.189537Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/3jms2da-1b-lf.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"208504b5e90ff28de73d22e819727f26","sha1":"7ead14deaec9fe92b0d5fce44475bbdaf4e72c65","sha256":"42c7e16bd635e49a8765b9c7dd1671275afe42db33709e57e1912e0b6b59bb7d","sha512":"54a829a3bb8e7dec7ff6a9c89a330cbd670d1240d90e57c57a456e98113e3f7c5e29af0ecc6161e96e6aa422e934ea14d31629678d3901b61fc3a8cfc70e8046","ssdeep":"","tlshash":"bb01c09861109455355d12ee813b490f38b61b3f03cda675f6398c702f78b4ae2562db","size":735,"data":"","first_seen":"2026-08-25T19:57:11.808715Z","last_seen":"2026-08-25T19:58:16.066106Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/0axp40hlltspq.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"092f430142be7ed96655fb715c37c0e7","sha1":"d6662dde85f8db6d6b71aa0cce792e2a4243df87","sha256":"9b5faa7b0b6c28f9c772f2a7755a722c542749395e4b6f3db8ea02c1c00fc1f5","sha512":"a0f05424762b01eaa0104ecc8037a836ce5b2bbab3278dc7a4cc7c1b0b89da05e5c7b991e7fb1135b03b84a8b512c196dbe02bae03abfb633bf63703180f7969","ssdeep":"768:nSIsUAwyMjOfCg/jl6fQBnX4iPf2NUVv71VP:yUAwytPEf0oiPf2NUJ1VP","tlshash":"17130a506216bafda7521442613ec409a0ae9b0cc80fc42c757e3c773daa5c5b697bfb","size":41525,"data":"","first_seen":"2026-08-25T19:57:11.696623Z","last_seen":"2026-08-25T19:58:16.10921Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/upgrade/bg.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.064Z","timestamp":1787687777064,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/bg.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28beaf688be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: TPkgjQ.sspXSfnOk6LRMeUz1AOMBhYkX\r\naccess-control-allow-origin: *\r\nage: 47717\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:41 GMT\r\nserver: cloudflare\r\nx-amz-id-2: VJySU+WbsILRYtaINaTk5bcWIXg8eciysxDNBwD2s65HiZvWwSi6BRXlZxQx/aTaSBzUGR5F3/JkefDlIbUE8vVpyRDFEIvb\r\nx-amz-request-id: ZQ9Z3NNB72KQAWDY\r\netag: W/\"5054c9da19955544c1d392a7ad32bfe8\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":907,"size_decoded":1120,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5054c9da19955544c1d392a7ad32bfe8","sha1":"d5e8bf07571535f6ee37c29bc21ef35cc385157c","sha256":"ebd63c17af0e9c05eae2efc608542c4845cdb9e07d1085469b507e3bc29c9583","sha512":"2b275b5481f300a58f31bb09b80b43dcac2b58440f54a205da96184bfbfebd15918d1f061b08ee7f448eb7008679d432c089b069163240aba3af9c2746a2add1","ssdeep":"","tlshash":"3f11d9309298e50cc3054e4aebe4add4131fb0cb8b51019de9c03226e22dd8bb8713de","first_seen":"2026-08-10T05:31:31.820553Z","last_seen":"2026-08-25T19:58:16.193551Z","times_seen":6,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLijZGwpR1T9veRfK1qJeLBMWuZxuZi_uVqFn3hzRsjt27Xz9z6dirEZgN0D5p4R-Jf4UPrl9XnMrzm7wCLjohbjXKpscqbOIY/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.763Z","timestamp":1787687778763,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLijZGwpR1T9veRfK1qJeLBMWuZxuZi_uVqFn3hzRsjt27Xz9z6dirEZgN0D5p4R-Jf4UPrl9XnMrzm7wCLjohbjXKpscqbOIY/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 31 Mar 2025 23:00:30 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 67167\r\nCache-Control: public, max-age=294422\r\nExpires: Sat, 29 Aug 2026 05:43:20 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67167,"size_decoded":68996,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"f30d7c5ee5abd16e64f8e5950c22134e","sha1":"5cadc390659b62e6370e4de8c8766dd334414c97","sha256":"adec9de3a96ef990e8b462299d4fb757e2b43f9864c68e17d6bb3a7bf09eccd9","sha512":"9fe51b0de6a5506e977ea678e2c7e8b23a3bfd988ee1c7f7e17a1c882b84c3522a7119b88d6e9a641c3311fd1b3bee64a46a28dc050fd56c12159d85b7a6931c","ssdeep":"1536:VQSAHSAS//5Ek+VS5ibK0UusskZpLZlYkSHP:DAHSAQEkDUGu+H1lYk0","tlshash":"2563f1148a34cb45c9dada34b7239ffbfe37b621299c8481c1b8590a5215cf9876ece4","first_seen":"2026-08-25T19:57:11.433882Z","last_seen":"2026-08-25T19:58:16.152802Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwiYbf7i1e0PC5V7BlJc-WAGOvwPlmj-xsSyCmmFNytzyEydapIy-Ub1AoDMEjFLEJu0LuwYfhMrnq4AGPiYJMyHqojy5K8G81tJciLzvH/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:21.209Z","timestamp":1787687781209,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwiYbf7i1e0PC5V7BlJc-WAGOvwPlmj-xsSyCmmFNytzyEydapIy-Ub1AoDMEjFLEJu0LuwYfhMrnq4AGPiYJMyHqojy5K8G81tJciLzvH/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 21 Jan 2026 22:55:31 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 7817\r\nCache-Control: public, max-age=537457\r\nExpires: Tue, 01 Sep 2026 01:13:58 GMT\r\nDate: Tue, 25 Aug 2026 19:56:21 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7817,"size_decoded":9645,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"31650943a4235b6c248ea38fda8e7ca8","sha1":"cad04888b7b9c2a08a2d2aa66d7911f0e803c2fb","sha256":"bc9829d76f0a74b6d436dcd4cdb502d2ee05c4b48878fdfb2e8d1fd102325cde","sha512":"a994a2ba77f7b9eb2b812a0694488b2598b84907e6d4888ec315a75c779f395475f215cc3d0c6fa031174a5226a98b2003f9467095f019d6b96c5183bf04c545","ssdeep":"192:/hfYva5m6jObVhfArLNLWpcA4jjumrTyHdTRxzukKMBBFdB:/hMkObLFcAiamYdTht","tlshash":"5df19fd8c0e4c444a2e1222a7b947840d87bd74cf2631b52ea65c5cc6e9bfe7271d54f","first_seen":"2026-08-25T19:57:11.437546Z","last_seen":"2026-08-25T19:57:11.437546Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/3b958db1c72e1665515a6629c5fd5a47-6a79b59e23447.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:39.330Z","timestamp":1787687799330,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/3b958db1c72e1665515a6629c5fd5a47-6a79b59e23447.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:39 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7628\r\ncf-ray: a30d2949debd8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4077\r\ncache-control: public, max-age=14400\r\netag: \"fc2f4a0d05ec0175232aa84597176ebd\"\r\nexpires: Tue, 25 Aug 2026 23:56:39 GMT\r\nlast-modified: Mon, 10 Aug 2026 11:27:27 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 0BRP27EXFbmNeUFD0MKM1wRndT0qa8NYGzLOQds04ukiNKDtTI+xalJdeVVLMhe30CvkIAjtPogLImFyVpYvO9mis0MSxTr5\r\nx-amz-request-id: T8X6KVPRGB1GC7N0\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Z5EtVDsQQJlgSn0p0fqpc5kVy6MX_KWg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7628,"size_decoded":8287,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"fc2f4a0d05ec0175232aa84597176ebd","sha1":"aa60fcfe7bdd46705794dadd23a435c8b8e71f77","sha256":"05e25704477a078b99bebd9346a5998202a0eac304c6971b55765aa28ed17a87","sha512":"1700836647e513acc046a92d34b8900acc43fa3e57cfe18752e857a136fcdceb4523ba56f86b2b6c8c90074f78f16aad0647542c867e0fb32ed71bb4556decbc","ssdeep":"192:vnlXAbK7NULzhp+iZiUc8mBT/0l5XlNe+KVXuu6t1Qt:/OG7NU5p+a08Gbsjx00HC","tlshash":"7df17e7cbec7e3d0f72212bd58b95d3d77c822a14293146581df1861182b7e114a747d","first_seen":"2026-08-25T19:57:11.441287Z","last_seen":"2026-08-25T19:57:11.441287Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/general/arrowDownIcon.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.869Z","timestamp":1787687776869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/arrowDownIcon.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/general/arrowDownIcon.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 73749\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd69228be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/footer/upgrade.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.910Z","timestamp":1787687776910,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/upgrade.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/footer/upgrade.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47714\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bdba878be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.003Z","timestamp":1787687777003,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/_next/static/chunks/34yv7fq1p68-m.css\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"63b0-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996501\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28be4d5b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25520,"size_decoded":27395,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25520, version 1.0","md5":"96e59d8ddd8db6744b7befc5a00b07f5","sha1":"8e1e04df23199a4ae26b41a82dd5e9bb6f8f17bd","sha256":"654a10e16314151c19a2adcfe65a18f4b8aa05bad373e578267cffb8f777965e","sha512":"134a7b084abf4fa71e3d6724ec01f3ad2d13299baa114f9c5786fe17e5e93e2ff49390ed17f3f82a6d7b6ffc21745658f6c0e29a37ab536c36d66d7a0038ef0f","ssdeep":"384:hBLfkY4jja1ObWBkh9lShbgW9A/vOv+Y7Ggj1K6bEPHv4myQLUWsqSgP3MUBQN:hBfa5HXOMWkk+Y7dj1fbjmJ1MYY","tlshash":"b2b2d17ce7fa20b590c5b61006dc3464e85f49ab1e685e4f80f541e7eb195326f9c039","first_seen":"2026-04-19T20:33:15.784832Z","last_seen":"2026-08-25T19:58:16.087341Z","times_seen":19,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qe6yGX3wYCPGLi3VUlttSuJeZzvZ_jr3s-idSj3BRLorRQoGeaZWozBNO8-ONhA_0tIM_DL2h0p6WBUnfspUfRq33n0DPaR4zXURJs9X6xTv0lY/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.785Z","timestamp":1787687778785,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qe6yGX3wYCPGLi3VUlttSuJeZzvZ_jr3s-idSj3BRLorRQoGeaZWozBNO8-ONhA_0tIM_DL2h0p6WBUnfspUfRq33n0DPaR4zXURJs9X6xTv0lY/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 20 Aug 2026 00:00:00 GMT\r\nContent-Length: 17359\r\nCache-Control: public, max-age=599908\r\nExpires: Tue, 01 Sep 2026 18:34:46 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17359,"size_decoded":19188,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"aafed64f859f73bbc9cc12019ebcb57e","sha1":"b7874ea59afe666f18ce570563ebc1e5985249d7","sha256":"1837e66ec42f237b9dfe941230ef700e644d4305b10124a24728ec88518fd999","sha512":"64eaa68e8005eaf8f1387dc9966810ffcdc861fd0d17ab2e7cc68500f920caa76ed7a16aa39e32f54551ef1e70485d7b28c6012ea4dcc5cedbd3f2d994f19518","ssdeep":"384:R6mwqd99gughInPals/P0g12LANjxNwPkDfQYh3PqPG8/FqICfgy:R6YgISE1XndTh3PoLCff","tlshash":"f672c099e115372bd2f9893b85c5aba4d1c3617d52323daf584907352c312ef1b8dc1e","first_seen":"2026-08-10T05:31:31.765688Z","last_seen":"2026-08-25T19:58:16.068149Z","times_seen":6,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLlm5W5wiVI0Oara_1SJPWQB2qR1eFkj-1gSCGn20h16j-Ew9j6Jy6QbQB1XJJzQLVYshXqm92xY-7g4wze3dpAySz2iXlXrnE8_HmWmcE/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:26.600Z","timestamp":1787687786600,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLlm5W5wiVI0Oara_1SJPWQB2qR1eFkj-1gSCGn20h16j-Ew9j6Jy6QbQB1XJJzQLVYshXqm92xY-7g4wze3dpAySz2iXlXrnE8_HmWmcE/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:32 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8203\r\nCache-Control: public, max-age=356313\r\nExpires: Sat, 29 Aug 2026 22:54:59 GMT\r\nDate: Tue, 25 Aug 2026 19:56:26 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8203,"size_decoded":10031,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"563d66ad81c87965e44a1c3d11a085ad","sha1":"332b0e355457584128a802365574e84004310182","sha256":"9e5e8a93aa961afe54b1cdbbde8a9f1c72e82f5fce946545650ac2fcfa739dfb","sha512":"58ca51a3d0eb5f626c148f9992052f4ece04ba70b6b272a4f7a37d2b0bb60c95ab67c62b78276fabd33dcda88365159f28cc6e02c1aa667dd997a7d58570542c","ssdeep":"192:Ki7jJPS2/ZZwwrxsEEzTYgvZ37A7G3n37+183xMfFcagICTrkM3:/7jJKscEEzkgvx7R7+GefWPrkM3","tlshash":"c402aecea2257ed1980600a897465c8703bce1e017accac84fd36b0e8b27a3c5add1f1","first_seen":"2026-08-25T19:57:11.449592Z","last_seen":"2026-08-25T19:57:11.449592Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjM-yOXCW8Vli_YTxuAm2FFLykYPu6SdJ4_2pYacjcKOQW2TJkr8i5Lc_Tirlx0Vz4T6Ey9f_c3KVZlR1D5QmEeAMtBS_xsqnab1yKs5j8w/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:28.822Z","timestamp":1787687788822,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjM-yOXCW8Vli_YTxuAm2FFLykYPu6SdJ4_2pYacjcKOQW2TJkr8i5Lc_Tirlx0Vz4T6Ey9f_c3KVZlR1D5QmEeAMtBS_xsqnab1yKs5j8w/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:13:55 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 10195\r\nCache-Control: public, max-age=530639\r\nExpires: Mon, 31 Aug 2026 23:20:27 GMT\r\nDate: Tue, 25 Aug 2026 19:56:28 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10195,"size_decoded":12024,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"66cd9577e5213b27bdc660abbf1010ea","sha1":"11b25d89e06c18e43d0abe9af34a7bcb218b6dd1","sha256":"4dfe730e0a12c575da6085771f0d223d8a13b1544eab7e46722f10a277013888","sha512":"d9ed300628688050e7c5151cef269d1c729fff3148723838214855f5eb836ff6b93b9b2a22fbc7ccdf681aee2b0e4fa52cef13dc2dd657edcb63d67689842d5e","ssdeep":"192:Eu56q4qewXeb7UHWGoZKNzn7XaD5CF0lPvGmlTJ5bl7Ncnj:EuIsGUH8yD7XaEF00MDJNG","tlshash":"0b229e90e66c49b14d8c401f23f72ee9141993bf25f74d8653f330a55beca8b79c21a4","first_seen":"2026-08-25T19:57:11.452432Z","last_seen":"2026-08-25T19:57:11.452432Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/1sx53lx3cj4n6.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.813Z","timestamp":1787687776813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/1sx53lx3cj4n6.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"6e79-19ffb9f4150\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 998130\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd1f1b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28281,"size_decoded":10806,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27946)","md5":"ff6a92f6d35aa66f24c80f59b2d3bc67","sha1":"8202cadcf1780787294ca07dec31ad3fc16e34c2","sha256":"aff85c14441248f407d94aa36b84dfbbe13906e1e2bb05b69677086842675ecd","sha512":"e9027d93b323030cf7995520420b4327fc35b75063c858cc838ee2831e9dad4956761c4cacaf62eb39eedd4edff412a7e784f287964ede9cf0674a80f58e7cbb","ssdeep":"384:nS+cFiGkm2JKwvKV4MjBPxGl9ikyEWa5mopZUNQOX3v3smkp0+:nShFSvmV4MjaLi1ErXpKNlX/cmkX","tlshash":"09c2e6b936d5f8a107a345a4803f5007f2391d7a349da4e4a3b2cde979b494dd033faa","first_seen":"2026-08-25T19:57:11.454759Z","last_seen":"2026-08-25T19:58:16.12129Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/favicon-16x16.png?v2=","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.921Z","timestamp":1787687777921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/favicon-16x16.png?v2= HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 885\r\ncf-ray: a30d28c409d18be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 20221\r\ncache-control: public, max-age=86400\r\netag: \"12117bd45120ae1970d54e57dba9650b\"\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: jmlrOXexUOBXTpcFGZhZq7WMUlZn2JYW3RRTaJQdb2TMxZL0Ta6ZWx+k2ykUn5JI8UBSx137UK2OGIM4VflTw80Ix0Zgjn/5\r\nx-amz-request-id: 60TQD2PK8X3T9YG0\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Fw_QTiIWqjZbvpQmFOkGILKJOqDwAdYV\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":885,"size_decoded":1543,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"12117bd45120ae1970d54e57dba9650b","sha1":"a223acadce82774e7afb2d8e257312c08e50bb54","sha256":"12ac7dba7cdb6000a22e194a89d5d338178462113caf02519223185f9d5b1d18","sha512":"0e84c88469911e5f8a2efd8fa033a8e157f03565b5e26655e35e0b24a4aa24d1b98978ebe6531f2691108f2a2a992616f691a78883ba2a234be0f4205ab0e873","ssdeep":"","tlshash":"4e1163c712be1e11dadb00b63a3de36045b2ca5c1508b83a860920eadc429c5efea670","first_seen":"2026-06-25T10:28:05.251051Z","last_seen":"2026-08-25T19:58:16.061182Z","times_seen":7,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLijZGwpR1I4M2jZ7d-H_2WCm6FzKAutOM6F3y2zU9yt2vUw9ivcS-SaAImXMR3ROQD50G-k4G1ML7m4QKKlcsbmiIZgEQm/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.769Z","timestamp":1787687778769,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLijZGwpR1I4M2jZ7d-H_2WCm6FzKAutOM6F3y2zU9yt2vUw9ivcS-SaAImXMR3ROQD50G-k4G1ML7m4QKKlcsbmiIZgEQm/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:29 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 62494\r\nCache-Control: public, max-age=350138\r\nExpires: Sat, 29 Aug 2026 21:11:56 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":62494,"size_decoded":64323,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"e961f3576bf0c899fcddeeb5e6dc6842","sha1":"abcca104c2aab7bc77f9c9ec7b138030c0e9a7d8","sha256":"c970e48682d3a90103081d5974aad20f04b65ce44c082451f65048e4ce184972","sha512":"e4f20b8fe1f148af4228a4fbe912feeb46761ae102580407f60566b0da1f538a580069dcd18769a62667ef0123be0097bf759ff732f5f3d9f12cd4acd0c70921","ssdeep":"1536:m1KU0WlNQdRPwtxPx6VA86Uo5Y9SQv1jJnoZvSEZ86:MJ09dRPwtxwBJ2ZvSEK6","tlshash":"ee53f285b107c15cee8f42ba5b8960899fb8c8b6f826548f5dbb330b4853239d43957f","first_seen":"2026-08-25T19:57:11.45833Z","last_seen":"2026-08-25T19:58:16.16514Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/b73a8752c80c7285405ecab71c483905-6a6a63d300a08.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.516Z","timestamp":1787687779516,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/b73a8752c80c7285405ecab71c483905-6a6a63d300a08.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12776\r\ncf-ray: a30d28cdfc7f8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 346\r\ncache-control: public, max-age=14400\r\netag: \"456d42df72d8f9550be7f072e3936e81\"\r\nexpires: Tue, 25 Aug 2026 23:56:19 GMT\r\nlast-modified: Wed, 29 Jul 2026 20:34:28 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 4hlKsVE/OGIpGQSibJTQGZFIZONjsrW7KWhprnfpLLxE+/+h89P+T/OX+91W1zjIcG7WfOd4/3o=\r\nx-amz-request-id: B9WQZ4WJFYV23AFG\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TJVV.EBinGAs57NzBajDsTHsG8CzeSpN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12776,"size_decoded":13415,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"456d42df72d8f9550be7f072e3936e81","sha1":"8f80d8f188e7c9732a6b411dea6047963ff09881","sha256":"eaf47c1da62af2c88ad67847dafef6b481cd3494960607fdd1d8506e005ebd7b","sha512":"8c9998921e01c095743f2187a608f930623049bf570b771e7c1abfc85e32efbcb9aa3b9faf51cc21a043e9b34a3b692a602f17fc4fc4822bd7c7a851109f355b","ssdeep":"192:7MT1JFGpChC05Is/JFG1Bw1wPyC3fdcuyDtTVhlP2IdfsvM+gyzekSNNt:741mpCA05I0GvLf29tTVhVRsk+gyep","tlshash":"0242cf66c72162f3b3d1e62901f1bd86a1ce4ec74e20855f0bdd1c46a7dba45b31a07b","first_seen":"2026-08-25T19:57:11.460925Z","last_seen":"2026-08-25T19:57:11.460925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2n5rp8SNJ0PG7V6NsLPmfD3Wv0e9kpOhqQyygqhEutDWR1Nf8eXzDP1InCMR3QucIshjrktexMOqz4QPcjo1Gz3qq2H9L5ylu4ugcEf1yh3Lp9zc/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:35.728Z","timestamp":1787687795728,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2n5rp8SNJ0PG7V6NsLPmfD3Wv0e9kpOhqQyygqhEutDWR1Nf8eXzDP1InCMR3QucIshjrktexMOqz4QPcjo1Gz3qq2H9L5ylu4ugcEf1yh3Lp9zc/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:55 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8773\r\nCache-Control: public, max-age=157690\r\nExpires: Thu, 27 Aug 2026 15:44:45 GMT\r\nDate: Tue, 25 Aug 2026 19:56:35 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8773,"size_decoded":10601,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"9843734b6c6df5bd2c31198949af4bac","sha1":"93bd280d686c7314e1ec0b15d2c1e1530379fc62","sha256":"2c21e911bfee3c4aeff003e5e6b828bdd8df80de0187390c57c91b0952add307","sha512":"c58c4e699464d571bd36cb56ad035de3e8a2cc178aea19005eea95e327cbdc8e22dad9d188711e09efa15059db7c0fcad1c5b0f43d16148d535d2c0abc015b3f","ssdeep":"192:6ZdqN9ZmGyaec9bd8ulhurr2u3khBU7E3PBEdlQ4sO1sOIjFF1p:Lmrc9bd8u6+u3kh6c5E91slTb","tlshash":"cd02bee3cb40c5cb2523643ea3dabb19faaba4554b2444b0673efc63a400e1847f5670","first_seen":"2026-06-26T17:47:08.12403Z","last_seen":"2026-08-25T19:57:49.79291Z","times_seen":11,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/05vddmi8wt-hg.css","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.806Z","timestamp":1787687776806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/05vddmi8wt-hg.css HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"36246-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd0ee58be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221766,"size_decoded":40460,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"35d22aca3b096ade884ecd7d6cff5117","sha1":"5d0d9c7e08a87a377627071a2470b6729febdcec","sha256":"b5004f479c17b27b621b049620f4bfd19807a0f33388ff774d2cd7cd42bc7efa","sha512":"68ecb25d74985356ff128f17d2f17127c40b2b2e18c1d54d3f52058fc17a3e527ca6d1f89e1d70dad324b3f3d8e45f93fc356d3897958d54f2375a79ec50e5ad","ssdeep":"6144:koPDDmBIDezNNNOUvp3sy4sr+PZIcBhCPQLNJNLhI1vXWylK+UcxSi1vmhs6oghD:RUyvKtrjK","tlshash":"0d24a56a6612803bbc2390f552b4fecd791ab091df2553faed5369216fc33f50caa640","first_seen":"2026-08-25T19:57:11.464464Z","last_seen":"2026-08-25T19:58:16.107243Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/3n22tcw-calrp.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.827Z","timestamp":1787687776827,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/3n22tcw-calrp.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"cfd3-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd2f8e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53203,"size_decoded":20817,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (52868)","md5":"1ccd3eae5e7ba68d41d4088e0a6a4778","sha1":"3446c2638d4c109feef871f98d79701621b3a4da","sha256":"72b4cad2006e92584ac7cf09c28a3d27dc811b4c5acf501152377760bc6cab25","sha512":"e8f8d030a4452c561a0bf827e052856a03152a15cbedfe3c3642bb405901d3b4983c20f4539fb4689a9a0992f664a5b474a0e0ba3267d0b4f4b4270f98c93991","ssdeep":"1536:7vTtRH05lGJdJUxBeEU4fvz5D2+u2M5NiX9TsjFZ/:7rtRHdWeEUoZ2EXSjFR","tlshash":"e8331baa7353722227e68085d82e0111e239591a540e442cbae9ecfb3557dcef2f7f35","first_seen":"2026-08-25T19:57:11.466889Z","last_seen":"2026-08-25T19:58:16.142255Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/currencies/rates.json","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.186Z","timestamp":1787687778186,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/currencies/rates.json HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/json\r\ncf-ray: a30d28c5a93e8be6-OSL\r\ncf-cache-status: DYNAMIC\r\nx-amz-version-id: kZqgKNhsXhy7q6kzkibawCEcGzq2CNSr\r\naccess-control-allow-origin: *\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Tue, 25 Aug 2026 17:25:02 GMT\r\nserver: cloudflare\r\nx-amz-id-2: M1OO0Bp4nMkGdnlavzWnaNsDWhICAbsBDsZOhjTNOFQ5rPJ25+GS9sD41dhoOpwL9wwtaWDRBiM6Q/qvSYVEQV8ST+Jp3skE\r\nx-amz-request-id: VP0F7FW2D6B69J0Q\r\netag: W/\"7e6c9140d545ac08ea3ce9a208038291\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":239,"size_decoded":736,"mime_type":"application/json","magic":"JSON text data","md5":"7e6c9140d545ac08ea3ce9a208038291","sha1":"4b4429a9b3ce2d6af20f1752bc162e1ee599fba5","sha256":"5fc67bcc43a859ebce6ee321f24d831988ded159451cd40f65b938d9e45a6b8f","sha512":"6653b44d135215e14382ae57f438d08931450020ca11134a81d2ba7fa1f57714ae2060a37376f63d0c9f1d2affa1592a6f325dd24d656a44dd065ae323f47bd4","ssdeep":"","tlshash":"c1d0a791abcf1ce520c94c6416e36ef4451f028201c19b49605f188472855fb75e8644","first_seen":"2026-08-25T19:57:11.469302Z","last_seen":"2026-08-25T19:58:16.180091Z","times_seen":2,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/a3c4b01e0a81123bc0c7fc824c2a2cfe-69fc3a90dc25e.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:25.282Z","timestamp":1787687785282,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/a3c4b01e0a81123bc0c7fc824c2a2cfe-69fc3a90dc25e.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6787\r\ncf-ray: a30d28f20b638be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4978\r\ncache-control: public, max-age=14400\r\netag: \"c8edaabf7242d29b2e493137e0663ceb\"\r\nexpires: Tue, 25 Aug 2026 23:56:25 GMT\r\nlast-modified: Thu, 07 May 2026 07:09:06 GMT\r\nserver: cloudflare\r\nx-amz-id-2: CG3v48Vdoj60CngQTDeJgrGBNtFe6nleVOYRI2lOwK4LYBTq3F8FC9s1S08czWRZyhsoNiSy2pBwpwu92Af+o1iPHk0BDV3w\r\nx-amz-request-id: GKGPHQN1541H7C2P\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6787,"size_decoded":7418,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"c8edaabf7242d29b2e493137e0663ceb","sha1":"6a8292797d8e4c1451fda2b3fa15ac0a50375487","sha256":"eb22da9fa52c746a27a9cc40bb43c0aa0f694a4284c27a6d43db24a2041c6720","sha512":"9726048630874d21e239c27d9dc7e253ddb69dfa0e8896eebb3abd8c1f2b09f11bd9d97e851d3350cb066399b5bcb2754a916a0a2b01fc2d71feb311295d5708","ssdeep":"96:iAultY5qg4LUrWtNzb9UBByR5PhNRD9KPirCXUO940LuikQPVa+o0po+PmdQ94jm:VAtYQdlNzZ1RTxE79FuS9xMQs271Tj","tlshash":"f7e18da82a5175fbfd1c5972f5138c6067d88784e32164edb0eb4c0183a7ef99c1c786","first_seen":"2026-08-25T19:57:11.47161Z","last_seen":"2026-08-25T19:57:11.47161Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/19m7dku3xpnu1.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.831Z","timestamp":1787687776831,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/19m7dku3xpnu1.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"38b1c-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd3fc08be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":232220,"size_decoded":61118,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65228)","md5":"f7799908773f1277aef54e74678525f2","sha1":"be34c92382a35c08c38663ba5978febd8e55cada","sha256":"f60dd0a607334d669393a56e4f5a1c39f4efec966d9be7bec6111110aeb8df29","sha512":"0801070baee9e63fb95306fbda3c989f9e6e652097ad1c54fba3f5df408cd1725a7bed6730d18ad8f9d3f2b4c8ad1e477b0f15bc7bb1c6050efded31e37363ed","ssdeep":"3072:3rQ9sGqWu/bgpev4DcH/a4uo0M9J3cxSiRxqCYdoYvOqqtq0NQ/wxt1OGaeQqp/4:k2H3GYacx","tlshash":"be34c81061167beca6233996252ed40d60deaf4cce0fcc64b27e7c212da91d476d3bda","first_seen":"2026-08-25T19:57:11.47375Z","last_seen":"2026-08-25T19:58:16.137021Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/liveDrop/hotGray.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.072Z","timestamp":1787687777072,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/liveDrop/hotGray.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28bebfbe8be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: bzw05HEGY8w3mWLVca.okvVX2usjY6OZ\r\naccess-control-allow-origin: *\r\nage: 73795\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:40 GMT\r\nserver: cloudflare\r\nx-amz-id-2: D2Hh/s2o8oexqCWJbLdNlRmRR3LN21VVTBPHeVK+COPKu18C9TW6Spur4HHv7U202myBUl0Bh6xukosxFWrU6FmfjfxQ/NDy\r\nx-amz-request-id: ZQ9HHVA5MDAAH137\r\netag: W/\"5f29f856b25e10bc93d704b926dad951\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":374,"size_decoded":907,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f29f856b25e10bc93d704b926dad951","sha1":"d6d6e600dd74b29ad5a13a860a60c6c838863e3e","sha256":"86d0fbbe18a50718f84e325549be3a5636bdeace3844bbb5ce67a574b203589b","sha512":"a3be502d3a116b1ed125a23b288ba69a1be010493f3a90025ae338698d50469b1303a955600739df5ba08b05306a78c11f88a953c038e323ddd4fa8579be8d26","ssdeep":"","tlshash":"2be0683cc306a478df77cf5cdb28b110490fb2e99298429ea168d02061c64c3640e44c","first_seen":"2026-08-10T05:31:31.690491Z","last_seen":"2026-08-25T19:58:16.166593Z","times_seen":6,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.206Z","timestamp":1787687777206,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"63b0-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996501\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bf8baa8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25520,"size_decoded":27395,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25520, version 1.0","md5":"96e59d8ddd8db6744b7befc5a00b07f5","sha1":"8e1e04df23199a4ae26b41a82dd5e9bb6f8f17bd","sha256":"654a10e16314151c19a2adcfe65a18f4b8aa05bad373e578267cffb8f777965e","sha512":"134a7b084abf4fa71e3d6724ec01f3ad2d13299baa114f9c5786fe17e5e93e2ff49390ed17f3f82a6d7b6ffc21745658f6c0e29a37ab536c36d66d7a0038ef0f","ssdeep":"384:hBLfkY4jja1ObWBkh9lShbgW9A/vOv+Y7Ggj1K6bEPHv4myQLUWsqSgP3MUBQN:hBfa5HXOMWkk+Y7dj1fbjmJ1MYY","tlshash":"b2b2d17ce7fa20b590c5b61006dc3464e85f49ab1e685e4f80f541e7eb195326f9c039","first_seen":"2026-04-19T20:33:15.784832Z","last_seen":"2026-08-25T19:58:16.087341Z","times_seen":19,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/c5bac936d7dd244bd6f38d4411b64e53-6a739a5990d97.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.431Z","timestamp":1787687778431,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/c5bac936d7dd244bd6f38d4411b64e53-6a739a5990d97.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10264\r\ncf-ray: a30d28c738538be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4021\r\ncache-control: public, max-age=14400\r\netag: \"0db40d510f66a15515784f225f10e45f\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Wed, 05 Aug 2026 20:17:30 GMT\r\nserver: cloudflare\r\nx-amz-id-2: /OWkOY2zxAo/Viya97qaKkTfzCj5hCm1bplxyK7r+OZGPj6GTTZRqAAhjpw4VdWAGoq4FYKxtz4=\r\nx-amz-request-id: 0JKX7M4SN0KEY2WK\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: shik1il0cJCKu41K_gWznCqg0oo7Zjxk\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10264,"size_decoded":10904,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"0db40d510f66a15515784f225f10e45f","sha1":"86b21d46a8e39fcb3c53c955ab3bb9e4aacbbd94","sha256":"bdc5fdc7d6dc96f2a2d9be71f1d73770dcdd97a7b5d5a5c3bcdcd0a059e654d3","sha512":"8232bd1a1e63db3674e3f564c2bdf2e3d18ac51ebc60951ea6a10a107065decd9597068db58853d3def341e3e44b65e230c935ba61361b559f46e01b63a835b2","ssdeep":"192:ENRDXeFuWXOpZKp5YX1A2wfSh11Yy2P+o46+V6El2z0dlOROs1:6oFuW+pQpSX1ABShT5Y+h6+7MCUAs1","tlshash":"6222bf56a56bb3c4fc229cfa42e87d40b4ccbd247e4e267fdbc6436251db502ea82704","first_seen":"2026-08-25T19:57:11.480243Z","last_seen":"2026-08-25T19:57:11.480243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLlm5W5wjFU4M2-aa1jNM-AHmuR1f1JqeRlQyakqhEutDWR1NagcXnGOA8iXptyQO9Y5Bjpw4DlNrvntQOIiY4UyHmvh3hK7iw56rwcEf1yY9HMcYg/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.767Z","timestamp":1787687778767,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLlm5W5wjFU4M2-aa1jNM-AHmuR1f1JqeRlQyakqhEutDWR1NagcXnGOA8iXptyQO9Y5Bjpw4DlNrvntQOIiY4UyHmvh3hK7iw56rwcEf1yY9HMcYg/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 31 Mar 2025 23:00:31 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 57662\r\nCache-Control: public, max-age=411358\r\nExpires: Sun, 30 Aug 2026 14:12:16 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":57662,"size_decoded":59491,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"ae57014e88388d59da72eb46ab5f7b4f","sha1":"c97bd878fda42cf976a88651801f74a698844f44","sha256":"a918cf1917129ac422d315c2f009bb157d4c90e1a57579842019b8880f7b42f0","sha512":"e8755979429a7161d68e5aab711aa93db9dbdd64e27f167b64c03d329bb5e2ce3d9b0de1b312418e87a7e1b4c93b54811c396840087063c36497ec29a18e975e","ssdeep":"768:QB7hKT6yjq90eE1gTFBzbRuj5Y+2NeuGu2s2iYPSpg1S9A/1OKhhaZa4zKfAzLWL:+77jducNeuGu2s3LsS9AMY0a4z8D95","tlshash":"4d430254e30778a114c61bdcc33d44e4ae86985ea4fcba96dc27257ee0c3e85989ca4b","first_seen":"2026-08-25T19:57:11.482866Z","last_seen":"2026-08-25T19:58:16.159565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qeOZI2f_bSXNKW-JSQ8_TrYKZjzd_zeh4e7BEz3BF7wlRgpXePBXoGEdNJ-JP0Y_0tIM5XW2kAJ-ERonYMhTfBuy2ngKbOl0nyBGJKXe7q2O/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.776Z","timestamp":1787687778776,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qeOZI2f_bSXNKW-JSQ8_TrYKZjzd_zeh4e7BEz3BF7wlRgpXePBXoGEdNJ-JP0Y_0tIM5XW2kAJ-ERonYMhTfBuy2ngKbOl0nyBGJKXe7q2O/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 20 Aug 2026 00:00:00 GMT\r\nContent-Length: 12983\r\nCache-Control: public, max-age=522451\r\nExpires: Mon, 31 Aug 2026 21:03:49 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12983,"size_decoded":14812,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"31b79728929231cebbf9e0d01bc1a228","sha1":"fdd7e1408508c380a2a9e07978b5583b7491a37b","sha256":"1bb22e14b460266988b36747604a9508016f1001e5b4d2d7ca8728c59b6ecfb7","sha512":"57bfaaa97cb06efb44a5da937962eee3b6dacd41e7f4473a32f18d9ca45df8f11a23183517ccbcef73f583d1ba5fd8c51a546780165907293ef6da6048f7bbdd","ssdeep":"384:JK2Ao+hAz10lWJ2EMszax3pbXaxY+253a0OLRy:HAo+hAz10lE2EMlx5bXgm3F4y","tlshash":"9e42bf494ae7d8245e2f613a1d8265277cf1d790d30dfd26cc79caacfa0244b0ad5ae3","first_seen":"2026-08-25T19:57:11.485549Z","last_seen":"2026-08-25T19:58:16.184444Z","times_seen":2,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/sounds/Upgrade_Wheel_Roll_Slow.m4a","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.892Z","timestamp":1787687778892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"OPTIONS /cdn/fa/sounds/Upgrade_Wheel_Roll_Slow.m4a HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: baggage,sentry-trace\r\nReferer: https://caser.one/\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: baggage,sentry-trace\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-ray: a30d28ca1f9b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":306,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/b616fcf17dc6de0b2243e908260bf151-6a77495d78296.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:22.568Z","timestamp":1787687782568,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/b616fcf17dc6de0b2243e908260bf151-6a77495d78296.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10432\r\ncf-ray: a30d28e10a7b8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 760\r\ncache-control: public, max-age=14400\r\netag: \"4326e745fd2226f76a624d110c8f3745\"\r\nexpires: Tue, 25 Aug 2026 23:56:22 GMT\r\nlast-modified: Sat, 08 Aug 2026 15:21:02 GMT\r\nserver: cloudflare\r\nx-amz-id-2: CV5fO0u1BHKz9bFGA5WHj80PaibTG3ebTGNGAboPyLhwOln8FhMuMlpCj5VEFc6xqdQiqxvxcjfGzvwTbgjbXKfYtccfb5ur\r\nx-amz-request-id: A28VAR1ZYDYZ4TVM\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 15ARE8D6bYtfnF8b8A2Z5DMUZh6ayZY5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10432,"size_decoded":11091,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"4326e745fd2226f76a624d110c8f3745","sha1":"6fae5121b4a92962ff84c380ebc76b5ee7bd9aac","sha256":"cca1d220015b52dc09b092fae989ac4649bd5e06c4e8a752e28a5665caed0908","sha512":"fe5075b80c8c42f340c08871ec9d9396c6fd6e4a9c3fd7b8e99520c557c551b6b66487207e2a1b6ef71087204396cc963f1433887cf388d281b9337017192310","ssdeep":"192:ji08VEdGX2SdSaGI75xcdkYtPqSWIbO1IHBW/oBum9ybg3RQQjJWvbP:ji08V6GmqoIbodLWIi4pzyP","tlshash":"1422c064dda35ef8f8cc14a1d2a76f5984db03039ef04a4adce3746058ed528a145885","first_seen":"2026-08-25T19:57:11.488102Z","last_seen":"2026-08-25T19:57:11.488102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/general/steamIconGreen.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.070Z","timestamp":1787687777070,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/steamIconGreen.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28bebfa38be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: cuHOhf9gLVyLYe_5EMzfIDA3W7G3PJDL\r\naccess-control-allow-origin: *\r\nage: 3836\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:40 GMT\r\nserver: cloudflare\r\nx-amz-id-2: Wj2jVG4a9QGq++qm/cry/RKn4Z1pKEHFkbQJKWzeZ6RHJXst9k+rLBq9dk+Qfu8zG0OH1ymUqro5RmpWIzS4aA6/PN7Fzn58\r\nx-amz-request-id: SG2WWRM635W46ZDE\r\netag: W/\"3fe37764f2b74513ce63f54cd3624c5c\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":817,"size_decoded":1098,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3fe37764f2b74513ce63f54cd3624c5c","sha1":"18bc084ff4eeb69b8e2aa6dbdb98d9252760f27c","sha256":"39391039d931b6b3fa4a728e9585d1d8dce227f37e4d0aa952cdf5f67080f665","sha512":"1e76a555bf74ab3d270b99043956c9c9eaab3bd5b0e1223848ae2cc50faa82e0b331e8bd0bcf0af71878da3a74282a94b841f736a511831c74d608ecafe032f9","ssdeep":"","tlshash":"9a0148dac709b65c1c83c894de2b72a1034f68e57a9503e994fad630f49b7c1e503e28","first_seen":"2026-08-10T05:31:31.99673Z","last_seen":"2026-08-25T19:58:16.137522Z","times_seen":6,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLlm5W5wipC0PaqeKV5H-WBDFidxOp_pewnHXC3k0R04j-Hn4r7J3OXawJ0D5R0ROALtEPtkobuPuuw5QPbiNoUzTK-0H0DQMivcQ/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.770Z","timestamp":1787687778770,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLlm5W5wipC0PaqeKV5H-WBDFidxOp_pewnHXC3k0R04j-Hn4r7J3OXawJ0D5R0ROALtEPtkobuPuuw5QPbiNoUzTK-0H0DQMivcQ/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:33 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 58534\r\nCache-Control: public, max-age=34274\r\nExpires: Wed, 26 Aug 2026 05:27:32 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58534,"size_decoded":60362,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"7961a5ca0b199069dcdaefc0cbb26ed4","sha1":"c3857fb9ca13badd7019d36f3a80912c037fdc83","sha256":"0af4a0ea7ccb9794376e9b4e8c2d4ff68f05c78971f9bfefac568132b8bf13da","sha512":"aceb1b0801e0c856e6da4ff1d21da8b13c99b72d90ace9cc927c9a8674af39f77daca0160689f25af3ec3a9d88511c9f26720ee7facd5b447d859fc67fad885e","ssdeep":"1536:bsYh8943Vo497BKpr27V3KNGk7TjaYG1beVRCfDF5uzF:bjh8Il7spr/Nz/wb6cfhMF","tlshash":"a043f16dd382a15740af2d809ddc244bdf9f21f56e93e634ec47762fae04390032268e","first_seen":"2026-08-25T19:57:11.492898Z","last_seen":"2026-08-25T19:58:16.106501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/sounds/Upgrade_Win.m4a","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.861Z","timestamp":1787687778861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"OPTIONS /cdn/fa/sounds/Upgrade_Win.m4a HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: baggage,sentry-trace\r\nReferer: https://caser.one/\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: baggage,sentry-trace\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-ray: a30d28c9ee978be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":306,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2kpnj9h1Y-s2pZKtuK8-WF2KTzuBiseJ9cCS2kRQyvnOEwtb6dHyUOAEhWJdxTbELsxi4mtHuN-jr7wXfi44Xni2vjSsd7ydo_a9cBrvZd2pE/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:29.560Z","timestamp":1787687789560,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2kpnj9h1Y-s2pZKtuK8-WF2KTzuBiseJ9cCS2kRQyvnOEwtb6dHyUOAEhWJdxTbELsxi4mtHuN-jr7wXfi44Xni2vjSsd7ydo_a9cBrvZd2pE/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:59 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8719\r\nCache-Control: public, max-age=421997\r\nExpires: Sun, 30 Aug 2026 17:09:46 GMT\r\nDate: Tue, 25 Aug 2026 19:56:29 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8719,"size_decoded":10547,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"f691fcd184674e6764ec87735be9a97e","sha1":"d98f96c194ddc981b1704c7de2adcbf83bd5bc7c","sha256":"72a46bb42281bbf5d8560cb47ff71f1efc6d9466a5510a5ad90e48b777574731","sha512":"f150539ce5e369abfdebdff2b8eac8adb7221b09f504e4bdd6a65afeb5be6b3170efb8a33456cc1862bfb4765269de3220b6b8af1fb8057fe2deffeb2490aae2","ssdeep":"192:kwjXB/nGdHfSSLe/wQBThDuzY4ZCFoQJu3aAl4pENTypYoeG:vhnMHKSg39NZJTpk+SoeG","tlshash":"a502af9f65c3b268a731b4c36744b63a43ee84171e225555e02d042f679c7f8b7c9632","first_seen":"2026-08-25T19:57:11.495407Z","last_seen":"2026-08-25T19:57:11.495407Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/47ecf7fca98f187993466460e8665269-6a78c8d9160f0.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:40.289Z","timestamp":1787687800289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/47ecf7fca98f187993466460e8665269-6a78c8d9160f0.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:40 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12578\r\ncf-ray: a30d294fcbed8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4295\r\ncache-control: public, max-age=14400\r\netag: \"deff252b125b9592f11dee879279e2fc\"\r\nexpires: Tue, 25 Aug 2026 23:56:40 GMT\r\nlast-modified: Sun, 09 Aug 2026 18:37:16 GMT\r\nserver: cloudflare\r\nx-amz-id-2: +Kpc/In+pz0qTmTSJxaSBVX1Zheb2nLjXKFCNxHy/mQE97531xQk1EQYDC4xSCVNkDwo67h0aVzhKwLgbp2TAEWufLOTdbMA\r\nx-amz-request-id: 5YSKTCZ3HKWPFWXW\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: o33vIUhrzDfsrJ7SUeA3yHoXK8pzEgSC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12578,"size_decoded":13238,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"deff252b125b9592f11dee879279e2fc","sha1":"a914b7f8cebea020ba97ba64fcb2754ae1cbeeaf","sha256":"0c1c0a7f4e395648f265ebdefe3c0bddcc1eefc2b0d4d79755f0845f49c513cd","sha512":"061cc8fc6be472884ac30618bc982b7f20d6c8aba53459871279488e726551c961ea8bf2d6791dc3aee3eaceb5b1eca51413acad3bdc013092853878694d6252","ssdeep":"192:ver8JpGM1PcpV2DvH7pf7aEdXktmn6xerfh5tdl/+HIwbD4P63By5R/D5F5rR8:vi8nDcz8vH7pf7jdXkwGerf9b/cmh0","tlshash":"7542ae1543c2eccaf33d66aae0121e7d0ee9d93290744e12ecc5e9fe38e77d26586444","first_seen":"2026-08-25T19:57:11.497812Z","last_seen":"2026-08-25T19:57:11.497812Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"image.crisp.chat/avatar/website/2d15ccf1-b65e-4052-b193-11ad4713e685/120/?1","fqdn":"image.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.28.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.483Z","timestamp":1787687779483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 11:05:15 GMT","end":"Wed, 14 Oct 2026 12:05:11 GMT"},"fingerprint":{"sha1":"D0:67:9D:CA:AC:98:37:F3:9A:A3:64:D4:A6:6C:90:37:A0:14:A3:60","sha256":"27:4C:88:E2:45:90:6B:BE:6C:FE:A9:F9:5B:AD:8D:7B:C1:37:71:4C:85:22:D8:16:9D:21:47:8D:16:2C:C9:DD"}}},"request":{"raw":"GET /avatar/website/2d15ccf1-b65e-4052-b193-11ad4713e685/120/?1 HTTP/1.1\r\nHost: image.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2046\r\naccept-ranges: bytes\r\ncache-control: public, max-age=315360000\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"7fe-1a033481393\"\r\nexpires: Fri, 22 Aug 2036 19:56:19 GMT\r\nlast-modified: Mon, 24 Aug 2026 10:19:16 GMT\r\nserver: cloudflare\r\npriority: u=4,i\r\nage: 16607\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-ray: a30d28cdee60a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2046,"size_decoded":2629,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x120, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"db8f49e4dc7ce57e692da4ba6b50da81","sha1":"48297224c3e6beb194aa291b8f287d20a92dd052","sha256":"079bf70043c3155420aa100144a3850bf47f0ba3ea177e7ee3406b36b27fb8d1","sha512":"cad4d67614cecd8d9d6d5e27ca35776a7ed047090331e09b5d0499a1d152fb99abd8615f32c745f097888270ac56d3a792c4a13f1e29802784ae97d9d2d2c242","ssdeep":"","tlshash":"e9414ced066890e70505f8f6a18b1b8b8d41fd8bcc678f58e2e99db0831dc47210dc03","first_seen":"2026-08-10T05:31:31.860814Z","last_seen":"2026-08-25T19:58:16.068634Z","times_seen":6,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":4,"connect":17,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.799Z","timestamp":1787687776799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 19 Aug 2026 17:39:06 GMT\r\netag: W/\"9e48-1a01b1af290\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 422649\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bcfeba8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40520,"size_decoded":43356,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40520, version 1.0","md5":"a26850fc8493ad0366816dec92bda3ad","sha1":"03071098a384a8e08ec8e6ce8723f10c084e1dfd","sha256":"e0ea7bf0ba351883777665cb6d3a1f825387ec7a834e4fcbb8137f03a9bcff26","sha512":"55fa6bd5063a05b1a84cf9218f55cc608c9eb1d2834016ee14c3b97baf2539522e7609e767f25b831b242ea7e1a7f9ff58c479c6890586828356697321ba808d","ssdeep":"768:XbxH+0ROWFr0Ek7HmRu2XuUjKG0ZaT1k9bUbRslsAmVCeLQI:t9RFOtGbNjU4xObW+sRF","tlshash":"6503028be45aa15fe2e143a8f2832807585b5f3540b246b5a57d62b8c0c7b369fd7c0f","first_seen":"2025-08-14T08:22:51.320199Z","last_seen":"2026-08-25T19:58:16.115973Z","times_seen":42,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/liveDrop/allBlue.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.055Z","timestamp":1787687777055,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/liveDrop/allBlue.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28be9f238be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: QZnVfxVlwgKw1YkvVPfMDoxZuzpevh3t\r\naccess-control-allow-origin: *\r\nage: 1642\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:40 GMT\r\nserver: cloudflare\r\nx-amz-id-2: LAL8gsP/MLoZMk1DZwwarH7NGVIPLGUMWhOh2FuilXSyIxLcvgDirr+wRVtEr9lAeMXgOKhJmXFo1KGsCvF6Sb6b4tMKwzkg\r\nx-amz-request-id: ZQ9T055TPCPYSDQY\r\netag: W/\"715c1501697867514d404ef2af5c4250\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":408,"size_decoded":840,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"715c1501697867514d404ef2af5c4250","sha1":"8e1cd04c9943050b5f702fd165362b0dbb325889","sha256":"34c64bd74d6110d9b7a9f98504baa52ddb0befe0c013671092609736681c3a84","sha512":"51cfe32d417690f28aa4c6a26106668b294c92134497b842b94ce5737e2e1890b20ddd5732af2dbcd35284bc48a6f0ae62243b44e0265cc7cbb96d04632d40c6","ssdeep":"","tlshash":"51e06d78dc2c4a395a69f22207246734975ce4c9c34d0226a274e4b497c795bf802658","first_seen":"2026-08-10T05:31:31.872015Z","last_seen":"2026-08-25T19:58:16.096873Z","times_seen":6,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/upgrade/upgrade.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.075Z","timestamp":1787687777075,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/upgrade.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28bebfcd8be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: WPXZKtPzsyK00cAfeG9EDlFbR6WqBgU8\r\naccess-control-allow-origin: *\r\nage: 77604\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:41 GMT\r\nserver: cloudflare\r\nx-amz-id-2: OUn0ainNDo0aSn/YrV85vE82ru1tDggM6LW6JDdu+Hx3Lk4y3T5b5lxcpgxU15+QXE19NVeSfDU=\r\nx-amz-request-id: NZYDTBGP92F6EH5Q\r\netag: W/\"8c6629e80b759ac7451fc1705c4be493\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":549,"size_decoded":893,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c6629e80b759ac7451fc1705c4be493","sha1":"e95ed949a62e1fa19a96cda068ef846fc6b47286","sha256":"29887455f8080debc3de803399814971798fdf1bec9f0e1adc4d9acbc5cdff3b","sha512":"49349848757fa1b015f164204be1e1e91a57a7a18fc04707b2dcb20cc31b6d859b79cfef10648bac9e4e429bed17fb3dea52509a27471b5c616369be7634c59a","ssdeep":"","tlshash":"d6f0f630626e210c652b03a847289874c3dd317cf12fb098b29ffbb3904361b9313639","first_seen":"2026-08-10T05:31:31.909611Z","last_seen":"2026-08-25T19:58:16.134806Z","times_seen":6,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/game/spinner-group-3.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.383Z","timestamp":1787687778383,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/spinner-group-3.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/game/spinner-group-3.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 73798\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c6eeb68be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/974c8f4fcef301e7e5b8d343c5e54320-69ed63c63c39b.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.406Z","timestamp":1787687778406,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/974c8f4fcef301e7e5b8d343c5e54320-69ed63c63c39b.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15111\r\ncf-ray: a30d28c70f738be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4639\r\ncache-control: public, max-age=14400\r\netag: \"cfd8f42761dcbceb07a8753a427cfa31\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Sun, 26 Apr 2026 01:00:55 GMT\r\nserver: cloudflare\r\nx-amz-id-2: ik3val/jFUl539RjUyaje1+tjo2fPyRSyRZthVqjz8qwx0pCbwARoHQXtQSHw/43HXL158HJyCPXY+RYUGYuX0MYkokfF1ta\r\nx-amz-request-id: K9TBK8H690JKGG35\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15111,"size_decoded":15743,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"cfd8f42761dcbceb07a8753a427cfa31","sha1":"b0fd15fa6777b1b2f531ade13343aa225063970a","sha256":"aeb36731a5088b6a064d5cb528aad670943baf4a8280b5a10a06417cdeb6a8c7","sha512":"2993309ab5edc41d0efe814ec70de97922494b6355b85b9bbe05922bbd91f70c14498db3d214c69ed28859ec0abec73f83255f6be4fbf13b225800290eca446f","ssdeep":"384:nLJcuaG2bKuB2+xNXv2rHS2nclqMfun1G:nNDa5bK8x1SHFcla1G","tlshash":"b162d19b3de838ecfa056d47a911ac8530f90a8d62dc43d6b2c4de366b5b5430e9cad1","first_seen":"2026-08-25T19:57:11.504379Z","last_seen":"2026-08-25T19:57:11.504379Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2kpnj9h1a_s2pZKtuK8-QAW6cxOpJveRtRjy-205-sWXTzY76dXzBbQUhC5NwFOcLtRjpw9C1Yey3sQOP2d9HxST2iSxXrnE8cNR1an4/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.449Z","timestamp":1787687778449,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2kpnj9h1a_s2pZKtuK8-QAW6cxOpJveRtRjy-205-sWXTzY76dXzBbQUhC5NwFOcLtRjpw9C1Yey3sQOP2d9HxST2iSxXrnE8cNR1an4/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:58 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8318\r\nCache-Control: public, max-age=427936\r\nExpires: Sun, 30 Aug 2026 18:48:34 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8318,"size_decoded":10146,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"a0f2faa3dbc3808b775ab968bdd5d207","sha1":"2cacfb635acdf41fa1e64943028673fa0b0ca9ef","sha256":"edb414d634de579eb6ff38fc3d035baf1b7362d5c603a82f93fc826fa8e29afc","sha512":"ac998b3c3fba8f1f123b5a392b43dad643a16d3dc1755dfe586c0ba7385776b227e8ab25aa2348b347d305da79c65008b92ddfb43050e21045b5fdf929553742","ssdeep":"192:tCgloWvSDZAw+DZ1qTo7FrWJrz9J62dOqQKZEByNJzLiNPG/Tk+RbQ:MgloPZAwmqTkFr+bRZGeb/Y+pQ","tlshash":"bb02bff097cfe1058f634d9e3268417ad15ce716419d7a9c1524ca2ba6e22c641b46f3","first_seen":"2026-08-25T19:57:11.506456Z","last_seen":"2026-08-25T19:57:11.506456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/general/buttonBg.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.860Z","timestamp":1787687776860,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/general/buttonBg.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/general/buttonBg.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47715\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd68c18be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.207Z","timestamp":1787687777207,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 19 Aug 2026 17:39:06 GMT\r\netag: W/\"9e48-1a01b1af290\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 422650\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bf8bb98be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40520,"size_decoded":43356,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40520, version 1.0","md5":"a26850fc8493ad0366816dec92bda3ad","sha1":"03071098a384a8e08ec8e6ce8723f10c084e1dfd","sha256":"e0ea7bf0ba351883777665cb6d3a1f825387ec7a834e4fcbb8137f03a9bcff26","sha512":"55fa6bd5063a05b1a84cf9218f55cc608c9eb1d2834016ee14c3b97baf2539522e7609e767f25b831b242ea7e1a7f9ff58c479c6890586828356697321ba808d","ssdeep":"768:XbxH+0ROWFr0Ek7HmRu2XuUjKG0ZaT1k9bUbRslsAmVCeLQI:t9RFOtGbNjU4xObW+sRF","tlshash":"6503028be45aa15fe2e143a8f2832807585b5f3540b246b5a57d62b8c0c7b369fd7c0f","first_seen":"2025-08-14T08:22:51.320199Z","last_seen":"2026-08-25T19:58:16.115973Z","times_seen":42,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/currencies/crypto_rates.json","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.188Z","timestamp":1787687778188,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/currencies/crypto_rates.json HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/json\r\ncf-ray: a30d28c5b9518be6-OSL\r\ncf-cache-status: DYNAMIC\r\nx-amz-version-id: 3cP9meMMC_c2FIFpDI.qNSI1K8FZaW_Y\r\naccess-control-allow-origin: *\r\nx-amz-server-side-encryption: AES256\r\nlast-modified: Tue, 25 Aug 2026 17:25:03 GMT\r\nserver: cloudflare\r\nx-amz-id-2: IhUBkaQEywrxtyK9Cyu1R98DJ3vJL4D6BbI90K3F9fN6+FNYzhaPhEuEAp0Quhwioa/LoJyU6zVMjsO2YYCY8LnIY3zM7V2i\r\nx-amz-request-id: VP0C95FC2E5MN74F\r\netag: W/\"c15eeeb903f94fe6a33c9d39407e427d\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1035,"size_decoded":939,"mime_type":"application/json","magic":"JSON text data","md5":"c15eeeb903f94fe6a33c9d39407e427d","sha1":"b965f2e68b541ecc5092bd9e393a080770af3ac2","sha256":"38f7f8295bd2d1bf718cbd337cae3267583b76193bd5954f9e6246467acf33d4","sha512":"a85b0fef8d2e7cb1850a3183475aeadf36ee0ae248f14b667b0ff4307f780731d1ea3e05dc2f2af7649b77a6ed7b744aebd3505ce1d9f914b35fb05847b728bc","ssdeep":"","tlshash":"3d1137eac75f7df0e6ea9f1017e632923818b83b09c0271389b51941b0b4977ad72126","first_seen":"2026-08-25T19:57:11.508777Z","last_seen":"2026-08-25T19:58:16.11123Z","times_seen":2,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/upgrade/coin.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.296Z","timestamp":1787687779296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/coin.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28cc9d1e8be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: khRAqgkjHbUoCgObqIbpJz2.h3LTl58H\r\naccess-control-allow-origin: *\r\nage: 1347\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:19 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:41 GMT\r\nserver: cloudflare\r\nx-amz-id-2: aQHbaXm4vOv7d1EoK2rBA4SuEi7/Mu2+A8TtT653y7Lt88J5FsOABeJG4mMnLz/9SbuX0Ct6/O3dVtyM+5GZJ78qtWTYvMZA\r\nx-amz-request-id: 171MRDGMYBRRV7CH\r\netag: W/\"9734ca61ad3d5fd0ba3f1ddfeaa7cef6\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1251,"size_decoded":1314,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9734ca61ad3d5fd0ba3f1ddfeaa7cef6","sha1":"ad85b1e7d4e7b7614ab3fa6b6d67db15753eb04e","sha256":"42a77e6ba07a65263c7b2875a10ddfe44ae4ecf5c7ebe550ad189926fee7b0f3","sha512":"e6ebab1f1a5c077fe5a79d10c19248681ec6b5e5fda9d76709aa59a4794956c1c8797919e667ee55fbb154fa76a436048fc3a03e9c39bf80f8ed3c6efeac8518","ssdeep":"","tlshash":"7821d0e63220d38d128de86efb75a4d0a24f60eeb4b2f4d489df62a4605b845b226590","first_seen":"2026-08-10T05:31:31.894159Z","last_seen":"2026-08-25T19:58:16.187325Z","times_seen":6,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwiYbf-jFk7uW-V6BoIeSbMW-VwPhv_uA_GyzikU1xsT7SyouuJyqfPQ4jXMFwR7QNsRm7xNflZrnjsQaKjYpbjXKpIfXEUpg/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:33.214Z","timestamp":1787687793214,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwiYbf-jFk7uW-V6BoIeSbMW-VwPhv_uA_GyzikU1xsT7SyouuJyqfPQ4jXMFwR7QNsRm7xNflZrnjsQaKjYpbjXKpIfXEUpg/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:28 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 7173\r\nCache-Control: public, max-age=140697\r\nExpires: Thu, 27 Aug 2026 11:01:30 GMT\r\nDate: Tue, 25 Aug 2026 19:56:33 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7173,"size_decoded":9001,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"6c553b45cc63789db1366db530fc1303","sha1":"80269e0d31c7b779b801aba5fb248341fa3b2a62","sha256":"74305d032067b789a2e63c44e88b730c6875d36b77532137ead4ca68996fde4d","sha512":"4f763e9f13883a43e073121870a882572dc96bd78a18c58974e725bb5c351b9c49b20552784615d9defa2badd68660bd9c2c293ccb99676ee6de45b7ee36fecc","ssdeep":"192:Jdczi2eDrVC+JA7mJkyNCwq96B6CdRepXz:JTvDlA8C7GVWpD","tlshash":"d1e1ae8adf3745621768eda034391ccbc29aaca71ca04664c1af777e32ab5d2e7310d5","first_seen":"2026-08-10T06:03:35.106407Z","last_seen":"2026-08-25T19:57:11.511478Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/0af71cf4392478ea30b2f4f537f5bb7c-69de80e0991a8.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:35.729Z","timestamp":1787687795729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/0af71cf4392478ea30b2f4f537f5bb7c-69de80e0991a8.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5155\r\ncf-ray: a30d29335b8a8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 7016\r\ncache-control: public, max-age=14400\r\netag: \"96e668b33b461e98fa22ef0e6fe72c47\"\r\nexpires: Tue, 25 Aug 2026 23:56:35 GMT\r\nlast-modified: Tue, 14 Apr 2026 18:01:05 GMT\r\nserver: cloudflare\r\nx-amz-id-2: +yY21h32z4uBZVoUaJt2nAm3blkmfyotsRE/bm23RjJ0Y3Xp9XqV/qYZap6tgdt8wMc9nzjGMK4=\r\nx-amz-request-id: HQ39B83X7JEXVCQE\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5155,"size_decoded":5766,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 184x184, components 3","md5":"96e668b33b461e98fa22ef0e6fe72c47","sha1":"cb3389ef331d61da4f4d45dbeb3575ce64d481a6","sha256":"4df791485cce098282698f9f4965b18cbf4b8907d47380f6069fc2e2abdb94d6","sha512":"f8ff7176cb14933e88e04605af3af0b8c8f311193ceda0b9cb6ea52318c12270a261ff195afe9f6b85f4bc0d50e5ab5ea80b13ef3d50043504de554840bd6106","ssdeep":"96:/W6Egsej08q39WzbumZlmB5acwoSl0co+SC4p/WcyR8x5xsFrL:uM7I9WPuHB5DwFhSBp2R8Mn","tlshash":"eab18d86c5937be0fa75f83cf925bd483bd99c01ba91e4078dc273013693be5a669122","first_seen":"2023-11-24T22:14:06Z","last_seen":"2026-08-25T19:57:11.513887Z","times_seen":22,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/footer/visaIcon.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.906Z","timestamp":1787687776906,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/visaIcon.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/footer/visaIcon.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47714\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bdaa7f8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLkjYbf7itX6vytbbZSI-WsG3SA_u1vouRxcCW6khUz_TjdzdmsJyiTZg8kX8N4ELUP5EPsw9G1YeLn5VTXjY0WxS6rhiIYuCd1o7FV2N83Spg/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.415Z","timestamp":1787687778415,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLkjYbf7itX6vytbbZSI-WsG3SA_u1vouRxcCW6khUz_TjdzdmsJyiTZg8kX8N4ELUP5EPsw9G1YeLn5VTXjY0WxS6rhiIYuCd1o7FV2N83Spg/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:40 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 6969\r\nCache-Control: public, max-age=294790\r\nExpires: Sat, 29 Aug 2026 05:49:28 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6969,"size_decoded":8797,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"e95a202c299e5d4e3c740add35276799","sha1":"d644b40999749c34b1a2adbd6920a87512b6a28e","sha256":"58d11f5f50f299a752e4aab06efcdfc989a023e3983143cdd11bf90cb77bd648","sha512":"e545dc81971d6ed0d5f7616d8a019c69e9835bfad4e12f3dede31508c65049747b6f8387c199f1a27d0b2fef79e6ef6d40b0baa3d04ed174813e2b0fb7c1e58f","ssdeep":"192:NvFfTHuZRJYRxHsKOxfo3a2xA6tp21uS+DCWUgsm4:N5upYREo1A6K+DCWUgsr","tlshash":"dee1aed8b3c12ba6c5ce6614300375a2c49a6e429535a620092678feae701ffb0c64cf","first_seen":"2026-08-25T19:57:11.515846Z","last_seen":"2026-08-25T19:57:11.515846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLlm5W5wipC0Py7a6hoIeKsHWyFzeJl5d59SirqqhUisiuc1I2uIn-RbFMhCpEhQeAD4RnqxobnYuzr5VGNiY1GmH-viHlM6Cw56u8cEf1yE8RyuWg/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.422Z","timestamp":1787687778422,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLlm5W5wipC0Py7a6hoIeKsHWyFzeJl5d59SirqqhUisiuc1I2uIn-RbFMhCpEhQeAD4RnqxobnYuzr5VGNiY1GmH-viHlM6Cw56u8cEf1yE8RyuWg/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:33 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8130\r\nCache-Control: public, max-age=139567\r\nExpires: Thu, 27 Aug 2026 10:42:25 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8130,"size_decoded":9958,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b6a478195ef7de406636db59a39a1a1e","sha1":"4fd81d354fdf4107d50b88382d1ce2a54a0fcd30","sha256":"f224eb426a8cd85ab9afc3d4003dcd6acc4348150a031ddd6d6958477b50beb7","sha512":"7aadb1f2b675a2203e4ed4ed32010e95dc6b3e184c3a28a42877b25f8069144abd3fbff52276a67e0cd2419549d9c06ce1485b979b96cce177e68878e15d1ef8","ssdeep":"96:jCdSxucZFIIBKl6hhqIFE6JBlIXaQKW/XD6B2AtYeWY+L1c3aJ/h79TBES3RnWT+:WdYuUBKl6GIfOXj/Xm05b/h79TKS30z6","tlshash":"9bf1bf3ebf9e28a1c609715541310c27d9c7ae2e7f576a856b4d632c0c028d7577a721","first_seen":"2026-08-25T19:57:11.517856Z","last_seen":"2026-08-25T19:57:11.517856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLhx8bf7XsL0ParabBlJ_GJC1idxOp_pewnGH3lwUtw5z_Wy9eqdiqUOlAlXpF5R-MCshC7xNDuMO3jtQeP34kWmTK-0H0e9r7eSA/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.464Z","timestamp":1787687778464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLhx8bf7XsL0ParabBlJ_GJC1idxOp_pewnGH3lwUtw5z_Wy9eqdiqUOlAlXpF5R-MCshC7xNDuMO3jtQeP34kWmTK-0H0e9r7eSA/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 11 Mar 2026 23:19:15 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 12751\r\nCache-Control: public, max-age=254130\r\nExpires: Fri, 28 Aug 2026 18:31:48 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12751,"size_decoded":14580,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b8c23879c9f29247212a7e9da88a07b6","sha1":"8422f4647ddabdb2553c7d78a54a1e702e99f6dc","sha256":"86ff7dea71c1c06d2c819e8ebd9ed553b85b382bd0aad08fc47ea9ab859886c5","sha512":"603eb7445685ac6a42c78e607609041c3dbb8f84be409fa856df4b06587e0ad86deea5db9ad919fb4d5e41391c117784a4d430932bc7274d55789c671008b95d","ssdeep":"384:QRGV4wazt0j91PWQJ6VMWIMm3zdGS3JHSxHgR5v5BPR:QRGJHeJ/G3hLZHShgjhBJ","tlshash":"e342b0b15847497e203caff524a33ea0f4fc6b018e47d50fa2616440ae8f55ada3d5d9","first_seen":"2026-08-10T06:03:35.233421Z","last_seen":"2026-08-25T19:57:11.519485Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-91CV07RNJK\u0026cx=c\u0026gtm=4e68o0h1","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.801Z","timestamp":1787687778801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:13 GMT","end":"Wed, 28 Oct 2026 20:42:12 GMT"},"fingerprint":{"sha1":"68:4B:BE:E0:D8:D0:53:B7:6A:2B:23:0F:15:52:13:EA:A5:54:0C:33","sha256":"90:A2:40:57:FE:4D:B7:FF:6C:40:9B:6C:62:BA:6C:8D:74:59:95:60:8D:31:D6:81:7C:43:25:C5:5E:2C:D7:9F"}}},"request":{"raw":"GET /gtag/js?id=G-91CV07RNJK\u0026cx=c\u0026gtm=4e68o0h1 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nexpires: Tue, 25 Aug 2026 19:56:18 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 172508\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":511810,"size_decoded":173092,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"e33e038852b41e8212212a0bf74a0622","sha1":"da856df256d0a12d2c15fbd010325a230085e90e","sha256":"b463bc43b1eeadd1444f2329ac776f6c5b670404de85e24464ec64ff8214042c","sha512":"2326db3cc8d21615089bc4336d0d4b55e8505901f0be8140eea39a1bc473ced0ccf214fa81386e031ad01121a56bd6f51b70712278786265b130ebe1530782fd","ssdeep":"6144:/mkxs8JZMV3ntdZ9sE/U7yHYcs2TWOEr33a5zNNXEvlDCo6meuPvR:PfuWfuNivxK/MZ","tlshash":"bfb4e9ce73d674229396f479902f01cba97b28a2b45cc8a6f189ccd42e7459a4137f7c","first_seen":"2026-08-25T19:57:11.521279Z","last_seen":"2026-08-25T19:57:11.521279Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/3662266df591d39355cd14a80562e02b-69f493526ba99.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:20.621Z","timestamp":1787687780621,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/3662266df591d39355cd14a80562e02b-69f493526ba99.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15809\r\ncf-ray: a30d28d4edb88be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4886\r\ncache-control: public, max-age=14400\r\netag: \"60fb0062ce1db698a34efba4a3c2c2a6\"\r\nexpires: Tue, 25 Aug 2026 23:56:20 GMT\r\nlast-modified: Fri, 01 May 2026 11:49:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 8ZpM55g9LJC73GrIi7in7IBvhHf5gE3NzhYTQlzyJ+wh8rj7OarmU42rcqGWtKlJTv83cSwHLg3R34BWP3bxczSVMsfsUMtb\r\nx-amz-request-id: 51FPRB2EYYJ6JHRK\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15809,"size_decoded":16441,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"60fb0062ce1db698a34efba4a3c2c2a6","sha1":"760f07f3426e309dbf7aa559de3cf94c8270ebfd","sha256":"5e2259d062f3a0897f3e07b42cd2073c1e059266ec07d535454efec9f7269d9f","sha512":"6a38eba9848f4faa943317db6c0137c7c088e09cfdaebc816e50f79b21988ca8b35b5a7cee442a9ee58b64ed1cf100704b799e93988373eb254fa9e2c735ad4b","ssdeep":"192:oOWZaznqf1/Se+VUgskcnirvatAAx2uKwk8ChOxFC/MjgBtAmcdm0/2RdUDSad04:awnAHDgunSvgAKQoSU60/mdeO2WE3Rr","tlshash":"ce62d04aa59274e9f4322f7fa90d97046eca9840de547413e3c93af0143203e9de4e9b","first_seen":"2026-08-25T19:57:11.522706Z","last_seen":"2026-08-25T19:57:11.522706Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLkk4a0qB1T9s2jZ7B5LPWXMXSRz-pJvOhuRz39wUR1sWqGm9v7IC_FPQclCJp5E-YD4Bbum9axM7_l4VCKi48Qy3793zQJsHiVhPnxlA/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.790Z","timestamp":1787687778790,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLkk4a0qB1T9s2jZ7B5LPWXMXSRz-pJvOhuRz39wUR1sWqGm9v7IC_FPQclCJp5E-YD4Bbum9axM7_l4VCKi48Qy3793zQJsHiVhPnxlA/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:38 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 79866\r\nCache-Control: public, max-age=296127\r\nExpires: Sat, 29 Aug 2026 06:11:45 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":79866,"size_decoded":81695,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"f0c5531b7750f79bf26829411e9921b4","sha1":"2acd801c11a775a0ae6bcb161c704a99a39d6239","sha256":"596ef2ac8f24d2e77c285213d06ac30b8f896816b081d515d394c5c3778c321b","sha512":"e028b3892afad914ef3d30d7cc1dac463d8f2666bc7de1dfbddac342abdcd98917cacc1669bc29af06735bbe4b940e8586adc2df0967bad14205c6d746dbbbeb","ssdeep":"1536:47SnVa/aeWAJ48+BzzSD0krw0waP7/QdtWdFuI9NZSEm45T9K9bivN3:47SIWZBvSD099+LrSGR9KhiF3","tlshash":"317301c8c5a03a253d513772af3c1534fb921ae50f8de318a109d6febdb52988d9178b","first_seen":"2026-08-25T19:57:11.52435Z","last_seen":"2026-08-25T19:58:16.172823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/0tfoq5t-jbb8y.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.838Z","timestamp":1787687776838,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/0tfoq5t-jbb8y.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"9258-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108121\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd3fec8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37464,"size_decoded":15341,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37129)","md5":"a70f1969237047a4482426566e6f732f","sha1":"43ef908d7cc6450dc63c19e4cadf5d9e431ae2ec","sha256":"6e9434bacd51ae2c48ef2269c6174c796ecedbc0d0e49df176570cffc820e985","sha512":"9c995aa9c231bc3d6cdfc8ce52d134e3be75fe99e096e1a65baee78c4f1d406b7e29d780d65fa448dda444b21a4f37ce62a02d9f64ec64e27b3901a474107e1a","ssdeep":"768:nSVNXrSzX2aTLxIc+rAaM26ddDuQ2XkAlXlEal1:em72ULxEcat6ruQUXJ","tlshash":"50f2d7c132a6f02643935295486f100bf27ded69980c1868f761e8f538f698992fff79","first_seen":"2026-08-25T19:57:11.526388Z","last_seen":"2026-08-25T19:58:16.109783Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.caser.one/static/javascripts/client_default_a7f5f2d.js","fqdn":"chat.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.328Z","timestamp":1787687778328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /static/javascripts/client_default_a7f5f2d.js HTTP/1.1\r\nHost: chat.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: https://caser.one\r\ncache-control: public, max-age=315360000\r\nexpires: Fri, 22 Aug 2036 19:56:18 GMT\r\nlast-modified: Tue, 25 Aug 2026 17:55:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nx-content-type-options: nosniff\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Authorization, X-Crisp-Client-Url\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 300\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a30d28c68d418be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271969,"size_decoded":81713,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65124)","md5":"71e1781ad89f3f8eb096ff1c3a8cd0ba","sha1":"ef337e05c22e119d37b744a0f28ba615d376971d","sha256":"d7d84f7e0484e24773f373d92bf21884e8a74880a118eeb1fc365bbecbbfa4da","sha512":"0337c5ebc4e6296dd181ad772d7b0b468b21ce572527c704d525c271d0746d72321e3db88b616fc2abcb86258f2631adcb1abe86bc728252a28b8549704a298e","ssdeep":"3072:1ZnV21wKa0xaCjtCaYcN698k+zP4n3oZvLaoKNVAhn2OmnYD2YSbkqajwSb:n0Jtx7jtCaYcF4n3oNpnenYSYHqajwi","tlshash":"b044188a3265a83303fa42c7a4721582f33625ad2886407cf76c6dee6a5cdc571e7f74","first_seen":"2026-08-25T19:57:11.52832Z","last_seen":"2026-08-25T19:58:16.152287Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"chat.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLkk4a0qB1Y-s27ZbRSI_yGGmSY_uV_s-pWQiy3nAgq_T6AyNasJ3iePQByW5NwTeEKsxbqw9LhYePitlbZ34wWxXqsjyhPvy11o7FVOjdBjQA/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.470Z","timestamp":1787687778470,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLkk4a0qB1Y-s27ZbRSI_yGGmSY_uV_s-pWQiy3nAgq_T6AyNasJ3iePQByW5NwTeEKsxbqw9LhYePitlbZ34wWxXqsjyhPvy11o7FVOjdBjQA/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:36 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 11916\r\nCache-Control: public, max-age=145081\r\nExpires: Thu, 27 Aug 2026 12:14:19 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11916,"size_decoded":13745,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"8f00dba7cd07f3d9d9a17b25d5538657","sha1":"12bd6fcf476bb7d475808c70c6ee5dccca167416","sha256":"f96526e9ccfc03c5328d5635288896bf1d6f8ecf22e1af75970a77d4b2acfc8c","sha512":"19b8a9e68a2d050f65a0343e225316ede079e3eae697b433ad2272b8fd1286b4c976f4ded75b5bc53fea800d0ef0cf971d94c9af31d40061b488325b672c6d3f","ssdeep":"192:xszRx8Cj339Zse8sqJIVEXeRs/PDdGViTX+dQJVSfpOstGZITyXvEG202PoP/Bd:xsz3Rwe8sqGOmcPDdskgFtGuTdG/2P2v","tlshash":"3732cf2b2200cb6b983d543676477d8bf20ad46f5274a8cb4edcc2544ff27e9542391e","first_seen":"2026-08-25T19:57:11.52981Z","last_seen":"2026-08-25T19:57:11.52981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2pdhj1kp68xb_.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.176Z","timestamp":1787687778176,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/2pdhj1kp68xb_.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"8f2f-19ffb9f4150\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 998130\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c598d98be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36655,"size_decoded":11707,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (36320)","md5":"25d78e8107d9b84fc5d7a0b520dc5cbc","sha1":"884382be95d659a9623bb379775f6e8aff913229","sha256":"5ad860880c9a492fdae19c5c30352426c479de9a59b4a9a9490d7c8f1b907d8c","sha512":"026374f6e0fdab0656273dc56d1ce1ae3d26b2ec85b33a1616e3815e5eecb6fdd7a572fe6bece59828a2fd2e6c36a85cb9500190ee28abc38ac2a4485161b1ec","ssdeep":"768:nSAeYQagKHsvBvFlQ2qPYxsAWXq94xJLkP94j6cbEDBLvuOo:beYQaZM5dlQ2qP+wq94rLkP9y","tlshash":"1af2f6483be17c34828632e6603e0a177b722652585e264cf01ac9ed6f6c6c6717ef7d","first_seen":"2026-08-25T19:57:11.531188Z","last_seen":"2026-08-25T19:58:16.189537Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/general/searchIconBlueMob.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.853Z","timestamp":1787687776853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/searchIconBlueMob.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/general/searchIconBlueMob.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47714\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd58788be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/footer/online.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.083Z","timestamp":1787687777083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/online.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28bec8128be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: kTmQwZNfSTasK85hs6_XPjEqeDzZlyxN\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: gOqud0HlalOer2JZ9PVEOMvs5xlcJvaG+3xqRhFbFt/85gYf5A2AntN7m7KFx6aX0gKmsFLNYL1JVX2mS5QjfJbgTaqZTkqz\r\nx-amz-request-id: ZQ9HY6W1BEE0FGHA\r\netag: W/\"d99e867e9b69ce4e623a1b5c0db1f897\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":561,"size_decoded":968,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d99e867e9b69ce4e623a1b5c0db1f897","sha1":"18bd113f377551cb2de492a55fafc6d7d84ff293","sha256":"ca32198a99942b674fd19853508f1309a4370161130c672a06f651da0dfbcd69","sha512":"ebba3db6db8d6db09dc5a2213281083e3fd1e46af2e097ebb26beb64c0f8969b5e9ec46e56aba91a0d29e519955b66f36e36164e4d20f479ab07e2ec19fc1790","ssdeep":"","tlshash":"89f08be9672c2e6c65ab4b74c71db2e4122670a4834d80eca01c133a64c9f5e3a339f8","first_seen":"2026-08-10T05:31:31.946203Z","last_seen":"2026-08-25T19:58:16.082998Z","times_seen":5,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/android-chrome-512x512.png?v2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.866Z","timestamp":1787687777866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/android-chrome-512x512.png?v2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\nlocation: https://s3.caser.one/cdn/fa/android-chrome-512x512.png?v2=\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47642\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c3a82c8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru/cookie?_rsc=sV45AUiX02iMrD6O","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.955Z","timestamp":1787687779955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /ru/cookie?_rsc=sV45AUiX02iMrD6O HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /ru/caser-one/main-app\r\nnext-router-prefetch: 1\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg; _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:20 GMT\r\ncontent-type: text/x-component\r\nx-geo-country: NO\r\nx-nextjs-rewritten-path: /ru/caser-one/main-app/cookie\r\nx-middleware-rewrite: /ru/caser-one/main-app/cookie?_rsc=sV45AUiX02iMrD6O\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28d0bacc8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3683,"size_decoded":4352,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2569)","md5":"3172ee8007b486525aae46b8d98603c3","sha1":"411d41c411c3430ab63a4762fb1a1af899580278","sha256":"919bb6f31f5f361e53cb67acb7f9a3ba15775c11dbb00c3b5afdd129dd624bf7","sha512":"188d3e52a03dc176e2bd8b527a282858d69cfdeb25134f461a1a1c5d289b1bab336eb813006fbaae2d66564bb6016ca92938da294cc0b7662672ebd417f5f5d5","ssdeep":"","tlshash":"2a71d2379248187f9b6787cc308fb20be64f113e1e956e7a944a2e1801db32a1d476f7","first_seen":"2026-08-25T19:57:11.534122Z","last_seen":"2026-08-25T19:57:11.534122Z","times_seen":1,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8n5WxrR1W7vH_OJt5MvGaAFiT0-9luN5lRi67gVN14j6Gy9_7cSqQZw4hW5BzEeICthW6kYe1ZO_ntQ3e2olGnn-vhygY8G81tHTA36iF/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:33.939Z","timestamp":1787687793939,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8n5WxrR1W7vH_OJt5MvGaAFiT0-9luN5lRi67gVN14j6Gy9_7cSqQZw4hW5BzEeICthW6kYe1ZO_ntQ3e2olGnn-vhygY8G81tHTA36iF/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 31 Mar 2025 23:00:27 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 9644\r\nCache-Control: public, max-age=309389\r\nExpires: Sat, 29 Aug 2026 09:53:02 GMT\r\nDate: Tue, 25 Aug 2026 19:56:33 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9644,"size_decoded":11472,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"a62e6048ad2faaf8e03c4ad5fd291d70","sha1":"983d1dca36d4ffe52a83bde94660bc9cbd2586bc","sha256":"46eb8ae38acff5a16875a0cbb0095bcea5ea69efe0782fa126b15ce20eddb049","sha512":"ac6b8ea078d44e05b8f9c5cab3d6d331868f6ba6faffef683f8d4ab34cd11bda292f244acab4439f5ce3167e8ccf6b6cbae342c565a4e53fd93c66e3a9334dd9","ssdeep":"192:z55ZTj+b0JZhDun3tedNi3JaXLSmI1EbamPyGhydZoL6fLwHX6YM8JoB:t5xZxDhYZ0K1ytLydg3PM8Js","tlshash":"aa12c12ea3bc90cd13b4dd877c3478a47198ec2566ada0f8e1a94864656b950833cdfb","first_seen":"2026-08-25T19:57:11.535403Z","last_seen":"2026-08-25T19:57:11.535403Z","times_seen":1,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T19:56:16.290Z","timestamp":1787687776290,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /ru HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: geo_country=NO; Path=/; Expires=Wed, 26 Aug 2026 19:56:16 GMT; Max-Age=86400; SameSite=lax\r\nx-geo-country: NO\r\nx-middleware-rewrite: /ru/caser-one/main-app\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nlink: \u003c/_next/static/media/8e410338cab7e12e-s.p.2888ryxa0751p.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/9a800f173b8d9e8f-s.p.3nglv5iys3s0a.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2\u003e; rel=preload; as=\"font\"; crossorigin=\"\"; type=\"font/woff2\", \u003c/cdn/fa/icons/header/logo_text_ru.webp\u003e; rel=preload; as=\"image\"; fetchpriority=\"high\", \u003c/cdn/fa/images/header/headerBG.webp\u003e; rel=preload; as=\"image\", \u003c/cdn/fa/icons/general/searchIconMob.svg\u003e; rel=preload; as=\"image\", \u003c/cdn/fa/icons/general/searchIconBlueMob.svg\u003e; rel=preload; as=\"image\", \u003c/cdn/fa/icons/liveDrop/allBlue.svg\u003e; rel=preload; as=\"image\", \u003c/cdn/fa/icons/liveDrop/hotGray.svg\u003e; rel=preload; as=\"image\", \u003c/cdn/fa/icons/socials/telegramIcon.svg\u003e; rel=preload; as=\"image\", \u003c/cdn/fa/icons/upgrade/bg.svg\u003e; rel=preload; as=\"image\"\r\nx-powered-by: Next.js\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a30d28b9dfb38be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"geo_country","value":"NO","quoted":false,"path":"/","expires":"2026-08-26T19:56:16Z","raw_expires":"Wed, 26 Aug 2026 19:56:16 GMT","max_age":86400,"secure":false,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"geo_country=NO; Path=/; Expires=Wed, 26 Aug 2026 19:56:16 GMT; Max-Age=86400; SameSite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"RxJS","description":"RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.","website":"https://reactivex.io","common_platform_enumeration":"","icon":"RxJS.png","categories":["JavaScript frameworks"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":127791,"size_decoded":30426,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (64918), with no line terminators","md5":"fd57ba6946444abd4fc3f4ddb819cf3b","sha1":"a873f4480bd40f391a471bb7649f5eb6942c1c48","sha256":"418fb9554980719f20c430da5b40b13c967aa43b36af5eef97f0e4c7d39c6a9b","sha512":"a5c937b508ebf873b12f8b409073d5d6b770c16f83175ee32a3f058c32cd181558d407408c289827aeaec0b0c580bda3209f7e814647df80cec58fc9590a5d37","ssdeep":"3072:fS5l1bLbcu4PhQP96Fss3h8CToHUUxnynKnoeHEgaD1zQtOZD0Y:fMXkg+1zQtOZB","tlshash":"28c3d9316106e4aa8103fe5fa4387f2f74dac17d9f23a52922aefd5921f38b0c6e4551","first_seen":"2026-08-25T19:57:11.536872Z","last_seen":"2026-08-25T19:57:11.536872Z","times_seen":1,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2iv1o913x5e12.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.821Z","timestamp":1787687776821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/2iv1o913x5e12.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"cd73-19ffb9f4150\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 998130\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd2f5f8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52595,"size_decoded":14398,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (52258)","md5":"ca255fe6f35518ab521859b25ed39469","sha1":"25f03237617d5269a79db29803944f42ff6c347c","sha256":"1daf35410b09f1632dde43196ac2e79602d02023ceef4eb9f2d939f0f05eb07f","sha512":"7af471ce9711bfc7f530588f9a73e2460ebb20c06b824cc8b0c44f8bf26b9e83bbfeb47d1d1de988e7bb530b3f0ced657997e664b0bf54e921ddaf204473572f","ssdeep":"768:nS3nBJU6K9OCmEsWUIgoNtbN9MffjQRcquxWP:0nDX9YFduYP","tlshash":"5c33c6b53291fab702db91d9d0370012f2780c7120ad64b4b394dcaf799dd8992faf69","first_seen":"2026-04-04T01:21:08.716491Z","last_seen":"2026-08-25T19:58:16.172305Z","times_seen":78,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/5e6e6b3218e799cdf05ac5aa80db6701-6a727cd613856.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.428Z","timestamp":1787687778428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/5e6e6b3218e799cdf05ac5aa80db6701-6a727cd613856.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6909\r\ncf-ray: a30d28c7283e8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2308\r\ncache-control: public, max-age=14400\r\netag: \"d79462b6376c454274ba6f7c5ea37758\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Tue, 04 Aug 2026 23:59:19 GMT\r\nserver: cloudflare\r\nx-amz-id-2: y1lHWOXb7UK1N7J2OpPU+Eue5rlNj1+ZrOYp9jH1JtV/UWQ4PAzoRmj0UoyDhvyarz1/51uOLsgPZSgER5ftZs1ei58Yoatd\r\nx-amz-request-id: N79HGF8YANXF3SEK\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: KrZunPfiPltbYIubeLKGFGCGYwMd1JEK\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6909,"size_decoded":7568,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"d79462b6376c454274ba6f7c5ea37758","sha1":"6f5c516c8cc48be35013d39f5f4524e01a00d0bd","sha256":"d41ace4e4ce27992271d047406e98087cddeff0b63b3f1ec9010330c5e8c9de4","sha512":"8fed0cc292696670d03f67438999ba6615470d39024c5f4e0088f469a7a59e6793a33e35c7f57ce5067da73dc0a95dead3abf75a3bddfb11199e71f968602b94","ssdeep":"192:Zhb5infdQI29+puHM51SAHm/h7GOxKhrtm:Zfin+19gbRHmhvKds","tlshash":"00e1af2867e815e9f1eaa6f7f1286f0bb6d7031cf69135004cf35e66672b9c0ca5d440","first_seen":"2026-08-25T19:57:11.540009Z","last_seen":"2026-08-25T19:57:11.540009Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2kpnj9h1Y-s2pZKtuK8-BD2qKxP1JveRtRjy-2x9wsGqBzI2rcy-SOwVyX8R5ELEIsUPtktW1MO6w4AbejNlGmCn623xXrnE88DgT8mI/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:29.931Z","timestamp":1787687789931,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2kpnj9h1Y-s2pZKtuK8-BD2qKxP1JveRtRjy-2x9wsGqBzI2rcy-SOwVyX8R5ELEIsUPtktW1MO6w4AbejNlGmCn623xXrnE88DgT8mI/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:59 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8639\r\nCache-Control: public, max-age=117424\r\nExpires: Thu, 27 Aug 2026 04:33:33 GMT\r\nDate: Tue, 25 Aug 2026 19:56:29 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8639,"size_decoded":10467,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"9c7dd154920f455ebe6abdc6ca1feb45","sha1":"e2ea450545fec87960246fbebc241237500932a2","sha256":"e209626f87f5830f71c6d734524ae41a5ae5d13c765ff18ec1eb8c37bb753698","sha512":"22a5b086f80a24ed9cb4f7d7f30bc4b99fd47e8aebfb7794f2eceb3655dc622d2760108e0a17074d0aa14578ee08ecf270c17ddfbe08b6fd00f709ac1efbae40","ssdeep":"192:zBJqXB0Xib/T0AVb3ZT4+ozyo5SdEdOGltZj35AUGIYkP2:3qXB0SbLvjtof5SduO0XjpLGX","tlshash":"9102b0fc745d962cde30313a3833d993618380206d82384197d3db766d6497ac86b3af","first_seen":"2026-08-25T19:57:11.54164Z","last_seen":"2026-08-25T19:57:11.54164Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/1zbx24pb9l-b7.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.835Z","timestamp":1787687776835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/1zbx24pb9l-b7.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"a44-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd3fdc8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2628,"size_decoded":4040,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2293)","md5":"7a747685d83a12e4ff281f87a36c2b6a","sha1":"ab81e2f9bba1b5a7f4900fb56541dc26704acdbb","sha256":"0eacd02d9eaf39faa9515ff82f19c83a0b624d7144e79363c15ac7e2d5c5c994","sha512":"3594f48e64f1fa01d996ce8e30799f1d856d8ea1a0bb44416e4c2e52a8c308378bd889b5b7552c1e3602b21fb9f0adb3a478c5dd55e3643e9152007e36579e22","ssdeep":"","tlshash":"3f514610522926ac3132365d632e900b11eea75cdb0ecd74b27b7c313db65f867927d6","first_seen":"2026-08-25T19:57:11.543354Z","last_seen":"2026-08-25T19:58:16.072009Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/liveDrop/allBlue.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.854Z","timestamp":1787687776854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/liveDrop/allBlue.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/liveDrop/allBlue.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47714\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd58898be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/footer/upgrade.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.082Z","timestamp":1787687777082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/upgrade.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28bec8068be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: GaPK1C561RYpdWfhikzuRcaLDX2.z0LB\r\naccess-control-allow-origin: *\r\nage: 47714\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: ILOfNdXzA9egBZufoveplCaz+et7jlnPVgzxK9n6oXClg3FHwpeF13pzMx2GyTaxyBn2lm1oNe1B620xTX2gTcopGVUNrNhT\r\nx-amz-request-id: ZQ9NXFS9C5EWZDT8\r\netag: W/\"0f5a737c2da66cb652cc91d309b82d2f\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":568,"size_decoded":924,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f5a737c2da66cb652cc91d309b82d2f","sha1":"abce41780aade31dc647b36e51669a3872e684a1","sha256":"2746ead0f88d0f59a5a69c5726dec17aef6bd6edb273d3c4e90aae4416b62d7e","sha512":"0463b5b5a3aa1a2e30eb64d61fe7d3b367b5ba3aeb22aff82c39a97a2057fbc84ca8f9da86643d9c8fb1ce6758b4ccbf1403bcf8e15ba21015292a3b1693da0f","ssdeep":"","tlshash":"09f0af74159e220c682b065903289878c3de297cb12f619ca28fb7779087a6be307238","first_seen":"2026-08-10T05:31:31.926721Z","last_seen":"2026-08-25T19:58:16.11545Z","times_seen":5,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjNisJynHtwY65oL6pF-0EBypmpCx_3pauKGrPaA0eKnDDWGVmet34uAwTSrqwk1-5mncy9e3MSXAx7tTIGI/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.791Z","timestamp":1787687778791,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjNisJynHtwY65oL6pF-0EBypmpCx_3pauKGrPaA0eKnDDWGVmet34uAwTSrqwk1-5mncy9e3MSXAx7tTIGI/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:15:13 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 55831\r\nCache-Control: public, max-age=137345\r\nExpires: Thu, 27 Aug 2026 10:05:23 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":55831,"size_decoded":57660,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"ac4dc63e69873aa4a25bce4eff6164e4","sha1":"5971538e2fa49b6261112e6858a5b1816c142144","sha256":"af5319b25ef14c88860cceb2d9ea19cb6eb252717b700a361d80a8c7906b513f","sha512":"d16a81a35f7c9a649f5fa2c4fb04ae91890b7848cd1affd98e74d6e47f4bba9a5b79b9a5d81c8a124de958bb154d6142e60454db270140fd6c93c80dcda26088","ssdeep":"768:I/e/gd8x03zsT91md152GYrvGL51wmf8z1VcPHfNDaEB3jtE9T1OrKmeLh0/p:IWYSSw9gd152jrOqmf8hVEZd9i91m+h6","tlshash":"774302dbdbb0d5958ada00e42e37a1d09ceb13fbc25f42acfd28477e919c6a441114e3","first_seen":"2026-08-10T05:31:31.840783Z","last_seen":"2026-08-25T19:58:16.180807Z","times_seen":6,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/8e410338cab7e12e-s.p.2888ryxa0751p.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.796Z","timestamp":1787687776796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/8e410338cab7e12e-s.p.2888ryxa0751p.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15600\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"3cf0-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996500\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bcfe8a8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15600,"size_decoded":17475,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15600, version 1.0","md5":"4a68bf8ca35241ab8e309f2b0ae1b95d","sha1":"eac486f3b59d7c93f616995c0e4f8bc3dab11fc3","sha256":"56f1681a9ea64e97ff5de104e6d28c7cb7fdd059ec7ffa69117070ddc2555131","sha512":"102d9e3a394772fd4e63b8d707916030b8783095701964b0269e8ac432ed82d78039dc8876b300b140bb7e25a19676a0c6a4f7d3e8fe1faec9f317247b8d1c4d","ssdeep":"384:/1M3tTB3ypiyyzYRxdR7XIdvU0+mtwoYCCFqpVajuH9aTAH42:/epB3yp58YRp7YdvF+fojCFqpVDH","tlshash":"2d62d00eb49db284fa2c8d282757ec4b391dde21ba832666ca3c53755c3c45eec43c56","first_seen":"2025-10-27T02:56:14.036304Z","last_seen":"2026-08-25T19:58:16.096291Z","times_seen":26,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/a72bae1f54ba6fb764e19c6c8b5f82a0-69dd56ef1011d.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:29.934Z","timestamp":1787687789934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/a72bae1f54ba6fb764e19c6c8b5f82a0-69dd56ef1011d.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15450\r\ncf-ray: a30d290f1c278be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5146\r\ncache-control: public, max-age=14400\r\netag: \"c72a11a84f4981c7ec48de5a64e6d496\"\r\nexpires: Tue, 25 Aug 2026 23:56:29 GMT\r\nlast-modified: Mon, 13 Apr 2026 20:49:52 GMT\r\nserver: cloudflare\r\nx-amz-id-2: kCwHiG8/0rctb0hUFE40N/GdIuqSq5ZqdH7WR9E/Eeb+ypVdo1WC67wxPPkOSxBeM0G++WoeMpU1PZsa9FT8EEqa0bMEflw4\r\nx-amz-request-id: 1KW6Z7AQQCD5WJ4P\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15450,"size_decoded":16082,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"c72a11a84f4981c7ec48de5a64e6d496","sha1":"7ac116a3843f7797cef11150b2e192c53056db98","sha256":"b090cf2c5d42ad9d73bbbe9bab8dbb339df5a61f256df0ab34a237adcdf066a0","sha512":"ecd450eb58e7b327513534fb079cc0a575160f34380df0eb7963332a9a8dc78a1d8a11b994adbe187d7c2b5c099b9f380ecaf0666254bbe536fa72cfd11b402a","ssdeep":"384:Cl8Sj2rhxflkizro4wbgOqABaLc5y5dNZVDlTyZx/:Y2dxXr2/wLCCvRS","tlshash":"4862ce88c270e2ceb15d12b4d217ce59f4fda1a8d9842fca8ede64cab17065f4889609","first_seen":"2026-08-25T19:57:11.548265Z","last_seen":"2026-08-25T19:57:11.548265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMmuOW6a50NmptelvBb0SBrOjo_09WwJu_aoPqc0c6nDXj_Hlboutrc8THjllh4h5W7RzY2teXmfaVAhDpF0W6dU5SJJ3KAl/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:36.473Z","timestamp":1787687796473,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMmuOW6a50NmptelvBb0SBrOjo_09WwJu_aoPqc0c6nDXj_Hlboutrc8THjllh4h5W7RzY2teXmfaVAhDpF0W6dU5SJJ3KAl/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Wed, 07 Feb 2024 00:13:36 GMT\r\nContent-Length: 10680\r\nCache-Control: public, max-age=486920\r\nExpires: Mon, 31 Aug 2026 11:11:56 GMT\r\nDate: Tue, 25 Aug 2026 19:56:36 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10680,"size_decoded":12509,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"f560dfddca538273d2ef44ad1379fdbd","sha1":"ef73c4c9986ed6ad304a0287e349e6040dbc08b9","sha256":"a3e34c3995e097256c6cc67973fa39f0d968a0c9edcc1e68df68378554a96240","sha512":"876b24380c45cf5917be889044d146e05024f6ee695dbda20c76933abead1d95125ff66e1c3c2218db0e51aba10cd571b7b892d4de18220c7335ebcb1b300543","ssdeep":"192:sL3Ov7bSoTa9WQn+86Owj9TGbVFoHVAhtpAZk3PQ5sPCaqrfiQvUXFEZXlwk:S6Ha9jn+86OwBYVMATYHtvySlT","tlshash":"be22e14bdfaf0624c221f7187ae45401c374bcacb697171a0c5765ce31b2e856c74a4b","first_seen":"2026-08-25T19:57:11.549807Z","last_seen":"2026-08-25T19:57:11.549807Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/34yv7fq1p68-m.css","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.804Z","timestamp":1787687776804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/34yv7fq1p68-m.css HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"4203-19ffb9f4150\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 998130\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd0edb8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16899,"size_decoded":3131,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (8568)","md5":"6e9818212cf97287abab71485f310ec7","sha1":"96643c85620d2597ead43b05d0c7aa9a206731d9","sha256":"1488185dd3591324ac420aeb31b051925e1ca0eb2fc9aa9fc2944d02c9460c4d","sha512":"c5c2858c7fe44560018240065066ab57b0281a0cc5f95ee06aeb91e92db50fa1903b883864df004e77681df8c2cfefdc48cee85620415372f98f087621d245db","ssdeep":"384:JDo/O/BoXOAbovO1doPOmroHOjBoPOLnOinOJnOEnOTnOPE1xaqnORn:1JkLOd7dm3gRCn","tlshash":"b5728f35541ba909c2e7cd5234ce6e037c2944326be75523d92d2e68ceeb93b53e1b2c","first_seen":"2026-08-25T19:57:11.551294Z","last_seen":"2026-08-25T19:58:16.065577Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/header/logo_text_ru.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.045Z","timestamp":1787687777045,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/header/logo_text_ru.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 6856\r\ncf-ray: a30d28be9efd8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47718\r\ncache-control: public, max-age=86400\r\netag: \"158b7ba47e74df9aa2090fd69ab90e23\"\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:40 GMT\r\nserver: cloudflare\r\nx-amz-id-2: ThBTwbnqZ/9/Ekq7TglMFEVHJAOEzvjiaAodUt82hpEvAV7jVzhHMjxeU5kTtssqRAAzb8pebAOCcvmWjoKm2qS03zQVXTlp\r\nx-amz-request-id: ZQ9SVDJHZT64KH6S\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: L1pkZ.sRYAImOv7oK8qQ5vs7q70NZbdG\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6856,"size_decoded":7525,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"158b7ba47e74df9aa2090fd69ab90e23","sha1":"1ffc8a91d297e6d1522e3097962f9cf682c49c91","sha256":"0cd2c2f0c61a9357daaa1b66e9bd678227f78cd5dcb917d00ee57c8c1b8b242a","sha512":"da91c3108406b3ab956f3ba8853bf54478e9e0825058f457eb55bfe9dda2ec52c1a33768b3c023842d004dac03464bf465868781de27fac17dda3056c602361f","ssdeep":"96:kABTGUITLOBMLEyqXnSGAcLHP5OxdbADTKuuxlRb6KeHXEnnoBC82Tl4:bGUITacHqXnSG75OxGkxlMKSXEnoIl4","tlshash":"0fe1bf09db149e34ac83f30b5d23a78a1c717b215d609d6e464d0ddcdde89caca1b982","first_seen":"2026-08-10T05:31:31.7184Z","last_seen":"2026-08-25T19:58:16.13225Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":4,"connect":2,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/liveDrop/overlay.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.087Z","timestamp":1787687777087,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/liveDrop/overlay.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 18108\r\ncf-ray: a30d28bec83b8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 77580\r\ncache-control: public, max-age=86400\r\netag: \"4aa8dbfdf04a6fadd209699cb5d59a1e\"\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:43 GMT\r\nserver: cloudflare\r\nx-amz-id-2: OH7rTmrzHotVrFvIuNYB78vI91dvimX/HCxT/CUoE6f/8y8hMZFlUlwH320+3oLghQqrCf2SRxuTZTEzKCUwVRTlFH+0eIQQ\r\nx-amz-request-id: WNXW77P36PH45EDS\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 3WOlQuIT8aLNz09lrU6uDgOhdrBohjvZ\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":18108,"size_decoded":18778,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4aa8dbfdf04a6fadd209699cb5d59a1e","sha1":"61a2b0124a6a07f4d41aca092056a5fa63194a12","sha256":"bf4ab86fb299d1ae639887325e83c5970e74cd26509ffc7e4a78ca600454d3f5","sha512":"34661c70bb1ca9388cdef995bdde9130188c41f829d520f8c58f68d7f646852cd3f0dd6ddd589bd1103c2354e5c6fb3c965d38dd06a0b125db332d8c12393fe2","ssdeep":"384:5lDmMUc8peFKOIzK+y6rkf+b9Mj+OZr3VezSdN6/3MDU/sXUH6:5gMUIsOIXYfC9Mj+OZQzVv/tH6","tlshash":"2382d0816e066cd766776d7b240469d8761e718c406cc46f2be8ba0cce6fb1b8d4d32a","first_seen":"2026-08-10T05:31:31.70143Z","last_seen":"2026-08-25T19:58:16.174833Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru/inventory?_rsc=vWl4OF2djMO3dj8V","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.199Z","timestamp":1787687778199,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /ru/inventory?_rsc=vWl4OF2djMO3dj8V HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /ru/caser-one/main-app\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: text/x-component\r\nx-geo-country: NO\r\nx-nextjs-rewritten-path: /ru/caser-one/main-app/inventory\r\nx-middleware-rewrite: /ru/caser-one/main-app/inventory?_rsc=vWl4OF2djMO3dj8V\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28c5c9a28be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":301,"size_decoded":3213,"mime_type":"text/x-component","magic":"ASCII text","md5":"d8f5e48878858b381c5a09249a910de8","sha1":"2cb4921b4bf8fc7ad3736e7b4f0d6f7620e4d141","sha256":"32d8d4577a31fe6945c078837c30949f163007f96a8124276e19c543024e23b4","sha512":"b9a70e060342ebde1e22a6bbcb43e4164446866380a822f768a86fd94a1239eea81d2cca1bea1122fc16de0afeeedf039ff5f474dc09c337cb5e302810adf37a","ssdeep":"","tlshash":"08e08c2686811ae75cff41d1c02fd80b6a4e957b12ea5df0c1a41e3523e313a65832e2","first_seen":"2026-08-25T19:57:11.554162Z","last_seen":"2026-08-25T19:58:16.175341Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwi5Hf-jFk7uepV7d5Of2DBmacyO94j-NgXS2gqhAitzSQl8GpInvFOAFyD5AmFuFesBO8loDkML_g4w3diY4UyXj9jCxO6ihu5-8DT-N7rWFcbgcq/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:24.516Z","timestamp":1787687784516,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwi5Hf-jFk7uepV7d5Of2DBmacyO94j-NgXS2gqhAitzSQl8GpInvFOAFyD5AmFuFesBO8loDkML_g4w3diY4UyXj9jCxO6ihu5-8DT-N7rWFcbgcq/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:25 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 10550\r\nCache-Control: public, max-age=539880\r\nExpires: Tue, 01 Sep 2026 01:54:24 GMT\r\nDate: Tue, 25 Aug 2026 19:56:24 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10550,"size_decoded":12379,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"ec2ba9399a3688de15a59e23e35bbaaa","sha1":"2f7a6f2bd2fa3e6bb4e7d43a2e44e364d760db84","sha256":"b9d4be88b61e3dbe1247fc4b3b0dbd649327a753f73de8661e85f3a395ed698b","sha512":"cf752222d73140d7506ac3ecfc16e3a595ef605a64adf5316fb0f4a3b8d329857b80f231116391cbed9d3d44aeeb621e980b1ddf90530349872da7876ed22218","ssdeep":"192:PBP+TmZU96Oal3Kv2WItdZpTxB9S1KvRxjHXIWwwsPEzu6eMQjEv52dBwhbyxj02:ZPskU96Ou+tIHz9bQw4EfEu8BUzgt","tlshash":"2922b00d1a902d9d4512f49bf5e336785807fbfb0ca4197121de11bf4d2c47199bc6e1","first_seen":"2026-08-10T05:31:31.708621Z","last_seen":"2026-08-25T19:57:11.55548Z","times_seen":3,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2-j6diho78ige.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.828Z","timestamp":1787687776828,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/2-j6diho78ige.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"1cef5-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd2f988be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118517,"size_decoded":39319,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65242)","md5":"74cf6268306787e60e59281da7c077e0","sha1":"3f3db778e0d001e82a1754f0233512ad6961c63e","sha256":"78a7cd56555d3f031be9ea48d462744bcce0ae75451b7fff0f8d1f988c918701","sha512":"a40b0feca6ca9f204ff575508688605dfe110c3014efc885d24646470108c6a23a6eff3427baebee59dea78c7dd500e55d864abd02a221854ae753eb1205b1bd","ssdeep":"1536:G5UtLf9c0GV0s1GBAlwhk5L0Ne+5gqLP3lyYDFZXaYMXzJxQxnNi8FQ2AH6j7kgn:AQy0GlwKYNFgmPlVMXzgxYL6zj","tlshash":"95c339e5b667717897e91191a02a0104b27e097a180b402cf3f4dcef3969d46e1fbfb9","first_seen":"2026-08-25T19:57:11.556188Z","last_seen":"2026-08-25T19:58:16.118756Z","times_seen":2,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.002Z","timestamp":1787687777002,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/_next/static/chunks/34yv7fq1p68-m.css\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 19 Aug 2026 17:39:06 GMT\r\netag: W/\"9e48-1a01b1af290\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 422649\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28be4d558be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40520,"size_decoded":43356,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40520, version 1.0","md5":"a26850fc8493ad0366816dec92bda3ad","sha1":"03071098a384a8e08ec8e6ce8723f10c084e1dfd","sha256":"e0ea7bf0ba351883777665cb6d3a1f825387ec7a834e4fcbb8137f03a9bcff26","sha512":"55fa6bd5063a05b1a84cf9218f55cc608c9eb1d2834016ee14c3b97baf2539522e7609e767f25b831b242ea7e1a7f9ff58c479c6890586828356697321ba808d","ssdeep":"768:XbxH+0ROWFr0Ek7HmRu2XuUjKG0ZaT1k9bUbRslsAmVCeLQI:t9RFOtGbNjU4xObW+sRF","tlshash":"6503028be45aa15fe2e143a8f2832807585b5f3540b246b5a57d62b8c0c7b369fd7c0f","first_seen":"2025-08-14T08:22:51.320199Z","last_seen":"2026-08-25T19:58:16.115973Z","times_seen":42,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/api/live-drops","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.190Z","timestamp":1787687778190,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /api/live-drops HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: ru\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nContent-Type: application/json\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Language\r\ncache-control: public, max-age=30\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 10\r\nlast-modified: Tue, 25 Aug 2026 19:56:12 GMT\r\nexpires: Tue, 25 Aug 2026 19:56:48 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c5b95e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27489,"size_decoded":10454,"mime_type":"application/json","magic":"JSON text data","md5":"7b32bfe705ded89fdd6e3bcd3c662dc6","sha1":"41ef9362b1ec0a4f451e2001417b467146187d57","sha256":"ab825ce634b4a8d69d9673cb22975ff69fa740e8ddbe8e7541196c5a80b004ce","sha512":"a522ce7cc3fc82de92008c090737d79f3a2d1ea6db59a6948ce5e6c1da2bacbf922a5160c434a8cdb3693b4be5f8efa39b5c1dfd67c304b2c6b00f84dc68a858","ssdeep":"768:xX7lf4R6dSBsBNaPXPILgs2UEPVSltzICJw5JXeeHKkywgZPZxOdOZ:0PJqVh","tlshash":"97c2e8de81580dafdb0229dc6cd77d1d98063a6361d49e62d9efce50c0b58e2363816f","first_seen":"2026-08-25T19:57:11.557708Z","last_seen":"2026-08-25T19:57:11.557708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/sounds/Upgrade_Wheel_Roll_Fast.m4a","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.851Z","timestamp":1787687778851,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"OPTIONS /cdn/fa/sounds/Upgrade_Wheel_Roll_Fast.m4a HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: baggage,sentry-trace\r\nReferer: https://caser.one/\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: baggage,sentry-trace\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-max-age: 86400\r\nserver: cloudflare\r\ncf-ray: a30d28c9de668be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":306,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wjFU6s2neq1pJeOQC2mE_v5jovFlSha-kBkupjDLntqod3OSbAMjWJByELIOthe7moDgPuKw5QKL34tGzi-o3Xwbvy1v6_FCD_QOiqc-9g/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:35.351Z","timestamp":1787687795351,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wjFU6s2neq1pJeOQC2mE_v5jovFlSha-kBkupjDLntqod3OSbAMjWJByELIOthe7moDgPuKw5QKL34tGzi-o3Xwbvy1v6_FCD_QOiqc-9g/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 31 Mar 2025 23:00:19 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 7821\r\nCache-Control: public, max-age=412485\r\nExpires: Sun, 30 Aug 2026 14:31:20 GMT\r\nDate: Tue, 25 Aug 2026 19:56:35 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7821,"size_decoded":9649,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"5218aa76cc77e0beb2a872bfa27cff2e","sha1":"ecc2fbee2f3004aa4fac4f6cc2fdf9d9be2a0905","sha256":"b3b4916d982ec56b5a42abe76d940c0466ed85abc447c8e4ffcf300d8d21e507","sha512":"14e23fd9a032b17da1d24dd981bc7d382c36cfd69e6101987a3c9f20be478734f62460ec73655f79d36c8aab561970d38c8571d616cbb8ebf291ca16071b08db","ssdeep":"96:770Uk3OoS0yC99WrgLLmFcNMSCbi7BdpNea9DKdun3vlbd3xhy2Gnh0oFGV2unK1:7kDyC99WxFcCVmNLgmfHSs831","tlshash":"57f1afd817493b79a857ad3b4a43a47cdfe04e08ed59374879102ecf1caec102876e34","first_seen":"2026-08-25T19:57:11.559327Z","last_seen":"2026-08-25T19:57:11.559327Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/upgrade/bg.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.858Z","timestamp":1787687776858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/bg.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/upgrade/bg.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47716\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd58b78be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.005Z","timestamp":1787687777005,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/_next/static/chunks/34yv7fq1p68-m.css\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"63b0-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996501\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28be4d738be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25520,"size_decoded":27395,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25520, version 1.0","md5":"96e59d8ddd8db6744b7befc5a00b07f5","sha1":"8e1e04df23199a4ae26b41a82dd5e9bb6f8f17bd","sha256":"654a10e16314151c19a2adcfe65a18f4b8aa05bad373e578267cffb8f777965e","sha512":"134a7b084abf4fa71e3d6724ec01f3ad2d13299baa114f9c5786fe17e5e93e2ff49390ed17f3f82a6d7b6ffc21745658f6c0e29a37ab536c36d66d7a0038ef0f","ssdeep":"384:hBLfkY4jja1ObWBkh9lShbgW9A/vOv+Y7Ggj1K6bEPHv4myQLUWsqSgP3MUBQN:hBfa5HXOMWkk+Y7dj1fbjmJ1MYY","tlshash":"b2b2d17ce7fa20b590c5b61006dc3464e85f49ab1e685e4f80f541e7eb195326f9c039","first_seen":"2026-04-19T20:33:15.784832Z","last_seen":"2026-08-25T19:58:16.087341Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL1m5fn8Sdk_P2RZq1qKOSsA2KUyPt7_rdoTXnkkEoi6muAzYr6eS6VawZzCpF1QeFb4BHqm9TvNL7iswGK2opbjXKpmEuT-qQ/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.515Z","timestamp":1787687779515,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL1m5fn8Sdk_P2RZq1qKOSsA2KUyPt7_rdoTXnkkEoi6muAzYr6eS6VawZzCpF1QeFb4BHqm9TvNL7iswGK2opbjXKpmEuT-qQ/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:42 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 7620\r\nCache-Control: public, max-age=441840\r\nExpires: Sun, 30 Aug 2026 22:40:19 GMT\r\nDate: Tue, 25 Aug 2026 19:56:19 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7620,"size_decoded":9448,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"ed3c4758bf0135fe01ae9d368a2631af","sha1":"7128bd6bfcf7cc1fe286ba70d4d2430333f4bec0","sha256":"842276c204f918ade74032a134eff9414f4ce32a87af98dcbf4334556faae25f","sha512":"1b6f91ac44c86f7ea53a06cacf8b757713b7b28bae7f04d92f82efeff822f561c5b16aefa378554332d1d56861525c6f7440e98360781c858665a4f295076e48","ssdeep":"192:UrqpYWMDIoHEbu20mf5iK7AXWA+1Txbyx:UeFKGC2IcAlay","tlshash":"35f19ef650466a29aa4cb3ef168850b84db90543d92fed8fb2925c1de5b0e406735ccd","first_seen":"2026-08-25T19:57:11.560871Z","last_seen":"2026-08-25T19:57:11.560871Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/c9ff75a8daab03a0f3366258f94501f6-6a5f6cb8e1882.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:21.959Z","timestamp":1787687781959,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/c9ff75a8daab03a0f3366258f94501f6-6a5f6cb8e1882.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13896\r\ncf-ray: a30d28dd3fe18be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 581\r\ncache-control: public, max-age=14400\r\netag: \"9f6066c0412f7a1b0f6cff0521faa58d\"\r\nexpires: Tue, 25 Aug 2026 23:56:21 GMT\r\nlast-modified: Tue, 21 Jul 2026 12:57:30 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 8b6xKDsqUMoGTfTt0vqXkF4WWPBHia6SkMzO75GvKe1XFPcQ6Y43Eu/xzt6r9veOFJNQGBMSYx3c3DpklWfATh4oT6Ehxixg\r\nx-amz-request-id: DGZX0M2M95PV144W\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: bdkTpAgiKD7xMRFzQvM0o8XmGgGm7XBL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13896,"size_decoded":14555,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"9f6066c0412f7a1b0f6cff0521faa58d","sha1":"a84d31ef5feb405b8f2afb4fa3ff5b1b49f8abe7","sha256":"fd474a5faca5d8e2ceddef410d77b1808ccb476138b85695f984314cd141dc10","sha512":"f8e304dbca8161a56a83dd64c5e716b33f057770669c58e28b7c388ede52e501583445d438d710b1ab59762d21cc08a62a582baca333b4b9828c972373853f78","ssdeep":"384:QXfiPuFYl25AUseB/hg2ZCFr4PHkeZn16+46:gIll2WUHB/l8NKr46","tlshash":"6552cff5519fc2e4f0e786bd55a0de8f9efc622842cbb22e83e5326490135b42770935","first_seen":"2026-08-25T19:57:11.56249Z","last_seen":"2026-08-25T19:57:11.56249Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.caser.one/static/stylesheets/client_default_a7f5f2d.css","fqdn":"chat.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.329Z","timestamp":1787687778329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /static/stylesheets/client_default_a7f5f2d.css HTTP/1.1\r\nHost: chat.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=315360000\r\nexpires: Fri, 22 Aug 2036 19:56:18 GMT\r\nlast-modified: Tue, 25 Aug 2026 17:55:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nx-content-type-options: nosniff\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Authorization, X-Crisp-Client-Url\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 300\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a30d28c69d528be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131751,"size_decoded":14623,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65438)","md5":"eb855822c80793299431848e70183bbd","sha1":"3f09ff76eabdcd0bc686d5639626d73a78993a18","sha256":"d49b4a9ddf5cfafdf7d775eb7ca352c95be411b2e517e98470242377871a85ea","sha512":"6bcb136ba8372dcb0282772d97d651c1f55b9ee702b1405c5bb0965c4225b88812060b1722d966e798f62609cd5fb1de49454c92a23b15ebb5044e825ddc5787","ssdeep":"768:WdekSKA89FH4W4+SplFCDjwN7Fq4ADxbXWNrVa6QdJSbSuSESiS17DRn94yMR2cg:EekSKnSUjwrq4ADxbXWn0RnVv","tlshash":"c1d3728fb259043114d349a279c8f73d882d94bf8682ba3cc510aafd4ea54ff1778769","first_seen":"2026-08-25T19:57:11.564076Z","last_seen":"2026-08-25T19:58:16.099505Z","times_seen":2,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"chat.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMuvIWyS90YnpNWmpUruRiLrh4Hv8h1c4P6qJqE7cfWQWzCSlL0vtrk-GXHgkxlx5mrQntb_dXieOlQgC8F3EONY4UKm0oqwfGjEaTM/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.402Z","timestamp":1787687778402,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMuvIWyS90YnpNWmpUruRiLrh4Hv8h1c4P6qJqE7cfWQWzCSlL0vtrk-GXHgkxlx5mrQntb_dXieOlQgC8F3EONY4UKm0oqwfGjEaTM/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Wed, 07 Feb 2024 00:11:47 GMT\r\nContent-Length: 11615\r\nCache-Control: public, max-age=272744\r\nExpires: Fri, 28 Aug 2026 23:42:02 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11615,"size_decoded":13444,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b2257e4eb5c0cc53b81e3b88e5ee0fec","sha1":"dc687d7d650b293afff5f38cb0f873ff7fe72329","sha256":"8f429580b4e064459cbdc43952fe2d3f584855e07952240864745b1e71333957","sha512":"a9d5daf7ea43eb1992c7ae3b9e604f4fbe42d2f64f667c991dbfa41e53c9efc8ffd28dbd275ec5f99f3dc8558c01d3b7866216518ccf8b6f6f19e48a694ec6ce","ssdeep":"192:u4toQOCX6TClYwpkgtEohdL0+KL2veRzsUHvAg6aR9HmZcECYdYhYy1tJfBQNbr+:umX6TYYwC2Eovox3zsUvzR1mZuYdv84W","tlshash":"6332b0f5d6a2fb81db19a724dcaf03a5382a2baad330e65d5d3db0911c493e77402037","first_seen":"2026-08-25T19:57:11.565435Z","last_seen":"2026-08-25T19:57:11.565435Z","times_seen":1,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":9,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/461c037994936df4fc60ce0c594de645-69ebea5115b3e.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.414Z","timestamp":1787687778414,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/461c037994936df4fc60ce0c594de645-69ebea5115b3e.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 15458\r\ncf-ray: a30d28c71fc18be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6612\r\ncache-control: public, max-age=14400\r\netag: \"f0ce5120c90789599ccf13e4e073d69c\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Fri, 24 Apr 2026 22:10:26 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 1TLVuiArq2+IfJqkRIn2rrfGn3MCO5SpBrqWvhjaBK3EuRK0wV5yAtr1T35hqNZPprwXsNjCMC6dmGyu8qAb/hcqsLIoR4YY\r\nx-amz-request-id: 1VAN7K1TDHYNVK6D\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":15458,"size_decoded":16090,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"f0ce5120c90789599ccf13e4e073d69c","sha1":"009c15e9e4b2149eeb93a430181ddef6d59feb31","sha256":"5770bd9a5a520fa58c39ebb73844ce24fd0e7754308f06b898715e9ad408bbe5","sha512":"bc4bdf457735f73999cf052ce214b44c12a7ba64d613a22c64df2511f861f3672275f031b84578afdbb4365637ae8ccba1f90ae9ed9a4b2d03f1829a00a35b99","ssdeep":"384:bGxn59bTtm672OFebgGlRQDM/GeLJLU4sVd7rDWXq5D:CFJiYeDzQQeeLtgf7HWXq5D","tlshash":"5262d0330a82a5b0b6821c1d8b8c7e3642d4841917758bc27bcecf5c7b5ad2952329be","first_seen":"2026-08-25T19:57:11.566957Z","last_seen":"2026-08-25T19:57:11.566957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/b711e35e336cb9308fdc0413f400db3b-6a0d4421d79e0.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.433Z","timestamp":1787687778433,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/b711e35e336cb9308fdc0413f400db3b-6a0d4421d79e0.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8041\r\ncf-ray: a30d28c738698be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2612\r\ncache-control: public, max-age=14400\r\netag: \"ba095449b8ae751feceddb1ba1064e1d\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Wed, 20 May 2026 05:18:26 GMT\r\nserver: cloudflare\r\nx-amz-id-2: DuhyrQDtuuKJnR9t5XcUUawl2tdJ7Zw5iEXWsao9D3TWKDE1bpuVzKyr5u1UcG7vy0vdeSseGk2d+XZP+8+2OVJjPCCam6hM\r\nx-amz-request-id: CDSHA6JGFBWT8GF9\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8041,"size_decoded":8672,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"ba095449b8ae751feceddb1ba1064e1d","sha1":"c1ab5880b601819ee76f9867622da4de8965db59","sha256":"48094443f61139b26e8db3fe4a0e2ea64a27fb8108010a5573f5c6be5d6f845e","sha512":"3497d8fdc14fe6605309184dbc2389879c4fee5abf288a540572d5a1664fbdeea275e89299b80aaf09c734ffd8def6fadcad4626d8b25c38ea1e3310093a23c6","ssdeep":"192:4l2cQMXqyzROrHK0twEwFA2R5OuoBzHUEPWAZUe8:4l1awOVtwEIcdS","tlshash":"03f18e23539631e97306c9731da8ae2517c2fe927c92c86256e831f1bf5f934646089d","first_seen":"2026-08-25T19:57:11.568542Z","last_seen":"2026-08-25T19:58:16.160146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/435943bd7b83c55ab9df5728d65fa39c-69ddf1c17a65f.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.456Z","timestamp":1787687778456,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/435943bd7b83c55ab9df5728d65fa39c-69ddf1c17a65f.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10736\r\ncf-ray: a30d28c7592a8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3628\r\ncache-control: public, max-age=14400\r\netag: \"822521faad00ebe4107e6dae190efab3\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Tue, 14 Apr 2026 07:50:26 GMT\r\nserver: cloudflare\r\nx-amz-id-2: aGWpGdBa/t2wW577gmumh8RnUsLrMR6+avJMED/dfwXaiaCgne8+DRTexrPBf6bm6QWVdIzNLn66eGYV4cQfDAs+5w0SJqBW\r\nx-amz-request-id: PP7F9XA4X8ZT0TPQ\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10736,"size_decoded":11368,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x184, components 3","md5":"822521faad00ebe4107e6dae190efab3","sha1":"6356e1fea90e4c13e4cde45ca74c4e62f2bfd20b","sha256":"6ec037ee7694236f3efa84596d56db994c65348f5a177b8e70974d10f03b03b8","sha512":"b0de63b6d76d587fd18ef0958ba37c5a2654e59817c0e30ca69f88de65c646faaa0993576b9f5422a0bb2f6a9d5a54b44df11330243d7f1e6f5d6a9ab816dd51","ssdeep":"192:wzYmVD93S4Lig6hAalHBsZ83ceIBbGjyeYo6HIDV4C10IfXHS2y5Z9:wzTi4u24HBsWMeIBaec4bI/9UZ9","tlshash":"b622bf04579716edf1adb077a238ae6619cc3fa0e395462b9ffd1e84118ca821c85f23","first_seen":"2023-06-08T16:11:03Z","last_seen":"2026-08-25T19:57:11.5706Z","times_seen":35,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/aab02d5f82cf51973172ad630133ca71-6a17cd4f566e2.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:31.099Z","timestamp":1787687791099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/aab02d5f82cf51973172ad630133ca71-6a17cd4f566e2.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4237\r\ncf-ray: a30d29166d068be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1803\r\ncache-control: public, max-age=14400\r\netag: \"4024d6ad4614bd32918866a721ce008a\"\r\nexpires: Tue, 25 Aug 2026 23:56:31 GMT\r\nlast-modified: Thu, 28 May 2026 05:06:24 GMT\r\nserver: cloudflare\r\nx-amz-id-2: /5XtU+v+8ghEeztGofnFp/ppyMHOaCabK7soSVKdZRA+nTFa2EjOpdCnOfM3b9SmHBAaMnELTjU=\r\nx-amz-request-id: 55SCZZ93640EVQ2W\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4237,"size_decoded":4848,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"4024d6ad4614bd32918866a721ce008a","sha1":"dd8b38d8d01afc45d99fe5f179124a9129b05859","sha256":"4d307fad208b24ded3d87dc6236db036478f4932499b362494f4444b038e432c","sha512":"850cc7b82de436150952ef50ca8ee428c062674083e57986d2bc7c9dacee70e14b4740030289a57c32cbe6ccc765d41b4992a41ccb2d299c41e905adfc40548a","ssdeep":"48:MrfEl3HNfHaEmzTXEijMSyjDaEZcC69TEcjsT6P/utJTEcjGq20kvYttREge2QUk:m7jEiT42E969kOWDSBYPedUHKSht4SBM","tlshash":"37916cc94091aae0f9ebd23f54115d4327fdc5259d3a814f99e12900df436a32fb480e","first_seen":"2026-08-25T19:57:11.573068Z","last_seen":"2026-08-25T19:57:11.573068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/footer/online.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.907Z","timestamp":1787687776907,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/online.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/footer/online.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 77600\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bdaa838be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-TQ4MT2MS","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"172.217.19.232","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.250Z","timestamp":1787687778250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:13 GMT","end":"Wed, 28 Oct 2026 20:42:12 GMT"},"fingerprint":{"sha1":"68:4B:BE:E0:D8:D0:53:B7:6A:2B:23:0F:15:52:13:EA:A5:54:0C:33","sha256":"90:A2:40:57:FE:4D:B7:FF:6C:40:9B:6C:62:BA:6C:8D:74:59:95:60:8D:31:D6:81:7C:43:25:C5:5E:2C:D7:9F"}}},"request":{"raw":"GET /gtm.js?id=GTM-TQ4MT2MS HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nexpires: Tue, 25 Aug 2026 19:56:18 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Tue, 25 Aug 2026 19:21:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 126591\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":363824,"size_decoded":127241,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5101)","md5":"d18e7870e868672187d47fd37824ae7a","sha1":"6c1d65469af2cff95f63c62c2523dcfbe73fe97f","sha256":"6fdf1c3506879f275e930eb8c38b171620170f553e64f348f020d5ca9c6cb2db","sha512":"5f101c600652040a6867d7576a2f1875dd7d198ff2ba8e367ccf658ba429f4f9568e14bfbdb49dc4bfc77062b622c3718044d4ba54cef203f30b32accf2c7b4b","ssdeep":"6144:p3xs8hMk39tdZkzMtDHYcs2TWOEr33a5FElbJVxR:9UB8EdJd","tlshash":"6774f9cdb3d674229393e478503f018ba67a79a2f84cc895f186d8d42d74a9a4237f7c","first_seen":"2026-08-25T19:57:11.574979Z","last_seen":"2026-08-25T19:57:11.574979Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":12,"connect":8,"send":0,"wait":24,"receive":23,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/upgrade/arrow.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.299Z","timestamp":1787687779299,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/arrow.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28ccad4a8be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: KXo6rTKV6d6.Z4h5GSAkX0Vw9jBH0.Ow\r\naccess-control-allow-origin: *\r\nage: 47716\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:19 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:41 GMT\r\nserver: cloudflare\r\nx-amz-id-2: rw2rNw+cRIHaMDshmeRfZn3upRxhgCQmgB2eu7EytpRIrzgNzbGFm+I8TF7EB8IJeeH5WfLPTf0EWjdYunC9BObvsYL6aiiQ\r\nx-amz-request-id: RQGBCVVGG4E5EK9Z\r\netag: W/\"93c1a2d653b98d2915eb9fa1b6f4ece0\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":528,"size_decoded":958,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"93c1a2d653b98d2915eb9fa1b6f4ece0","sha1":"b23f5bc9584436acdaaef38a11514943d3e0c0c3","sha256":"8b072b3fc861edf192f160e0ac2c4d270917eb65d7d8f7cbfdaf15710335d6ae","sha512":"371513d1edf3ee7652fd2e315f7c760310d73767ea0faa40691252af3c2880c4ad77769021e73e3e19a7d341c2b279db6584ad5fba5a7200cfc2e83727dbdca6","ssdeep":"","tlshash":"04f059efc7cc11818545eb11999b3a2a2ef724f1e79bd9d461086b542d062e2ac9c868","first_seen":"2026-08-10T05:31:31.930671Z","last_seen":"2026-08-25T19:58:16.118225Z","times_seen":6,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/header/flagRu.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.868Z","timestamp":1787687776868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/header/flagRu.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/header/flagRu.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47714\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd69178be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/cookie/cookie.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.423Z","timestamp":1787687779423,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/cookie/cookie.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28cd690e8be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: iXIRJjeLuepXqU2Ena3nW8bJOgpfCDF.\r\naccess-control-allow-origin: *\r\nage: 47692\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:19 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: PhcAprzhn91+rWiw+gz9bgbV1Gdnwqzxpu4j4+12iuJbVdy3XhvCVdX6lXnUDbZSC7iHYhr22/CyvlLnlEvfT5h24/0EnmCw\r\nx-amz-request-id: BAXVFTWES6PM2CXX\r\netag: W/\"aca0425048775e272b2e607dacc6154a\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":783,"size_decoded":1035,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aca0425048775e272b2e607dacc6154a","sha1":"5b17f8891d671d1e502b261e1ba7b05fae7ffddf","sha256":"078057cd67dc95233ac240e98f0d8d175e26c1b9390ba53a28e3bcf0f362341a","sha512":"b308f05b560aafa35ceb239abed5bdc8bdd09931add878ea1fd09ed029162ec77187d8422c22914e8fa377109b5d277ab791510cdf9f0691c6dad722b9457ac3","ssdeep":"","tlshash":"c20100ec735d04cc4943ca64eb2a7a85673e95b47864cc78cfad95b290430a9f223800","first_seen":"2026-08-10T05:31:31.842058Z","last_seen":"2026-08-25T19:58:16.155246Z","times_seen":6,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMmuOW6a50NmptelvBb0SBrOm5rp-icV6qWvMfU5JvbDWDWSmbx047BqSSvglxwk42-EzYyqeXuRPwV2ApF5TPlK7EcaOkPHzQ/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:25.279Z","timestamp":1787687785279,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMmuOW6a50NmptelvBb0SBrOm5rp-icV6qWvMfU5JvbDWDWSmbx047BqSSvglxwk42-EzYyqeXuRPwV2ApF5TPlK7EcaOkPHzQ/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Wed, 07 Feb 2024 00:13:33 GMT\r\nContent-Length: 10957\r\nCache-Control: public, max-age=170276\r\nExpires: Thu, 27 Aug 2026 19:14:21 GMT\r\nDate: Tue, 25 Aug 2026 19:56:25 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10957,"size_decoded":12786,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"2509c1920db677b5acb11a21c0884c73","sha1":"8ada7e09945dbba9e936dd10ed949664b28e196f","sha256":"a9356584b86e7e663f05a0b144ce78adcb7c454ba6d3d311a921d867295e19e8","sha512":"85ce76f7a8a31f545e52a045a418a9bc874ed94939382c6fd71719ef61d073274de9f55d81ea4a52fd5209bc0754b8aa1a531c0c887e43b9e501ad335de95518","ssdeep":"192:VE/0OJ/qvL3AyqPjRousw1m/JQ4rXdu0ZSrmUkA8WHpYvQMlzb8yNqlAuMQVqlvn:VE/0OJyvzJoV9T1AQqBIrmUIMMpYSYAn","tlshash":"eb32d029a6e8fd71630b0ea14902235f3fcb55614f2a589050bfaded1d84b3f9c0b236","first_seen":"2026-08-25T19:57:11.580776Z","last_seen":"2026-08-25T19:57:11.580776Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJKz2lu_XsnXwtmkJjSU91dh8bj5_0ruQhb4iqnp8ytP5vO6Z7Z-H_OSHnSFzes4teIxSX_qzB515D6Gm9iuI3zEb1VxW5pzQrMKt0awwNCzMuiz5FCIjZUFk3u_gZXg1Q/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:39.328Z","timestamp":1787687799328,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJKz2lu_XsnXwtmkJjSU91dh8bj5_0ruQhb4iqnp8ytP5vO6Z7Z-H_OSHnSFzes4teIxSX_qzB515D6Gm9iuI3zEb1VxW5pzQrMKt0awwNCzMuiz5FCIjZUFk3u_gZXg1Q/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Tue, 23 Aug 2022 23:44:13 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8398\r\nCache-Control: public, max-age=404362\r\nExpires: Sun, 30 Aug 2026 12:16:01 GMT\r\nDate: Tue, 25 Aug 2026 19:56:39 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8398,"size_decoded":10226,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"bf7c06f9dae19d363bc6ecdeee42f4f1","sha1":"bbddc56b5b27876a9bab055f47118c7f7b4c7c2f","sha256":"8de84bad2184b271b44cf6627ec23d160c4f5945e4c9d02b1d0a1ab3e6240b29","sha512":"83603a6ac92b62735fdd4cc34e1a846665cc5bff2834d7a0a3d9be734787077cb4598899594145a51bae5ccd56f849ca9296f6250e0dfde49dbbc7546ebb8c5b","ssdeep":"192:oLL177VOz8Fmvrxo34sg94Q16qyZw6Xv5oiMHFlLm:oLLB7Vivrzs48qyxvqiaI","tlshash":"e002aefbba05b31142844c784d72c841f263fa8b5936329c5d85cc5d3e4be264c8a7d9","first_seen":"2026-08-25T19:57:11.583413Z","last_seen":"2026-08-25T19:57:11.583413Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/30ptd5lob-9vm.css","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.811Z","timestamp":1787687776811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/30ptd5lob-9vm.css HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"33e-1a03408d060\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncontent-encoding: br\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd1f138be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":830,"size_decoded":3132,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (830), with no line terminators","md5":"ce6303ad159100834127284203d9ce93","sha1":"43db0fef65eabed6c9587953276936838be2b792","sha256":"be4988771d54f2ab4bb240bf12cb4efab0bd152aee5f16d38b709986153f28ba","sha512":"390114412c2ede56598def5754197d0aaf6d41e3e7a98fb77144b557bcdcf01e55231d7980790746e80ee10d65b63360cf86d277c1bd2a33781ffc6bb1e0bde9","ssdeep":"","tlshash":"3501441b118410a9f181c8f4d0f8a255f91cf8ab81862bbc519de6bba743f098475c93","first_seen":"2026-08-25T19:57:11.585724Z","last_seen":"2026-08-25T19:58:16.140015Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/63bb01a8e5db095ab2c174f09e0f6325-69dfdf9d64073.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.462Z","timestamp":1787687778462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/63bb01a8e5db095ab2c174f09e0f6325-69dfdf9d64073.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10518\r\ncf-ray: a30d28c7694a8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6616\r\ncache-control: public, max-age=14400\r\netag: \"2893aa13248ced6105e0464a9c92d31d\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Wed, 15 Apr 2026 18:57:34 GMT\r\nserver: cloudflare\r\nx-amz-id-2: sMI2fhvEsnuTapPv+16PS6RE2+/ETgnhTHMDSOK/hVw6k6y91HtgC0JQnucUSWhZVKMahPCJqrE=\r\nx-amz-request-id: DBESCGNJGFZ9K88Z\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":10518,"size_decoded":11130,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x184, components 3","md5":"2893aa13248ced6105e0464a9c92d31d","sha1":"b1c3e2bcff16869007275cfc39b7f8ffcf0cd426","sha256":"cf302570eadde197c063366e2dc7e7f259d8c1a2ff6defc666760f9f0d3157f5","sha512":"28cdb6d9f6097afcced66c13d37d940e8c89e01b02e080aef2546aac74fc81cfce10d27e13f1bc4e3f4a44376daa640b8025cf2ae3cd354157d9f331d7e8788a","ssdeep":"192:queCSodBZ0wLEFxwv1mTw2prjWtQcZe1K2SK1+hvvDlXL2bUt8SnaZ:redwLE/wv8kLTW4K1+1vDl72AtM","tlshash":"e022c01e2a908d6b09980978fd7794da63fca1b1def040de569919f57c089974b038cc","first_seen":"2026-08-25T19:57:11.589081Z","last_seen":"2026-08-25T19:57:11.589081Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/main/bg-cache.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.843Z","timestamp":1787687776843,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/main/bg-cache.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/main/bg-cache.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47711\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd48178be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/general/buttonBg.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.059Z","timestamp":1787687777059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/general/buttonBg.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 13068\r\ncf-ray: a30d28be9f468be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\netag: \"fab66990d1c8f0bd6ecfa0dad3c0713f\"\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:42 GMT\r\nserver: cloudflare\r\nx-amz-id-2: z0Ey+OAlpnUFk7GY1WLx29c9S3omfOZYnkY97JrhULp1eKjPQjVM3CDF/R5T8N/1qSYoKAjpbcdDcVzRIshp6Y7z2yM9hHa/\r\nx-amz-request-id: ZQ9JWD4MRHY881G6\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 0S8SpZSDrFkBBmmeNL..ulV4wYm20eiw\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13068,"size_decoded":13738,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fab66990d1c8f0bd6ecfa0dad3c0713f","sha1":"8969c98120ecf43534df18eedc0f122d81f8cd64","sha256":"f987429db013a5f91c24e54d2ca0b3b4f148c537321ca70a5cae7e2c8c12006c","sha512":"4f03adcc6596f6660d90d8f86e6eecfe4b6ac0dc0c2b1b522415f16ed7ca8d6cd10cc13d1b2213c539cab525be373e56137a7b4d2a062006e9206f4f05a43edc","ssdeep":"384:2DtC4zwzXosA4du0TxQF0vlfSZ2wCY1VBYvFKy:LX1A4vdLvUEU1YvYy","tlshash":"2d42c0cdfcd0c1f661408e3a28296adba5779b00c467db315e58ae7448d354c6dda817","first_seen":"2026-08-10T05:31:31.778815Z","last_seen":"2026-08-25T19:58:16.116408Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL0kp_0-B1c_M2qfaVhH_KWHGKE1e9lj-ZmQy22myIxtjOMmYrGLSLANkI-C5AjFOcM5EaxxtTmPrnl4Q2Ki91Eyyz32y1Luyk44u4LUqEjr_ff3BaBb-MmOWu8Lw/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.473Z","timestamp":1787687778473,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL0kp_0-B1c_M2qfaVhH_KWHGKE1e9lj-ZmQy22myIxtjOMmYrGLSLANkI-C5AjFOcM5EaxxtTmPrnl4Q2Ki91Eyyz32y1Luyk44u4LUqEjr_ff3BaBb-MmOWu8Lw/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:44 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 10055\r\nCache-Control: public, max-age=360165\r\nExpires: Sat, 29 Aug 2026 23:59:03 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10055,"size_decoded":11884,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"affdfec35f58dad660394436d795a5c5","sha1":"9d16c83d942cac360924d93f622af31a290fd5b4","sha256":"e6232898b2777e29b4e83ef2a83d9f7596d54afdcd5e689c0ea4fdee396049ce","sha512":"1e5b3350a35d2e36fa3a2946349642f649dc350948a5347ce2879e55234877b056838922fd51adffe22c6456595b0474dc2828b2fad6b1b8eb88b7ac66b5b726","ssdeep":"192:FU7f9FwC3wnqGyXlTgp6QRpNNPHZVklQ/BDzxad9AYKJ33Xf3u:FWVFywXI6aHHBJdadmYuv3u","tlshash":"1022c0b9a071ddc4021e73a67d4c55586ca3f4357f1f64e00932c33e95e63d0dad1626","first_seen":"2026-08-25T19:57:11.599865Z","last_seen":"2026-08-25T19:57:11.599865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL5lYayrXIL0OGhbZt5JfGfMWCcyPpitfNWQyC0nQlpsWvXy9-rdSiePQEkWZt0QuEI5kXsldXjMe3k5Qfag91CzyX-hyNL6zErvbj1scXf1A/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.765Z","timestamp":1787687778765,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL5lYayrXIL0OGhbZt5JfGfMWCcyPpitfNWQyC0nQlpsWvXy9-rdSiePQEkWZt0QuEI5kXsldXjMe3k5Qfag91CzyX-hyNL6zErvbj1scXf1A/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 31 Mar 2025 23:00:22 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 72500\r\nCache-Control: public, max-age=276474\r\nExpires: Sat, 29 Aug 2026 00:44:12 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":72500,"size_decoded":74329,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"46dbdecffc18a7d46458e3da7ddfd537","sha1":"66820ae0be5502203769d569ec0f81855c25996e","sha256":"65ff427e78db5dbe24501a88232dbf44d3ee72b6828892899e63d900e20185bc","sha512":"d47c731d8b5babf392058a3130466e5f3bac163d3010a27744ce6fbe13bb730c8490c36b9e1ae2f6f811ced0e34fc8b3939e4791efc0044ee1191f1569302f1d","ssdeep":"1536:yW0IABicEiCZNqN8GDpxo+H6MDhpCbZE5LS/lsD8F/Q46PzunV:yWCMiCrqN8UpG+H/Dv5LS/lHF/e7unV","tlshash":"3f63026003bc6842d59c0ffa5ed2bc2768be50c72e45a06a3d7da917d20a2b4669f0d7","first_seen":"2026-08-25T19:57:11.603761Z","last_seen":"2026-08-25T19:58:16.164322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/d74ec6e39a2cfe79bd344ecd48324783-69e9430830265.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:35.354Z","timestamp":1787687795354,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/d74ec6e39a2cfe79bd344ecd48324783-69e9430830265.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:35 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6792\r\ncf-ray: a30d2930ffbe8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 159\r\ncache-control: public, max-age=14400\r\netag: \"48c70a42831e4a55d0a70005c0c862b9\"\r\nexpires: Tue, 25 Aug 2026 23:56:35 GMT\r\nlast-modified: Wed, 22 Apr 2026 21:52:09 GMT\r\nserver: cloudflare\r\nx-amz-id-2: NPYa4iROaOwGu6CtQarezgovuelS7YvHLMt5GXWCJEtesHSafSCf/q3CohJ9xsy2ekNjDWQIoP83kd6+HVJke7eGHJeoXbsQ\r\nx-amz-request-id: H3VTET13B4RRYV1X\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6792,"size_decoded":7422,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"48c70a42831e4a55d0a70005c0c862b9","sha1":"a8ee87c9b30e92f0a4b034670e15555be52adfe7","sha256":"ff9108a2a25571aec9aedb0fef5b16322672ddbb1ce1825a8e87ff59044e73bf","sha512":"a84d0b16aac19e9e93f5805c938d774e27279bc7d46c13d2d65e4ea47807a6b88fd7fee1a84e133948231dc23c709273d5d81d7f13bf0f0e32f3dd602116d550","ssdeep":"192:PgDR4DjA54YGjqH2BYOErvTPp1hRQYmduSIDw:PgODjdYGjKAo7RaYmduSIDw","tlshash":"49e18ca31b951ec0fb27e7fc92e42e0329d9a9504a96cdf91fe7e420180904dd19f6dd","first_seen":"2026-08-25T19:57:11.604908Z","last_seen":"2026-08-25T19:57:11.604908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/0b6e195f8fc87e16ef606cee9fe18588-69e91491a94b2.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:41.012Z","timestamp":1787687801012,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/0b6e195f8fc87e16ef606cee9fe18588-69e91491a94b2.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9539\r\ncf-ray: a30d295458458be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3658\r\ncache-control: public, max-age=14400\r\netag: \"54027806e26a79e0bbb38780c7ce787b\"\r\nexpires: Tue, 25 Aug 2026 23:56:41 GMT\r\nlast-modified: Wed, 22 Apr 2026 18:33:54 GMT\r\nserver: cloudflare\r\nx-amz-id-2: PoFtFZhXL5wLA8Y1bXJa3qTtbMw+bfuMbK2fOu02JRS7CJqhl6ykcg3/Jf52QhQtcYZKAF92av47qKPJVKM5OZawodnjj2Th\r\nx-amz-request-id: VKV6QTJQG76910N0\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9539,"size_decoded":10170,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"54027806e26a79e0bbb38780c7ce787b","sha1":"170f42b11cd547bc65f89fbc2fd2eb4b3773c7b4","sha256":"21af753a59694043d06171c348b93c94485e4ad4dac1519efb946a448940e871","sha512":"33120df24758d335bb661ebc6a114c1c68fe6694f565dac264a5d99494b5803b4faa05806b0851c719c61d5fa74f6dfd5050c7aa6199189d186e24d8f9c7a0b4","ssdeep":"192:7+EHKdlOjj/ytaoafQowG9TsbC48GEptB+MlNDInE10e8W/gpC:7+pTMcaoafQov9b5GluD6E1x/F","tlshash":"5712aed2465e6ed5fa2c0b1429312e1f97fce590885ef0c73af8bbe9990b9089241364","first_seen":"2026-08-25T19:57:11.606993Z","last_seen":"2026-08-25T19:57:11.606993Z","times_seen":1,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/12o_qz1yhki-_.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.825Z","timestamp":1787687776825,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/12o_qz1yhki-_.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 14 Aug 2026 07:54:25 GMT\r\netag: W/\"a0c2-19fff43db68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 894887\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd2f7f8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41154,"size_decoded":15271,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31668)","md5":"8918c52430ceed0b48bfdf3363f64690","sha1":"0fc71bab87227b88855c64fbd1a9955121563ace","sha256":"73b7d8990f5a779331b7cfe1a381495d1b6232b410d25e0c76704e67dd4e618e","sha512":"b4511677f95841d927fe78ee22be63503bddd89c2604e62756454b9134a3f861def7ee5ed4384664be09fcb4b8305759b222bf3e26e0f7ac0158c8061d4832c5","ssdeep":"768:nSUw3fDwhHJNPkOsCH71yZ+ATNkzzZLKFbldMgmta33v5aCEovhKaBtl5N29sBaN:U3bwhHJNPkOsMIjT3oy3v5aCEz+vPaFR","tlshash":"2403b4a1a28131260e8353d6542903095fbe79b4178c541fb76c9ee72d52cca4bbeff2","first_seen":"2026-08-25T19:57:11.60896Z","last_seen":"2026-08-25T19:58:16.107857Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/16or-h3u066lk.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.833Z","timestamp":1787687776833,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/16or-h3u066lk.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"265-1a03408d060\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncontent-encoding: br\r\nage: 108131\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd3fc78be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":613,"size_decoded":3240,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"55a2d71288a068a24c7b4e51eeb85872","sha1":"477b5fc552ed02f23950300a27cbeeea7f242f97","sha256":"724c9cce13cce523e33faeb01ac3537d5ffb280bcd7fb1ca02bbd69b7e0d5902","sha512":"f7309e9ee3071276a11bd925fce386d1477bbaf2e0f944ec1282f82fa4b4a860f7dd48501c636ddefed48a235762ec92367b6999120c47566cc8ba93f471f512","ssdeep":"","tlshash":"48f0d8442e209094162e05dcc23f810732a12a3f83ce3231d17c88702a38baa325928a","first_seen":"2026-08-25T19:57:11.610741Z","last_seen":"2026-08-25T19:58:16.130293Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLimcO1qx1I_826abRoH_ScGnSv1u9gtfJWQiy3nAgq_WjSzIn7dXiRbQBzA5smTbYO5hPsm4GxYui3tQSMidoQxXiqhnwa7np1o7FVFqHxgf0/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:38.695Z","timestamp":1787687798695,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLimcO1qx1I_826abRoH_ScGnSv1u9gtfJWQiy3nAgq_WjSzIn7dXiRbQBzA5smTbYO5hPsm4GxYui3tQSMidoQxXiqhnwa7np1o7FVFqHxgf0/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:27 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8575\r\nCache-Control: public, max-age=239845\r\nExpires: Fri, 28 Aug 2026 14:34:03 GMT\r\nDate: Tue, 25 Aug 2026 19:56:38 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8575,"size_decoded":10403,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"c02603bcad2e9bfa6d3811a1672dbf72","sha1":"081913f2296cc9ce83d4ca10264cd2f74affcfed","sha256":"11d3cd74cd8f8f82356a7358c62456f77dfe8a17ed70472a86138534817563fb","sha512":"bfcb8f46d97acb9bc040cd3460b3d0f4be780da6e0adf958d67be2a7f43ac15f95833a2643cb09f0f40a1d46a4b7b89540ed6aec7dc49943279d1baa8c8f51a3","ssdeep":"192:PZORx9wueqcd0FgmRO7nowJJMrWuQy97CH4TOwSaQ9wYxcI8CH:PZORPp0owJq7ewOwS59p8c","tlshash":"aa029ec56d01c696eaccb18fbf33f09467989c191be822902d11943ee4277dcd61eae4","first_seen":"2026-08-25T19:57:11.613128Z","last_seen":"2026-08-25T19:57:11.613128Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/20xsc67yv1u55.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.841Z","timestamp":1787687776841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/20xsc67yv1u55.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"15758-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 56718\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd48028be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87896,"size_decoded":24359,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"61577bd9d2b17a7433b74902dab621a1","sha1":"cb8432dd9cca63d4e06c9b2fbe335a05fc3dca36","sha256":"57a42eda3c92f1d9bc01d246aeda6fbffe5445ea9e76ca68420da1758d8005b8","sha512":"3ebc17b1e07c530a5903fd44de8b41c638f86441697b2bd880ee43123f51bebd5aa6a46698a4bbc9f4e3385991e976c243fbb9db97c4034985dc61016eeef778","ssdeep":"1536:zN5V3PcXsVZHDEj1iRHLdH3y8PkGGMBIapy3yGxRtwBIYf5lrYzoZzsmwj/xXo/L:R5V3UXsVZHDEj1iRHLdHi8PkGGMBIapz","tlshash":"0e83e9507112baece9223594e57e800e706dafdcd90ac91ab2bd3c241d860d4b797fdb","first_seen":"2026-08-25T19:57:11.615715Z","last_seen":"2026-08-25T19:58:16.12466Z","times_seen":2,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru/rewards?_rsc=vWl4OF2djMO3dj8V","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.198Z","timestamp":1787687778198,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /ru/rewards?_rsc=vWl4OF2djMO3dj8V HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /ru/caser-one/main-app\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: text/x-component\r\nx-geo-country: NO\r\nx-nextjs-rewritten-path: /ru/caser-one/main-app/rewards\r\nx-middleware-rewrite: /ru/caser-one/main-app/rewards?_rsc=vWl4OF2djMO3dj8V\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28c5b9908be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":299,"size_decoded":3209,"mime_type":"text/x-component","magic":"ASCII text","md5":"c9c4596a50aee9a0c6f6092c82dce0ab","sha1":"aff25895118311bbe840eadd34ecf905269b652e","sha256":"150c7c7e32624e197c24944cda34c40cbfd50e3c77c2ad000b344c8acd1f679d","sha512":"12664356f9dba2aaf018dfbda244dafeb96ebb5368df3615ff4078e31a3a77b6404cd856ba2e9099bff9c5b76b6ed2b112cb30b7d5e6b50e26c16d9698179316","ssdeep":"","tlshash":"25e08c2686401ae75cff40d1c02fe80b694e953b12ea5cf0c4a41e2523a313a65832e2","first_seen":"2026-08-25T19:57:11.617535Z","last_seen":"2026-08-25T19:58:16.190654Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMmxPSnHtwI6547z1V_oUxjiipPys3pd7qaoOf05cKjAXmXJlOogtLZsGy3jwU5-t2mBzNqtdnvEPwMkCpZuBbldZYbUhmA/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.768Z","timestamp":1787687778768,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMmxPSnHtwI6547z1V_oUxjiipPys3pd7qaoOf05cKjAXmXJlOogtLZsGy3jwU5-t2mBzNqtdnvEPwMkCpZuBbldZYbUhmA/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Thu, 21 Mar 2024 01:46:18 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 95643\r\nCache-Control: public, max-age=117110\r\nExpires: Thu, 27 Aug 2026 04:28:08 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95643,"size_decoded":97472,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"aa980af55e607703bbb16722d504720a","sha1":"3ad202c9c5fae72884e7d5cd00d5b5031e54136f","sha256":"4deb766e996ef1f5b1597a071d039940b52f67a770056a883ef61aa7d2d0ba3c","sha512":"8e8895f73654ebfe41fc2163cbc818651bdb47843782dd462dd73ac114900def8b4a18f310d9a2155bd8b16048f173eedfaaf1f1e74efbec7dba96ce35d1d499","ssdeep":"1536:8zWmg7aTEnUOpc+JUX1O9xSlC97tbImSSk4u8wgezSSuL1xRs7q6lsvtrR:8Hg7aTotuw9wsMbSI8wg+SlL1Ps7HutF","tlshash":"ff93028c05c26c74d8f79830a32e4656e41c4f7783a16c99cf67be4e396b04b291a5bb","first_seen":"2026-08-25T19:57:11.619397Z","last_seen":"2026-08-25T19:58:16.077837Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL1m5fn8Sdk6OGRbKFsJ_yWMWKIztF7teVgWiT9l0kk62TSztz_J37BOwUiApV2FLNfsRmxk4W2Nujm4VTYi4JEyy6qiTQJsHg2Prd1sg/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:31.097Z","timestamp":1787687791097,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL1m5fn8Sdk6OGRbKFsJ_yWMWKIztF7teVgWiT9l0kk62TSztz_J37BOwUiApV2FLNfsRmxk4W2Nujm4VTYi4JEyy6qiTQJsHg2Prd1sg/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:41 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 6963\r\nCache-Control: public, max-age=364181\r\nExpires: Sun, 30 Aug 2026 01:06:12 GMT\r\nDate: Tue, 25 Aug 2026 19:56:31 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6963,"size_decoded":8791,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"d3900ce9aa3f0ea2df9cf4e8234e247c","sha1":"32416b7f38f0013c656cdb57ec6135ec8982084c","sha256":"c87d28b14ad1a6e2f3947af8a8206327834df3d18df19a62c01180057fa48af6","sha512":"091448d5c81399577cc688569e839c5d02b90279bb269cea18e6892aa9c1192c51675a7819b83ea8f0afe93c3bdeef9a23fade9eac9440cec629e390e37c2e9b","ssdeep":"192:XVEkn60JamfRxSBKylk4C+t+/PCuR2xBCvRF02d2:XSQpO1C+t+/KK2C5P4","tlshash":"05e1af386999174c0695bf57db5186c5042971b971322a3538fac1138cbdfef50c51d1","first_seen":"2026-08-25T19:57:11.621186Z","last_seen":"2026-08-25T19:57:11.621186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrics.caser.one/web/v4/xxJkFDXmQQzv2KYlQubQ?ci=jsl/4.1.3","fqdn":"metrics.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"172.66.1.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.181Z","timestamp":1787687778181,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metrics.caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:26:22 GMT","end":"Thu, 12 Nov 2026 06:26:17 GMT"},"fingerprint":{"sha1":"AF:B4:A4:B4:E8:98:D8:CE:3E:B3:FE:7D:4B:C6:B7:9D:5E:91:66:90","sha256":"D7:41:55:4D:52:E1:BF:0C:F6:BA:07:63:56:CD:2B:38:17:76:33:46:71:15:D7:80:F6:B2:12:45:D6:F7:06:38"}}},"request":{"raw":"GET /web/v4/xxJkFDXmQQzv2KYlQubQ?ci=jsl/4.1.3 HTTP/1.1\r\nHost: metrics.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a30d28c75a481a30-OSL\r\ncf-cache-status: HIT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nage: 368605\r\ncache-control: public, max-age=3667, s-maxage=579687\r\ntiming-allow-origin: *\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\netag: W/\"b9GJUSZW2hnw3l++6WMhchgulKk\"\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":194060,"size_decoded":75872,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65438)","md5":"54fa1d53ffc9625a9c03ed35e9276b74","sha1":"6fd189512656da19f0de5fbee9632172182e94a9","sha256":"724297f789fa4362c0f42c531dc0869ba1aab6c484a779f167a27afd0cf83491","sha512":"378ff6198784384139542f007aab2402e48fb151f810518f704a54830d51e837235ad8c2a8fa965be94a61bb796f18feee805f368d233da3d488538ae012dd1c","ssdeep":"3072:fEyFQ7SbohDTvDbq9y8nni76mtR/6w+pbhoTx:N67S6snnmtRSwtx","tlshash":"3d14a3d8b2e6f2916372eca140bb040af67f3c96350c5984c1199ad53e3958bda37f1e","first_seen":"2026-08-25T19:57:11.623037Z","last_seen":"2026-08-25T19:58:16.131757Z","times_seen":2,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":6,"connect":253,"send":0,"wait":28,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"metrics.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/api/items/shop?limit=16\u0026offset=0\u0026sortBy=price\u0026sortDirection=ASC","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.191Z","timestamp":1787687778191,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /api/items/shop?limit=16\u0026offset=0\u0026sortBy=price\u0026sortDirection=ASC HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: ru\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nContent-Type: application/json\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Language\r\ncache-control: no-store, private\r\nset-cookie: __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg; expires=Wed, 29 Sep 2027 19:56:18 GMT; Max-Age=34560000; path=/; secure; httponly; samesite=lax\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28c5b9648be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Host-_cdid","value":"v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg","quoted":false,"path":"/","expires":"2027-09-29T19:56:18Z","raw_expires":"Wed, 29 Sep 2027 19:56:18 GMT","max_age":34560000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg; expires=Wed, 29 Sep 2027 19:56:18 GMT; Max-Age=34560000; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7475,"size_decoded":4925,"mime_type":"application/json","magic":"JSON text data","md5":"f230b9455f5baa4c442ad2d417420071","sha1":"fa352237c5ae19c02732b32f88bf66ddf26bd885","sha256":"bb601d6c4cc8a5dee7b9e39ab6ba886984f526c0a07da636d86d589fc44a60da","sha512":"f52bad969cccfd3e673bc39f84ea65844ed956d08a0920446715ce0d88cb706d6d431bf67f335ee18159c97c1a7dc23029bd74da5401139cf22bff28f9bfeaad","ssdeep":"192:r02WUxFW7MXaLXTQpEvLla/okL5Yn5Shhsnne7bJ1S:4ZCU7hTG05yDeUvcnefrS","tlshash":"2bf173e592948d3f6f8679c53c87aa19d4472a1330d56f53a5db8c20d0fa8622e3c49f","first_seen":"2026-08-25T19:57:11.625299Z","last_seen":"2026-08-25T19:58:16.083678Z","times_seen":2,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.004Z","timestamp":1787687777004,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/_next/static/chunks/34yv7fq1p68-m.css\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 19 Aug 2026 17:39:06 GMT\r\netag: W/\"9e48-1a01b1af290\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 422649\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28be4d6b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40520,"size_decoded":43356,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40520, version 1.0","md5":"a26850fc8493ad0366816dec92bda3ad","sha1":"03071098a384a8e08ec8e6ce8723f10c084e1dfd","sha256":"e0ea7bf0ba351883777665cb6d3a1f825387ec7a834e4fcbb8137f03a9bcff26","sha512":"55fa6bd5063a05b1a84cf9218f55cc608c9eb1d2834016ee14c3b97baf2539522e7609e767f25b831b242ea7e1a7f9ff58c479c6890586828356697321ba808d","ssdeep":"768:XbxH+0ROWFr0Ek7HmRu2XuUjKG0ZaT1k9bUbRslsAmVCeLQI:t9RFOtGbNjU4xObW+sRF","tlshash":"6503028be45aa15fe2e143a8f2832807585b5f3540b246b5a57d62b8c0c7b369fd7c0f","first_seen":"2025-08-14T08:22:51.320199Z","last_seen":"2026-08-25T19:58:16.115973Z","times_seen":42,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.007Z","timestamp":1787687777007,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/_next/static/chunks/34yv7fq1p68-m.css\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"63b0-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996501\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28be4d838be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25520,"size_decoded":27395,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25520, version 1.0","md5":"96e59d8ddd8db6744b7befc5a00b07f5","sha1":"8e1e04df23199a4ae26b41a82dd5e9bb6f8f17bd","sha256":"654a10e16314151c19a2adcfe65a18f4b8aa05bad373e578267cffb8f777965e","sha512":"134a7b084abf4fa71e3d6724ec01f3ad2d13299baa114f9c5786fe17e5e93e2ff49390ed17f3f82a6d7b6ffc21745658f6c0e29a37ab536c36d66d7a0038ef0f","ssdeep":"384:hBLfkY4jja1ObWBkh9lShbgW9A/vOv+Y7Ggj1K6bEPHv4myQLUWsqSgP3MUBQN:hBfa5HXOMWkk+Y7dj1fbjmJ1MYY","tlshash":"b2b2d17ce7fa20b590c5b61006dc3464e85f49ab1e685e4f80f541e7eb195326f9c039","first_seen":"2026-04-19T20:33:15.784832Z","last_seen":"2026-08-25T19:58:16.087341Z","times_seen":19,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/header/flagRu.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.081Z","timestamp":1787687777081,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/header/flagRu.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28becffa8be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: PRqiFEYkDs.BdmGSjAOIUVXMzN.UUvEB\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:40 GMT\r\nserver: cloudflare\r\nx-amz-id-2: YZ6NKw724NAfSYVFEVPJn6bCUxOiUuCbILHgbUA3Sh2gX29wNhnblf5Dc2s6QQlMrgvT+NEK0jpFpIV4IcapBkqrZmZRyOO/\r\nx-amz-request-id: ZQ9KGTHMCRAHS2HS\r\netag: W/\"c4286a4d136166998054fa7fda01c30a\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":203,"size_decoded":798,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4286a4d136166998054fa7fda01c30a","sha1":"040792d3b6c9a78ac4b47eee52dc7299cf8ad11c","sha256":"6b73fe7342e6bb130ceffc11166d6680351191c2fba0373144b5d5caf58eb02c","sha512":"5aff267969f897c8849bd0f0bed851f3830fc14ae6d0177a3cc26385b6186795225ea5252b364d6739cb47906bd8752b091f216ff732fb59e082d6d7598ca6ba","ssdeep":"","tlshash":"97d012d5927a74485d4983b05fec64c3419b608b10d552edf4900238654f78bac41b5b","first_seen":"2025-09-19T19:42:12.826156Z","last_seen":"2026-08-25T19:58:16.155753Z","times_seen":31,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/66f8c1eb38b68543f4b39be509ba9496-6a6ca57b67fbe.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.398Z","timestamp":1787687778398,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/66f8c1eb38b68543f4b39be509ba9496-6a6ca57b67fbe.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7905\r\ncf-ray: a30d28c6ff238be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3467\r\ncache-control: public, max-age=14400\r\netag: \"270d65f0d860bd9b719c9864baa21955\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Fri, 31 Jul 2026 13:39:08 GMT\r\nserver: cloudflare\r\nx-amz-id-2: hVAUwpA1wp8CerbsWldvivTVIELUpKTZe1Q5DMav3y2chtI98GTEYgfudO7YF7wzBFsQG/+blC51DTZN9vH94jtBRJtqAjhi\r\nx-amz-request-id: 5EYE3BMVSV046B7A\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: UqeqzMAUQ9xW9bAl5er1qiffQAf.EaTI\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7905,"size_decoded":8564,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"270d65f0d860bd9b719c9864baa21955","sha1":"d7f133942955456008a0ecd66971ce6470e73fef","sha256":"7aa9c0596934f63ae23c2b6f6d8e9d4c623c2042c3ba3b269fea9ba6b7f14832","sha512":"7331b6436a74e554f49afcd9cd1b9ce52e286ef561b81f1a9cdf7953d1498f1e93b8bb637ab850934fd0705930ed09b744ed0617d4390d3a8ef80b6b7a5cf2ed","ssdeep":"96:8Ri0fRvrXT5hCPDSJLoQA2ogrgtNY2n1JA0q/JY0Wim1X3xNlxKc0arGrlsHBdQq:qFfRv/5hCbSxBjogkLVL7lrGpLPcgxS","tlshash":"25f1bf1bbe1c47fefcea1876a5238c2deada605f5f14c26112d10c49e172da5ca443f8","first_seen":"2026-08-25T19:57:11.6282Z","last_seen":"2026-08-25T19:57:11.6282Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8n5WxrR1Y-s2jaac8cM-dD2SCxNF6ueZhW2frkR5z4m_SyY37cnKRblIpW5smQOcO4EW7lYa1ZOjgtFCLg4wXnn72kGoXuTa4h8QB/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:25.913Z","timestamp":1787687785913,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8n5WxrR1Y-s2jaac8cM-dD2SCxNF6ueZhW2frkR5z4m_SyY37cnKRblIpW5smQOcO4EW7lYa1ZOjgtFCLg4wXnn72kGoXuTa4h8QB/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:09:52 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8478\r\nCache-Control: public, max-age=164535\r\nExpires: Thu, 27 Aug 2026 17:38:40 GMT\r\nDate: Tue, 25 Aug 2026 19:56:25 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8478,"size_decoded":10306,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"d5509a017709eac09887fd32212957ec","sha1":"ac6ae7b8a3c262bef692f19992cf5c90112912b1","sha256":"bf3c7b221219cbc158916f4ea2ae9438fd99332816b546bddab270ac9520b5b9","sha512":"3cbc6f6d395ef64771564e78d9aa9891a55c3bfd5337ad06f1577b6a04fd44dd6d34d15cc888e0233f57526d9e9b2d38ba94a6bd8468941a15b4b1de6079f501","ssdeep":"192:6jK/OJb4Nt6Zj/+79QNWEmDhtysb4DdIIrcLKXE:i0ms2Z7Y9QqzBaKI9XE","tlshash":"e002b08020aa46797b03edc665690097249a54cce1cedb74e8da7584f1c4cd173e9bd9","first_seen":"2026-08-25T19:57:11.629841Z","last_seen":"2026-08-25T19:57:11.629841Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/cookie/cookie.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.289Z","timestamp":1787687779289,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/cookie/cookie.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/cookie/cookie.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47692\r\nexpires: Wed, 26 Aug 2026 19:56:19 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28cc8cd08be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/general/searchIconMob.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.852Z","timestamp":1787687776852,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/searchIconMob.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/general/searchIconMob.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47714\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd58728be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/header/headerBG.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.052Z","timestamp":1787687777052,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/header/headerBG.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 14922\r\ncf-ray: a30d28be9f078be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3835\r\ncache-control: public, max-age=86400\r\netag: \"531ad742e8fe9926ca080f6c6e8a1c4b\"\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:42 GMT\r\nserver: cloudflare\r\nx-amz-id-2: y7ECp0dClazr04/AQjooMoVPgmOadwfjUjDJfM0wGVgPKVqpF7HRkwubsrIzbdfxwNe5dseNYo55umv5rk6xb10RBk77AA7z\r\nx-amz-request-id: SG2H6C7YW9AM0KYS\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: uvZd5afhLuoOh4Z3b65w5b_FnP0QZMa2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14922,"size_decoded":15591,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"531ad742e8fe9926ca080f6c6e8a1c4b","sha1":"3b3958d15e7366b63fc698002f12bb2e59d59528","sha256":"a4f8dc050321c57610909a86488f8e3e24892d81c572155d5793dcc84a091fef","sha512":"4b14855e7811000978ae0be91f5e16e02efa67b9e6fbaea827c488c80f42fe9862cb9fa1c640a5c547f37b354c19fae6b0e5112c0990f637f5854db593c5dd36","ssdeep":"384:SiyeohQsQ5jbJ0h8qyrOiRWQ7DxcPUtQD6P83suKB:EhQsmKAIySMtTQ9KB","tlshash":"3462c0a8051a3fbe53e8b7370934395447a1531ff3e688aa25009e9417796bd3d38a3a","first_seen":"2026-08-10T05:31:31.9539Z","last_seen":"2026-08-25T19:58:16.187856Z","times_seen":6,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qeeMDmC5bDbHf3aNHQk6TbMLZzrcqmH04ruQQz7PQe4tRQBXL6VV9TFPNJiAPwx9itAdqGq0mFZwCxo8e9VKaVK6zyxAYrmVtm8oIQ/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.771Z","timestamp":1787687778771,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qeeMDmC5bDbHf3aNHQk6TbMLZzrcqmH04ruQQz7PQe4tRQBXL6VV9TFPNJiAPwx9itAdqGq0mFZwCxo8e9VKaVK6zyxAYrmVtm8oIQ/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 20 Aug 2026 00:00:00 GMT\r\nContent-Length: 12595\r\nCache-Control: public, max-age=599908\r\nExpires: Tue, 01 Sep 2026 18:34:46 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12595,"size_decoded":14424,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"d69959eb33baeccd332be3f38b046552","sha1":"36a1f8d6298b6f68d3bbe29d8d6f546b3813e04a","sha256":"92002a831bfdfadddef3ace55c14f48f6870841e94c22e05ce4aa95cfdd4d81d","sha512":"0abb6e327f7d6497194e978983ca70f5d773ed35602ec79775302a297f04dbce2e190824cef779cc8d47d369dec26ff1f0604e3233e9d822f13e899bb1867a37","ssdeep":"192:L4OxXmAgysGaQBu9R56y9s8WWDjc+ODGKzPJ88ftxryAYCFKuQOW7WUEC:LBxnU6Us8WicJGKzRD75KuQOe","tlshash":"2842d087f5fa880fcee96cb8d78f0fe4121e2a5e74089dc5f0d7e886b451194a309883","first_seen":"2026-08-10T05:31:31.734933Z","last_seen":"2026-08-25T19:58:16.076296Z","times_seen":6,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLhzMOwwiFO0OL8PfRSIeOaB2qf19F7teVgWiT9wxx36mWHzIuseXnCOlUgXsclQONf5Bi4x4bhNru34VPejdgXyS3-3DQJsHj2UM_3gw/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:21.569Z","timestamp":1787687781569,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLhzMOwwiFO0OL8PfRSIeOaB2qf19F7teVgWiT9wxx36mWHzIuseXnCOlUgXsclQONf5Bi4x4bhNru34VPejdgXyS3-3DQJsHj2UM_3gw/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:10 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8520\r\nCache-Control: public, max-age=139443\r\nExpires: Thu, 27 Aug 2026 10:40:24 GMT\r\nDate: Tue, 25 Aug 2026 19:56:21 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8520,"size_decoded":10348,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"8134574f02a4ddfa0c22afb41782ae1a","sha1":"131cba1acfd70d0fe7b156a49d2f5368c4d6dbe3","sha256":"08253cbb64eb0412f83d3850fed3533ba661fdaf97617624db17a0092eecaef9","sha512":"404c04681c033c1896f0196b8a0d66c5ab5c224cb5abf6548ffe284921c4cdac06c488aa5177e00125a8171927220a20bbf55b853994400879d9f60be61095fa","ssdeep":"192:3Z91PHhOXieDcSDxiyl84h4UdYwDttGkZ2i5I:pTHsyabliy9JDOI2i5I","tlshash":"1702ae490409e41f418f8d8e659137f4d1c3ffda8e6e8e4e1b25a9ceaeb7407469132a","first_seen":"2026-08-10T05:31:31.936567Z","last_seen":"2026-08-25T19:57:11.632169Z","times_seen":3,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/turbopack-1dejhlmr_w8c5.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.819Z","timestamp":1787687776819,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-1dejhlmr_w8c5.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"2aa4-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd1f578be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10916,"size_decoded":7182,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10581)","md5":"8672e2f87d9fe64a9230450d922c7793","sha1":"8040a4396d8c7673c565d2a59492db836672d3f5","sha256":"f068349c1a669b2fb74543584fc3e2f1f17583bba041219d9162dad87147df7a","sha512":"7a53e3da46afc30d299fc70dd676513cd20c22f3af221ae4fdfe8f13e1e1ccdcdda53cd1548cde5044badb6bba41a9c15ea38144a0adb9321d7403ed7d4f86fb","ssdeep":"192:nnS74gMSBC8gEsg6d2hE7oGkldTTN/8S3sBT4fCT3cXX6PpH2:nS74gMStLskl/0ssqCTMn","tlshash":"a732d6da37a6f07343af91ebc06b4001f17944a9145d141cd3aca8fa2c394ae85e7f76","first_seen":"2026-08-25T19:57:11.632879Z","last_seen":"2026-08-25T19:58:16.174341Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/1ki3c_-3ksgx3.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.824Z","timestamp":1787687776824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/1ki3c_-3ksgx3.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"7fe2-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd2f798be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32738,"size_decoded":12415,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32364)","md5":"1ea1cf04d2a14fc833a624c60e9a4497","sha1":"5bc0757f030d0b86d7be8159653cb36cf42af495","sha256":"1634317df4059fc0f4a24bcc774775f47f81d4b336ae00af818962c1c0cc109a","sha512":"3731414e3d7b2516642ade23a5ee07c21020862a56ae99f3a8fe74d6c8f0f9563ecbb0962efda932d4d4068d6fbc48675d451b4d4baf6d0f0f82e9ffd99958b7","ssdeep":"768:nSlErWNwhxTJsEX69/cwdfrtt/3g2jEGjHwMe+JavmW:CVCxJsEX69/cwdfrtt/rjHwMe3vmW","tlshash":"4be2e80021275afdb7262996102ed40ea0deab4ccd0fc954b5bf7c253ea90d47297bdb","first_seen":"2026-08-25T19:57:11.633968Z","last_seen":"2026-08-25T19:58:16.076782Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/upgrade/upgrade.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.865Z","timestamp":1787687776865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/upgrade.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/upgrade/upgrade.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47716\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd68fc8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjNioOinHtwQ6-obi42bgThH10MK0q3MC7aurOPA1d6HBWD7Blr8n5eM4GX3mlxh35muByY2qcXuUb1I-Sswn7kWklVg/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.405Z","timestamp":1787687778405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjNioOinHtwQ6-obi42bgThH10MK0q3MC7aurOPA1d6HBWD7Blr8n5eM4GX3mlxh35muByY2qcXuUb1I-Sswn7kWklVg/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:14:54 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 13534\r\nCache-Control: public, max-age=148197\r\nExpires: Thu, 27 Aug 2026 13:06:15 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13534,"size_decoded":15363,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b094c731cc709d07f06d57c7dc712f67","sha1":"a9b44116db600a183fb1c8389882892c77673d3c","sha256":"406791c209c8a4967c04ab0fb638fb5a5b81110e2b0fb29b7e8708ba5bf607f9","sha512":"5a7443049138b85e16f64a4331d40689e02370ba86a830001ed3afe5b48e6c5997cebdd25b853f4c61b3c19bc00f6c3737980769a5147537755c93eeb899755c","ssdeep":"384:Jfp7NK4MqrvFMEW+J+M40WFYeqE529kyZop:NpIqbFpFvcZqE529pop","tlshash":"f252c0ca2fe9117d9101de51c142b82cda325194617ba14fe5df1e6fd35016fa6833a3","first_seen":"2026-08-25T19:57:11.635169Z","last_seen":"2026-08-25T19:57:11.635169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":2,"send":0,"wait":11,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/299b595e0186912f9b0674313d1a2ef6-6a6d11d7b1b9a.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.420Z","timestamp":1787687778420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/299b595e0186912f9b0674313d1a2ef6-6a6d11d7b1b9a.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7299\r\ncf-ray: a30d28c728048be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 131\r\ncache-control: public, max-age=14400\r\netag: \"f96e84d5753a0aebcda93938baf3d2aa\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Fri, 31 Jul 2026 21:21:28 GMT\r\nserver: cloudflare\r\nx-amz-id-2: BbOSy7eIdQn6fjEEnGjpuRrI4kAnXm6Z6KS11BWBQz+xkWd9yKAJ3sYKyav2jomcjsMfVxfKc/PNE/vBWXEsUf+uBNlbqkun\r\nx-amz-request-id: 1GFHBHAT4HPNRZ76\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Sq.ESP3xnd4aMKrd3Gy52PgRrAaUqr4.\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7299,"size_decoded":7957,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"f96e84d5753a0aebcda93938baf3d2aa","sha1":"4cb97dc85844db58312ca3dd275451e6296d7152","sha256":"39f3d86ddeeb979efec7e5ee4ee5adb4fdcdcce5b10f8b10c0725a2641406f6e","sha512":"7072c13f822236fac273b1bcd22d03f7c10610a1ee105914fd70d6aa71f60bee89015b1cf716971f25f4dd0da004a46045026d8996835b6f1d6a665f5a153d56","ssdeep":"96:yNTaLWADxzVUx6yka8AVpzZGy/89PGoyNUhOuGAMWcxc5eU6wBoXFQQ9OyPiFVLZ:yNTUxzO5Us+Gn4/o1QQ9OyPY3JG8","tlshash":"48e16b185240dfd6fedc43fa94cb9f0372dbd53359470a8562d25811899bebe850b1b8","first_seen":"2026-08-25T19:57:11.636392Z","last_seen":"2026-08-25T19:58:16.081866Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/b8023b19f767d81eae4344119e85ede3-6a3f787e345a2.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.424Z","timestamp":1787687778424,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/b8023b19f767d81eae4344119e85ede3-6a3f787e345a2.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7297\r\ncf-ray: a30d28c7281e8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 118\r\ncache-control: public, max-age=14400\r\netag: \"3fe6749da5f245dda09db954ab49a839\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Sat, 27 Jun 2026 07:15:11 GMT\r\nserver: cloudflare\r\nx-amz-id-2: ApC0d6m3NBx0ONxWLWiY2vA7PbTaGPBucI7brLQ7jQkh3mSubwT+UAx9FDsflxWZe/2/PHzISCXQwKhloDEIgTscZxhd8GgQ\r\nx-amz-request-id: 42PEF5V3GA5Q2ETT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: vezIMok.vzgT1fDxVrQMreaf2CBb1Wjy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7297,"size_decoded":7955,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x184, components 3","md5":"3fe6749da5f245dda09db954ab49a839","sha1":"968609c144074fbe158bb16b32dbdbc6821be32d","sha256":"f5b032eb6fb504660765e0c3c992c474f0877f5d1e544d24999eee745481d8a4","sha512":"ec2e11002cb1c0926624eca52e3d311fc50420290661d18108e4ab741a57be030feb70a0c0fcc3ef0a2a26a7e29b68d93ff30b5a1f22a45c7007297570e576aa","ssdeep":"192:WdvXcBFeh8eu088NpkGpjSCHq+F5dCzMyF:8vXweh8e5tNpkGp2nU5Uf","tlshash":"36e18d3215d2abc2f3e6067140a72e61f4ced2370095c4cf0aef14a878dfb9d96479a4","first_seen":"2026-08-25T19:57:11.637589Z","last_seen":"2026-08-25T19:57:11.637589Z","times_seen":1,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/4f3c7898f53283208dd0499ab3a92aa0-6a04498263eec.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:25.915Z","timestamp":1787687785915,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/4f3c7898f53283208dd0499ab3a92aa0-6a04498263eec.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11580\r\ncf-ray: a30d28f5fffe8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3083\r\ncache-control: public, max-age=14400\r\netag: \"4d9b76ab74c052352361795c0fee230a\"\r\nexpires: Tue, 25 Aug 2026 23:56:25 GMT\r\nlast-modified: Wed, 13 May 2026 09:50:59 GMT\r\nserver: cloudflare\r\nx-amz-id-2: JiiGgpbPTqI5XAx0Q1YaiQSHamEbN2vzJnBtH/4dQQNw2y3aZD3U4C8n0ruCR3lApyd5ZzSuRyCI+hmWOwLxTpEXUCnRGett\r\nx-amz-request-id: STE7HNET4VAFGRRX\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11580,"size_decoded":12212,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"4d9b76ab74c052352361795c0fee230a","sha1":"1c5402af95477ac752ceaf49f64ec181344427b5","sha256":"e861b32c12fea9e0ae1dc6480cf909ecb283f5e4ba5cbc492c158b73e50585f6","sha512":"6e54091ed00ade86fbb6fcaf365ff2abfcd9d8903ae3f686a6cd9d782ca6ed40fd03b9bc49c1d41ac8ee2dd8ca40be508d8e8aae3cecace192923bc20cf6f739","ssdeep":"192:f8M9Jp0wILGiXAefYJO4rTZR9/ej140Olixd+FrGAXSVvHEj7xACSbRLSud9dIZY:UMzed1XAjJ5Rxk1VOIxd+gAqPEjNcVZz","tlshash":"8a32af50f9dc31d8fa5be5f428527ea020ddb2118ae696dfd5cd208874e64ec8600dfa","first_seen":"2026-08-25T19:57:11.638815Z","last_seen":"2026-08-25T19:57:11.638815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru/cookie?_rsc=vWl4OF2djMO3dj8V","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.421Z","timestamp":1787687779421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /ru/cookie?_rsc=vWl4OF2djMO3dj8V HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /ru/caser-one/main-app\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg; _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: text/x-component\r\nx-geo-country: NO\r\nx-nextjs-rewritten-path: /ru/caser-one/main-app/cookie\r\nx-middleware-rewrite: /ru/caser-one/main-app/cookie?_rsc=vWl4OF2djMO3dj8V\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28cd69018be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298,"size_decoded":3207,"mime_type":"text/x-component","magic":"ASCII text","md5":"fa1596ded86680e4a9c3e19872ff7a07","sha1":"448e8cb97fe4fbf48a7d4a719e9802b3f0bfe1a5","sha256":"ee90607de4873fa3e461e05ad082af4cbc16a13b28dead1ed9aca7a2e81c7536","sha512":"594d9fd2efadd322da49f552d518a257df0a061ecbacf73938e794fd1043a805d6aa90ceee27435337fbd0d67a8d1a4d76144402878e36e2a742bab0608978a9","ssdeep":"","tlshash":"5be0462686441aa75cfe41d1c02ed80b690e953b12aa5cf4c0a42e2523e313a65832e2","first_seen":"2026-08-25T19:57:11.640785Z","last_seen":"2026-08-25T19:58:16.113484Z","times_seen":2,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":339,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wipC6s20baB-H_yaCW-Ej-olseI8Gyq1kBkh4GrVz4queXySPAd0XJEkQ7UMu0TrldaxYbzjsw3Ay9USrh0CgFA/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:27.460Z","timestamp":1787687787460,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wipC6s20baB-H_yaCW-Ej-olseI8Gyq1kBkh4GrVz4queXySPAd0XJEkQ7UMu0TrldaxYbzjsw3Ay9USrh0CgFA/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 21 Jan 2026 22:55:31 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8282\r\nCache-Control: public, max-age=122613\r\nExpires: Thu, 27 Aug 2026 06:00:00 GMT\r\nDate: Tue, 25 Aug 2026 19:56:27 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8282,"size_decoded":10110,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"819256fb750eece8a457d22f75ae5962","sha1":"61db3267b7c00233666e73d3b5c7813cb8fa6210","sha256":"6c9b3ae11adfc7a75731602031632ea8822afbb62377412c115a441994c8f3f7","sha512":"8c79ea18e92a6ddbb8ecd7fabcd0e2b5019eea98730017a0745be38daabcdb97cc1cbeeddb39e8425a40e94d7dbf2d54b3e1a82dd6f805b7aa39a31be11df6d5","ssdeep":"192:TE+RW53niKJzrHzoQ0hU5aNQru+vDgic/c2ejt+Wlz:TRRW9XHzoQ0C5aNQa+tcjeJ+W5","tlshash":"62029f42e3a276df7d4064c10ba19b4bcd34d484ebbd85ad9f9aa4d340b3fc82191c67","first_seen":"2026-08-25T19:57:11.648336Z","last_seen":"2026-08-25T19:57:11.648336Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/sounds/Upgrade_Wheel_Roll_Fast.m4a","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.292Z","timestamp":1787687778292,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/sounds/Upgrade_Wheel_Roll_Fast.m4a HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.Y2tbfVw7n7Zbn15hqWc0Nw.1787687778.QOyi97iLvNRrjaq5RQh6bw\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/sounds/Upgrade_Wheel_Roll_Fast.m4a\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28c65c228be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/bb54aacdf83bfd51c1a03b2bc4f44218-6a612c3e5380d.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.471Z","timestamp":1787687778471,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/bb54aacdf83bfd51c1a03b2bc4f44218-6a612c3e5380d.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17055\r\ncf-ray: a30d28c779898be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 360\r\ncache-control: public, max-age=14400\r\netag: \"bfccc33e7ff4dd43dfade1dc3dd37c28\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Wed, 22 Jul 2026 20:46:55 GMT\r\nserver: cloudflare\r\nx-amz-id-2: xK/2SkPP9/IYPHDuM7cE/jnkc1/GN6XE19WOo9OeeUwE8DqqaFIKjMxverkeK2RMTv8CZpFBu49ROSAc5vAvexP+32IKpUC5\r\nx-amz-request-id: N5FJFWT1B1T0WT34\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ijX0z2z4U10JoUVL8NZRTBUhxhKzAgky\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17055,"size_decoded":17714,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"bfccc33e7ff4dd43dfade1dc3dd37c28","sha1":"9b79bb477f833ed4f1e069e10606f4fbdb1a7d44","sha256":"05206995bbc733288de973b8151435b63094908153925453f1a93996d06fddde","sha512":"dbf7f74c6d3e25352f4db7b1874a3d24bcb0dd10488bbfe407b4bf2d95d9ac11052fcb325d964365fb120333d0181bc9dd89bc8a20e540a7ff085ccb4196ca40","ssdeep":"384:YzQl6KHM7qD8/WIz0h7d6AvleyRJaN8jb1Vn:zDIeNdbra6jjn","tlshash":"8872c06763d215cbfc42affaaec27c9b21c0f3688c8712b4d4c691e5e2bb9741644474","first_seen":"2026-08-25T19:57:11.651071Z","last_seen":"2026-08-25T19:57:11.651071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/upgrade/arrow.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.793Z","timestamp":1787687778793,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/arrow.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/upgrade/arrow.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 22457\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c97cac8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/header/logo_text_ru.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.849Z","timestamp":1787687776849,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/header/logo_text_ru.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/header/logo_text_ru.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47715\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd484e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/upgrade/coin.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.764Z","timestamp":1787687778764,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/coin.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/upgrade/coin.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47721\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c94bb98be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/4d8a776470a705cea6d26ec7d19b5f17-6a7091044203c.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:30.296Z","timestamp":1787687790296,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/4d8a776470a705cea6d26ec7d19b5f17-6a7091044203c.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:30 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13617\r\ncf-ray: a30d29115e1c8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2695\r\ncache-control: public, max-age=14400\r\netag: \"07ecc12a32acb404f6b3f7b4d71bc73f\"\r\nexpires: Tue, 25 Aug 2026 23:56:30 GMT\r\nlast-modified: Mon, 03 Aug 2026 13:00:58 GMT\r\nserver: cloudflare\r\nx-amz-id-2: guBuvtR5TFLGgP1Q0SA4g6R/w9vH7fn84ckfoSMz48jCxG5JrHUyvXK44x1T8Qq+EPcbd1gtXzELCExnCKDZytrnaQmjKkSZ\r\nx-amz-request-id: XENMYQCVD5NDAPKW\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Jm46dBXviv.9BuxLffmIbHkGylyB8MpF\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13617,"size_decoded":14277,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"07ecc12a32acb404f6b3f7b4d71bc73f","sha1":"57acdae966d8032a3d2373c2f82a70449c502444","sha256":"48eeac4c422e6ce133eede029945c82fa9bc258c96c165d0a9ba46f5e8da6c82","sha512":"83e073070ae58d4c96e85c97552647d23971b0dc48edd6ca4086c7ea78e5800ace39f9b42310046e848e20939be9e0b57491245b90988124a036c8751e67bd64","ssdeep":"384:MV3YvRA9Pq9bH/LOmKTrLVTGk7dH50JHb:a3YvRMPSvBKHLVx71i","tlshash":"0952c042070249c777c78973ed111ec799f2be1c6a51d42060df7e3a80af95ee45a4da","first_seen":"2026-08-25T19:57:11.655045Z","last_seen":"2026-08-25T19:57:11.655045Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLpk8ewrHZk7OeRZ7JoMuCSHXSvzOF4o_VsXTqMjRAYvjiBk5r0bymfbwV0ApVzEeIM4BTuxoXlP7jq5VPcjthBy372iiNB6H5i4OsEUaY7uvqAG3xZSDM/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.919Z","timestamp":1787687779919,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLpk8ewrHZk7OeRZ7JoMuCSHXSvzOF4o_VsXTqMjRAYvjiBk5r0bymfbwV0ApVzEeIM4BTuxoXlP7jq5VPcjthBy372iiNB6H5i4OsEUaY7uvqAG3xZSDM/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 02 Oct 2024 23:06:45 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 6537\r\nCache-Control: public, max-age=553080\r\nExpires: Tue, 01 Sep 2026 05:34:19 GMT\r\nDate: Tue, 25 Aug 2026 19:56:19 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6537,"size_decoded":8365,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"59fd2e519898e8fda81ec3f10ed0a20a","sha1":"dd5dc27e2573fdfa798f234cead4dbbd572c5b35","sha256":"be62d2ad7cf12db19a22b38510dc225840f55a8ac583a28696e4907c4d9807ce","sha512":"8da7f1709668ede84f8ffee6f4f1c6364b4b419ca625ce028d3907b860454f858f38d8225cdb2f790bac226576a63aa88251bcebc7fd944db9274ffec9d0b088","ssdeep":"96:jm7wSrAnTCHFBxGiJDIOf59MfR9qG+30srACOvXL4NP5ikzYFSoz+M1IDdfMx14x:uw5GHTB+qGa0srlO/L4NP5bzYNz+RG4","tlshash":"35d1af467d040e2273e7949bb69d4e27eb2424862cfab4520257f577f003bca59c62c7","first_seen":"2026-08-25T19:57:11.659456Z","last_seen":"2026-08-25T19:57:11.659456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/upgrade/inventary.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.077Z","timestamp":1787687777077,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/inventary.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28bebfdc8be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: QyB7cxRh4fo7Y4pAEJKWCE0FeOh24eum\r\naccess-control-allow-origin: *\r\nage: 47716\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:41 GMT\r\nserver: cloudflare\r\nx-amz-id-2: xWueyb/HELtCVeuAGxlUD8xKlJNZpadR6yn+VtwpyMPUAqbflEWfEzHFUaaGnkw2CZdQmznzpOu9iogNQFbJO8MymA5uKa5f\r\nx-amz-request-id: ZQ9YSNQ9T1KG1HXH\r\netag: W/\"ff3139867704c511ec5c8063896cbc62\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":326,"size_decoded":889,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ff3139867704c511ec5c8063896cbc62","sha1":"605e1f867d09f0cf7e1b3778393a3778254ca57e","sha256":"21fc9a75d3a139c33a55daa044dd2807b6dac86ead40e31c1719d03fa99e35d5","sha512":"84b1a56ced9923f74e8b0ed28bb1bb1575c040996935592b6f2d0d2e89141211df1d96825654351ce48850f9a0110aa909e6d26fbf1f2aaa57ae8ec23ceac3d3","ssdeep":"","tlshash":"c2e0267dca4c952c4d29c1118e2cb956d12fb148e11e42fca044cb34fa46b937417139","first_seen":"2026-08-10T05:31:31.887345Z","last_seen":"2026-08-25T19:58:16.12179Z","times_seen":6,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/9a800f173b8d9e8f-s.p.3nglv5iys3s0a.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.205Z","timestamp":1787687777205,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/9a800f173b8d9e8f-s.p.3nglv5iys3s0a.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28456\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"6f28-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996501\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bf8ba48be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28456,"size_decoded":30331,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28456, version 1.0","md5":"18b9fa01ababfc8584a075af6e763c33","sha1":"7691e63d3c93b79ed0bbba256ac42a479a8ec86e","sha256":"c36937da4c39049704f1def587f7837a24ad52d3bfd2d27d3b6eb9f4220b2e3a","sha512":"42ade8060b7148e9f7cbb6c115ddf450508246c0616032e6837349558d7de9732585bb53df5502eef79129c01c75eda1606f171f2ab4a17b20662de3a74d8b9c","ssdeep":"768:b32Ikl00N5DVMVku72IH/PGXzko0relU+8sfcS+Y+VLLtScaR:Ty0+JVMVz72IfP92UhsfcCSUcs","tlshash":"6ad2e16f1707daeaa4a45c1c025e81983503eeb483ce2e6bdc5587fec6467b30e13978","first_seen":"2025-09-13T18:58:39.377337Z","last_seen":"2026-08-25T19:58:16.077291Z","times_seen":5489,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/game/spinner-group-1.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.381Z","timestamp":1787687778381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/spinner-group-1.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/game/spinner-group-1.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 20223\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c6eea28be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL5lYayrXIL0PG7V7Q_cKDDMWiS0udyueBncCW6khUz_W7QzNf4eHKUPA9xDMAkFrMJ40brldGxM-rk4lfago1MzXmrjCwYvC91o7FVDbVY3kE/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.396Z","timestamp":1787687778396,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL5lYayrXIL0PG7V7Q_cKDDMWiS0udyueBncCW6khUz_W7QzNf4eHKUPA9xDMAkFrMJ40brldGxM-rk4lfago1MzXmrjCwYvC91o7FVDbVY3kE/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:09:02 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8501\r\nCache-Control: public, max-age=555695\r\nExpires: Tue, 01 Sep 2026 06:17:53 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8501,"size_decoded":10329,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"36928ef1473cdd15de27b8aa1463c085","sha1":"e43f444e3782f8506a2c66b5cd35e6fd317c3bd4","sha256":"6f8f3a8d937147d61d8cb1a3cbab3868c5e5e355ce9c5cc67d1f42ad70382d33","sha512":"31691d5137a46e07d13d7cd50a42d6d2398992910b4de04bb39f34d4b41d11104214900a6e6a77394a3403b9194d036c6fc829ed0110f72780a859ff75491d93","ssdeep":"192:NrlPEZZAvCQKnkKdG3Ibbj5Y3eEZrt8uEuhPw/Bazkus+a5:NraZZAKQ6BBbj5zNuJ5OEzk3","tlshash":"f402c1718ec5db864ecb53b220264727814cfd779491a5742b4d9fa0cacc3681487f4b","first_seen":"2026-08-25T19:57:11.66556Z","last_seen":"2026-08-25T19:57:11.66556Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":6,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/c7b1dd5790cefcf24ed69bcbb60f90db-6a31172cac1fe.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.404Z","timestamp":1787687778404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/c7b1dd5790cefcf24ed69bcbb60f90db-6a31172cac1fe.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 7178\r\ncf-ray: a30d28c70f688be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 177\r\ncache-control: public, max-age=14400\r\netag: \"16c98e4e31a33283a84b4b8d1eb48f2a\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Tue, 16 Jun 2026 09:28:13 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 9FvTWIGz9vtusbkJ9T1wtHX3VmcuW182rkt97bUhqfhF6oOKFH1hAaiZSU1SoEc6PE800XY///IsE4jDYwFRPzXzKeFOM2pr\r\nx-amz-request-id: 5YKZVKB84YBP4372\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 3V6HLV.o.PfOl7.AfWurK.SgqSUTDWZf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7178,"size_decoded":7836,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"16c98e4e31a33283a84b4b8d1eb48f2a","sha1":"f246670b9b098e582ee976db32587063734cb08e","sha256":"e7de657d398193954a751e3221e7dc647350a5bb798693410eebe27c5e02e035","sha512":"85ec989b9f2c7f0af81858491d6b63b26ca76377ba0e310f3e934147cdbbdd5440cc4e25ac244aa43cf9fcb322aed4be028671ca863caeb661e98e13b1bae3fa","ssdeep":"192:YkRErkESujFyqv1zrMcusWLXkLaW31EmC83bRYrfk6uQa:YkRErkEHh1zrjt+UWO1EN83bkk9f","tlshash":"19e19e1f7b236ecaf878c77516030e3050e14360b2c70cdb50e487a6b65c1b98b9c66c","first_seen":"2026-08-25T19:57:11.668666Z","last_seen":"2026-08-25T19:57:11.668666Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/34cd8bcd3082895548e4533ca31972e7-6a2c0f8ca3b68.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.451Z","timestamp":1787687778451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/34cd8bcd3082895548e4533ca31972e7-6a2c0f8ca3b68.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6282\r\ncf-ray: a30d28c759138be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 760\r\ncache-control: public, max-age=14400\r\netag: \"adc6f47001965b53f220a281f8a0ba1e\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Fri, 12 Jun 2026 13:54:21 GMT\r\nserver: cloudflare\r\nx-amz-id-2: IPocFPBRSx+ohvu+Yu1YFlI0q4RAcXkmKtnNtoNPK4kaDkdTxYrZxL+yAQNriEgVONiV+D4mgio3cgj1dplhVYeyJaCGMJ7l\r\nx-amz-request-id: AYGNCZ79P8M6H44Z\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: hc4a11ntmhRNbUn88GQ7jmHDARpYK6IN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6282,"size_decoded":6940,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"adc6f47001965b53f220a281f8a0ba1e","sha1":"7849d5ae777a1b90427a96b4691126c6846c8713","sha256":"8f0cf1e04d6f6aaaa77d7aa65482b96262b950e8ccac42d6d9750232f0da34ce","sha512":"8aeef318a3667657c594533d66741d12eb9843753148864ac7d0c630ada73943896d53b0933ae3e1f6cbe42283ed4a2384c52fb5d19a5d3342159fd497aac292","ssdeep":"192:R7Ib128kI2d4DJLXlVhQxPgZv2TmFZMu1NU9bYtq3Zg:dIZ28kWJ5VsPgZvCmFxCYtz","tlshash":"04d17d5d9f0725e7fc24e2f301479f9423d92e562284926b09e39b61c147ff987003aa","first_seen":"2026-08-25T19:57:11.672305Z","last_seen":"2026-08-25T19:58:16.125209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/sounds/Upgrade_Wheel_Roll_Fast.m4a","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.802Z","timestamp":1787687778802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/sounds/Upgrade_Wheel_Roll_Fast.m4a HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://caser.one\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 21465\r\ncf-ray: a30d28ca0f328be6-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: \"9b1b134deadb18bc91701846c710a4d5\"\r\nlast-modified: Fri, 24 Jul 2026 12:39:44 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 6IDxB8l07cNT5RaIWFZ4tNR5o9tVZ5XzfQdcSVb84X3C1TS2hXvCAYv2eLMtpV4Fto2efDkx78vKI0jAhGtFGYZm74xhFGiZ\r\nx-amz-request-id: VP0EDMZ4PQZ04EBC\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: HlNvvuk6PgpYYC9PsHS5RH.YiJpHJkkR\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21465,"size_decoded":22087,"mime_type":"binary/octet-stream","magic":"ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio","md5":"9b1b134deadb18bc91701846c710a4d5","sha1":"3e31df377a0728b8c7549b170a8ac27ec6f9c2fc","sha256":"57f4293af2087ddcda401b856fd117c52e3fd8e001d6952595abcad8d54eccd3","sha512":"7575e1f122e677d6acd88097f225b03f051ad0cf8f723b82d801979cf563b2cc9d0e23fc9a7c0ba7e0b7ffda1033743fc307680ee132670103e74bffebfcbcec","ssdeep":"384:tmnMu/6tjR+MYIA6ROkL7G2IS7Jobs9Zk79nuBQ8eNVpZDeG06dsyrX:vuiq6ekLKKvk79nuB+X3eo7rX","tlshash":"0da2c0620bc0cc3de118137942613b454eb4fba9a5dda2e1eed08b2d0835ed19827b9e","first_seen":"2026-08-10T05:31:31.897426Z","last_seen":"2026-08-25T19:58:16.086772Z","times_seen":6,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.caser.one/l.js","fqdn":"chat.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.168Z","timestamp":1787687778168,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /l.js HTTP/1.1\r\nHost: chat.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, must-revalidate, max-age=0\r\nexpires: 0\r\nlast-modified: Tue, 25 Aug 2026 17:55:21 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\npragma: no-cache\r\ncdn-cache-control: no-store\r\nx-content-type-options: nosniff\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Authorization, X-Crisp-Client-Url\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 300\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a30d28c598e68be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7631,"size_decoded":3647,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7537)","md5":"cfb27fef584fd7f7ef8b5a44ff9d47f7","sha1":"cfd13b3261c5d677d496d9da8049652e3a54b31f","sha256":"f9d4dfd1278a71a4231e7d12625e6ebe8b8d0d5a909c972f77ec2a7ec3fc52dc","sha512":"1effb401813ff3f1cce99eb8d875d1e9cc59093e5af7ae1045f5316fce5acfc322aa4b8c7d8c2cb11292d833386d552585987df9b35cdaf7062d4eb60d4f704f","ssdeep":"192:EnSfZ0VsUEswg2r/gAbe39QoxdpsxGVkdlY3AyQL/aCSaQwiY:N+SS4/M9QoxLkjY3AmZ1O","tlshash":"49f1711732696132059362aa163b6b05f43361295cc5815cb169ecf22d7ca8fa13bfff","first_seen":"2026-08-25T19:57:11.677047Z","last_seen":"2026-08-25T19:58:16.108423Z","times_seen":2,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":8,"connect":1,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"chat.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/api/statistics","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.192Z","timestamp":1787687778192,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /api/statistics HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: ru\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nContent-Type: application/json\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Language\r\ncache-control: public, max-age=30\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 17\r\nlast-modified: Tue, 25 Aug 2026 19:56:17 GMT\r\nexpires: Tue, 25 Aug 2026 19:56:48 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c5b9708be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88,"size_decoded":2949,"mime_type":"application/json","magic":"JSON text data","md5":"ca83d7780d93fcec6308325d76f05726","sha1":"7542fb4592a3fe9a6cb7a76b80e4cf1e9c0c628d","sha256":"c6ce735b35d9ee85f7cfadb3a85dc186007f301a7b155043db7a882854ddf154","sha512":"20ca78f852182cb9d7e85407ca80b5c9ae9cfe73859fc8fd7facaa8b2451107281d7083110576074fcffa97f162785ef8313feb66e3f1c00fd1cd5470c356812","ssdeep":"","tlshash":"7cb0220cb0a3f082b8222e08feb08c33020c023230222f0880b088ce30c0aceb88b0c8","first_seen":"2026-08-25T19:57:11.678719Z","last_seen":"2026-08-25T19:57:11.678719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/burger/menuBg.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.197Z","timestamp":1787687778197,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/burger/menuBg.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/burger/menuBg.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47716\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c5b9848be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/header/activeState.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.390Z","timestamp":1787687778390,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/header/activeState.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 2296\r\ncf-ray: a30d28c6fee28be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47722\r\ncache-control: public, max-age=86400\r\netag: \"d9ca2d0a65a9e706dcc33845fb8dcdc8\"\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:40 GMT\r\nserver: cloudflare\r\nx-amz-id-2: iFMCzQ55+MlGwflpxEzhfFq6x/vGLHIS2DWgHao138O6QbirXsHgK9CXj8j++D0LprysuGVR/PGt457+GBkTjwyeNBDhIKdl\r\nx-amz-request-id: RQGCTN3M6DB02GBF\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: DIrFqpExWVceeNOG43o3KF1xUI0oO4PQ\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2296,"size_decoded":2965,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d9ca2d0a65a9e706dcc33845fb8dcdc8","sha1":"279d6e2f3060f98f2309c6b8e8a139c87b740586","sha256":"8d09b8d575d2ba4a099b5a93abfc94a85319a856f21d9a3430b5c925d1def624","sha512":"efb93112f37d618c0a96ba88154afd3ddc6872f58b6c959e44262e629c725b931e4c438e2588f2868941f9e13bd890897e5507d63851f789d8afce24a6e9b7ce","ssdeep":"","tlshash":"f3415c0370d410cc1bf473a19464ed4c749d110799b91e82e204cde9fe7ed01578ab9b","first_seen":"2026-08-10T05:31:31.986542Z","last_seen":"2026-08-25T19:58:16.079639Z","times_seen":6,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/c855d50c12c2e8ec39310525936ba6bf-6a2e68bd06bd8.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:23.178Z","timestamp":1787687783178,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/c855d50c12c2e8ec39310525936ba6bf-6a2e68bd06bd8.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:23 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11230\r\ncf-ray: a30d28e4dd6e8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 793\r\ncache-control: public, max-age=14400\r\netag: \"7d3b61d27f74d3906ecb24ef25c867d3\"\r\nexpires: Tue, 25 Aug 2026 23:56:23 GMT\r\nlast-modified: Sun, 14 Jun 2026 08:39:26 GMT\r\nserver: cloudflare\r\nx-amz-id-2: VOiA0/bkszQPU3N36jcchYkE8uq05aWnMXav/AtlTVn49UzytqRs7mYaZ05I3MTVBGf5Ik01S7RfZ9ejMrq8pLKacwSjbn4D\r\nx-amz-request-id: VKKPMD3PGNMVWPD0\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 3NkRAF4KcqViAwu9tjXELVXQrN1n7M_R\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11230,"size_decoded":11889,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"7d3b61d27f74d3906ecb24ef25c867d3","sha1":"2f2b17ca2e65a558e154e6e235ce76b062494a62","sha256":"f0afca9ebd7a7829849ebb89dd3487f5ff3f8876bdc9e8209a6ace25115ed4cb","sha512":"7f3ae26b3d2752447c2a019f0e476d0a15e0db45b2c8fcca0ffcced49d33e540e5caabb04e78c5b6b51f6492404849be8624a12f2f403bdfcca1730ec2337c8e","ssdeep":"192:NDprBQhM/ESCvLEKvU2FmvvQLCkuGqXQTZ35T7Qo5D4ZzsWwaDFVzvC/cAEgIbut:NDUIf9KkvvQLJVZ35/lWXFVzv4c0Susq","tlshash":"d432b0f5ec0565e1f9cf3374aaf80e5a96e56687fb200f5bbdeae2884a545c05cc8005","first_seen":"2026-08-25T19:57:11.681102Z","last_seen":"2026-08-25T19:57:11.681102Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/ea8abec0d5b73f4ae7f245d4856cd899-69fc80cbcb031.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:24.518Z","timestamp":1787687784518,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/ea8abec0d5b73f4ae7f245d4856cd899-69fc80cbcb031.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:24 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13458\r\ncf-ray: a30d28ed3e878be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400\r\netag: \"ddd221c663f4aaefdd92cdd812414092\"\r\nexpires: Tue, 25 Aug 2026 23:56:24 GMT\r\nlast-modified: Thu, 07 May 2026 12:08:44 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 97+6D8rY53tgZour0S0GtahXHf0+0i0aVG6Z6dUmRBCfPSDNVDudK1/eSnNprXIoviAP6IUAKKIRPmPVxGXuGpChZO8viTxx\r\nx-amz-request-id: MPT975HQFEGJDQV4\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":13458,"size_decoded":14079,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x184, components 3","md5":"ddd221c663f4aaefdd92cdd812414092","sha1":"46bd7c128bf2d015de411caacf390e25fac5f187","sha256":"93af240b2be899a1a7c2e9a925d71ebaafb092180a98639175e5fef45db94f85","sha512":"64230dec2a317f002353b13bcef86b1b0ea340aa32d461085af706ac1ced0b5724d675d157915553ffea037ad9b542d9bb5224d8c1ab53c5179c8ee2562688ad","ssdeep":"192:RUGhko/EaeiTM/r3Ty9jbo9mUbV4F0PLsFLMXkv+6AsAE2yp37/iQMQkVTnj+mCz:+UVEapqGN8DbuFS6MT6ARE2ypLkxjahd","tlshash":"7d52ae68479e08eafb9e4525c9b00ff153e7c761a08f2201f2d2e6d7af31369421395e","first_seen":"2026-08-25T19:57:11.683058Z","last_seen":"2026-08-25T19:57:11.683058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8ypexwjFS4_ega6F_H_eAMWrEwL9Jo-loWz22hyIqtjmMj4K3dCieZwAnWMMhROVcsxS-m4a0MOrhsVPWiN0Umy-tjXxOvXlu57kAAr1lpPP-g--6yQ/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:31.814Z","timestamp":1787687791814,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8ypexwjFS4_ega6F_H_eAMWrEwL9Jo-loWz22hyIqtjmMj4K3dCieZwAnWMMhROVcsxS-m4a0MOrhsVPWiN0Umy-tjXxOvXlu57kAAr1lpPP-g--6yQ/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:09:49 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 6730\r\nCache-Control: public, max-age=287848\r\nExpires: Sat, 29 Aug 2026 03:53:59 GMT\r\nDate: Tue, 25 Aug 2026 19:56:31 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6730,"size_decoded":8558,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"c038502a2d42fc57c37ecded90bab888","sha1":"c619c17951d7cb8e78898df4dbe3ab16174e491b","sha256":"f6c9f2f1a69c76915d43ea9c701a929c02fce43edbbb65751e3920d201a3b60d","sha512":"5556a54ac393cefe5c0bd35037426d0e07244059f197306ce9b94fc91b8145e7bf345768c3b55df447279ef6643cfaf1744a632ae392b929506ac09e2c8dc0d8","ssdeep":"192:hP0r7j++qRReGbxOsMUzJKHEh7NVNGlkpX6T:hu7ceG0sMUgHK7riX","tlshash":"c6d18eb6570e25ce4606d63cce464ae92e6709b137db5ee441c2a714ee63fb05092bc0","first_seen":"2026-08-25T19:57:11.684994Z","last_seen":"2026-08-25T19:57:11.684994Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/3n7shpixe6zy8.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.816Z","timestamp":1787687776816,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/3n7shpixe6zy8.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"66bdc-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd1f488be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":420828,"size_decoded":133369,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54647)","md5":"c437dbacd3cbf88d5a81362dcd635b06","sha1":"5c3b8336019443487fd36b9c6c5788a89783d40e","sha256":"d94ef17f901f9e2245e9da0a47204ac61d746c88862fcb3f05edbdf3a29073bb","sha512":"046b0eba67abeac7f20a3c1652f033f9683bc0f3f05c4a042ab77d4d13b5836f2ef3c69a141f415f07573cfa988eb68aac3735e8b0870f30e32c6830cf69acda","ssdeep":"6144:KmDK5SG5hdki3/RHLIW0kBsBS6QYfFlj1JRBbstnUp8vfpX4k0EA30EhPNS:XfQCFlKmN3S","tlshash":"96944af93696f5225bf302a6507f1402b338192b240e4860b365edde757844eb1bbf6e","first_seen":"2026-08-25T19:57:11.686843Z","last_seen":"2026-08-25T19:58:16.062783Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.006Z","timestamp":1787687777006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/e9bda45850af0eda-s.p.3dhbch4o6h0a_.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/_next/static/chunks/34yv7fq1p68-m.css\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Wed, 19 Aug 2026 17:39:06 GMT\r\netag: W/\"9e48-1a01b1af290\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 422649\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28be4d7c8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40520,"size_decoded":43356,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40520, version 1.0","md5":"a26850fc8493ad0366816dec92bda3ad","sha1":"03071098a384a8e08ec8e6ce8723f10c084e1dfd","sha256":"e0ea7bf0ba351883777665cb6d3a1f825387ec7a834e4fcbb8137f03a9bcff26","sha512":"55fa6bd5063a05b1a84cf9218f55cc608c9eb1d2834016ee14c3b97baf2539522e7609e767f25b831b242ea7e1a7f9ff58c479c6890586828356697321ba808d","ssdeep":"768:XbxH+0ROWFr0Ek7HmRu2XuUjKG0ZaT1k9bUbRslsAmVCeLQI:t9RFOtGbNjU4xObW+sRF","tlshash":"6503028be45aa15fe2e143a8f2832807585b5f3540b246b5a57d62b8c0c7b369fd7c0f","first_seen":"2025-08-14T08:22:51.320199Z","last_seen":"2026-08-25T19:58:16.115973Z","times_seen":42,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/footer/visaIcon.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.086Z","timestamp":1787687777086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/visaIcon.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28bec8378be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: EPdeS_825Sbzq3zGZ8p09TJFXJlDLJva\r\naccess-control-allow-origin: *\r\nage: 47714\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: T00WFYBxh8UFE0pdqiSDU2NGYdG/YbexDQC8yGqpSjRuspLtFDSd/VArFLRyihMww+xoIZj3wcUnBXtEPNMH3VAP0YkIa1t9\r\nx-amz-request-id: ZQ9KDFJQZVM4JZVE\r\netag: W/\"c42b48104cc1e1951244d75d852f093b\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":992,"size_decoded":1250,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c42b48104cc1e1951244d75d852f093b","sha1":"64537ddf64e081825be92876aa6791b3cc878203","sha256":"ca2df46010265f19b035d852833b614214fec16b1ec46e64260d4caba2e9dc83","sha512":"d5174ca88567d861912a6d02b93aa261ba212e2538ec991c00e69047d626beba97b1531882e564a47af6c146634d65bc0f3f81ab217c0210745a16ab2380a41d","ssdeep":"","tlshash":"281102bc41b4264c599f9d59ef3d3d54521a30fd1b9842a8919e0526a66a6c1e34ac08","first_seen":"2026-08-10T05:31:31.756249Z","last_seen":"2026-08-25T19:58:16.063444Z","times_seen":6,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/1ee5d4d12a6c29bfc9018058b0b920a7-6a244031f27a2.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:31.817Z","timestamp":1787687791817,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/1ee5d4d12a6c29bfc9018058b0b920a7-6a244031f27a2.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9712\r\ncf-ray: a30d291ad8f28be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 6931\r\ncache-control: public, max-age=14400\r\netag: \"181d092eec76055a28fe49e95508a3a8\"\r\nexpires: Tue, 25 Aug 2026 23:56:31 GMT\r\nlast-modified: Sat, 06 Jun 2026 15:43:47 GMT\r\nserver: cloudflare\r\nx-amz-id-2: ZXi3NBREwZXEo4/k1bpWyB2O8O2FOMszjCdWRVjMoCdgCuC3Eprzeg+8UdZyj0ijWchvwHOW+dryuSDCrfStGeK+YmimyJr8\r\nx-amz-request-id: FMQT5P89RTM272HF\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9712,"size_decoded":10343,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"181d092eec76055a28fe49e95508a3a8","sha1":"09667c37b71b9415d050a3c477fe0a21f8d94372","sha256":"eb0f53531e69330dd48e0162ba226cda426739815acef0a6b5efe7057b9a0e6b","sha512":"d01b2fdd99da8e57d95ec8d95b38a6c68665c54f7ae96a04fe0525f5fd1c9284eb1b2de0462ca26c8387c629ec07cf663ea301dba6b44edbde157c33ec2697ae","ssdeep":"192:C4owllJPc2As+yA/l6jZQBDSYsi3tngm07P+iyWkjVVGUUeBjq:TowjW2VvA/4qDSYsYngm0L+iyWZTeFq","tlshash":"9312bfb121ad68e6f578c1242c514c060bfd9615a302db783cd123246c8f45abfb4bc9","first_seen":"2026-08-25T19:57:11.68957Z","last_seen":"2026-08-25T19:57:11.68957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/game/upgrade-logo.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.385Z","timestamp":1787687778385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/upgrade-logo.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/game/upgrade-logo.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47722\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c6eebc8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/1b5f8547698ef0e169ee8a0ad7dbaa48-6a3da7672810f.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.474Z","timestamp":1787687778474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/1b5f8547698ef0e169ee8a0ad7dbaa48-6a3da7672810f.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12552\r\ncf-ray: a30d28c7799a8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 193\r\ncache-control: public, max-age=14400\r\netag: \"2baed980903ba7c5692a7875e4a4459f\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Thu, 25 Jun 2026 22:10:48 GMT\r\nserver: cloudflare\r\nx-amz-id-2: T7aofd/BI7jy8atIKJoeac9BuCQqvjevQ3osVIGR35Dfx9izCdNQiRY32JGhwnh8/Ik/3oo6WT5ph5nTtnLVKQNludz6EfYP\r\nx-amz-request-id: YTTS2HW1EAJRXFR7\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 9tGoluDiV6JQnZQKBB66ZRU2UNvE2zJC\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12552,"size_decoded":13211,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"2baed980903ba7c5692a7875e4a4459f","sha1":"9d9c710b5dea135a8f4a2f599093784e7ad922ad","sha256":"ef19a94d4e718f84846f45b1cb61f6063e30d779c99a5cdddbcb6962c1d28b2d","sha512":"6bde79674254747f4f879795c533e1ef5b31d09057a07ffdf7a4e45a0334cc6d672bfc16cdf0166df70b33c57414b3f3143440938c1042f5c07490c83c5bb0a6","ssdeep":"192:/5EeaDro22anuhgx+1GMVUZiV9ZoQh6ONYftqY4u96Ut2LaJ27ZG1VGKrdahJy/:/5EekNnnu76ZiP5sftrB9VLJd1","tlshash":"a442bf51d7ce9ad9e8f258b1ca19fc6587c49f00d4e306c9c9ee1e24e96ce62602b00c","first_seen":"2026-08-25T19:57:11.691261Z","last_seen":"2026-08-25T19:57:11.691261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/910856a8505b44cfa519855a209fc98a-6a44236b1bcfe.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:21.211Z","timestamp":1787687781211,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/910856a8505b44cfa519855a209fc98a-6a44236b1bcfe.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:21 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9062\r\ncf-ray: a30d28d89f808be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3590\r\ncache-control: public, max-age=14400\r\netag: \"cabc639ecacbeb99c40442f1a987d181\"\r\nexpires: Tue, 25 Aug 2026 23:56:21 GMT\r\nlast-modified: Tue, 30 Jun 2026 20:13:37 GMT\r\nserver: cloudflare\r\nx-amz-id-2: PCsHRC07bP4N1Elv1FBIo/jPdutyLU+DlkH0yRn3dg00KvrRnckxRe0GuyDjuQF4s1OhXUQU7tvKP2Sxa6xuRRFebR4PLLwK\r\nx-amz-request-id: ZTDQ9EHWEYTR26G7\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: unfXKQA0_hEr4Nm7Lc3cLk7kpjyJxLB3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9062,"size_decoded":9721,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x184, components 3","md5":"cabc639ecacbeb99c40442f1a987d181","sha1":"72f8e457c754c44275fea8f7e0a97e5c4aa667d0","sha256":"3b20e62ae639cc13aadb9d9c3ca8b33001d6d6f494f0262a453762e1acd210e3","sha512":"ea11b8bb007221e6a42c89f909c6cf9b5aa980546291724c48ca0be309d42f1f059dcd8783e062cdcfd2358f116bbe22d5e01223723cb5d16e31bc540fc29a49","ssdeep":"192:M9Z2vbKWLQuHf8OZsM71b8mOOZpStSGcvoW8e8:MevbXLb/15ImlpStSqW0","tlshash":"d012cffa5702f32ad7e006b6b39205a0cc8386c2d63ea5e5446989c592b0f8bf966310","first_seen":"2026-08-25T19:57:11.693189Z","last_seen":"2026-08-25T19:57:11.693189Z","times_seen":1,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8jsHf7jJk4_OscbZkLuSbMW-VwPhv_rdoGCi2kU9xtmnSzN2vcS6QPFVzD8B2EbFb50S6kdznNuPh71HYiNhbjXKpZ_xHbOw/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:21.957Z","timestamp":1787687781957,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8jsHf7jJk4_OscbZkLuSbMW-VwPhv_rdoGCi2kU9xtmnSzN2vcS6QPFVzD8B2EbFb50S6kdznNuPh71HYiNhbjXKpZ_xHbOw/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:01 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 9484\r\nCache-Control: public, max-age=78102\r\nExpires: Wed, 26 Aug 2026 17:38:03 GMT\r\nDate: Tue, 25 Aug 2026 19:56:21 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9484,"size_decoded":11311,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"6d60aca038aa9243f83ff8dc6e32b5a3","sha1":"e784f32fc897acbc34192fa53688267b564b2108","sha256":"f6ccd369edddaa80fffdd07dfdcd36f84e38473a37b064a1f1f61592fa45c749","sha512":"dbf63f26f1973d77a8ddd843241842467080d0686b8f851b0af3b165654cd94c1a20e8f20541b2d793a758f5f1e4f57ccdfca931ac14345bee246cfd9038bf74","ssdeep":"192:4JBkBYQBoRwaXbdtakcceiRiFVdiyKegmYOPi0vH:4JGWQBmXbbrccGOXeP60v","tlshash":"7e12a0c2eacdb42fe85202595f4404ddc6bd7c8b8b6b8fc6125fa4d5ded112d18242be","first_seen":"2026-08-25T19:57:11.694995Z","last_seen":"2026-08-25T19:57:11.694995Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/0axp40hlltspq.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.829Z","timestamp":1787687776829,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/0axp40hlltspq.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"a235-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd3fbb8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41525,"size_decoded":15346,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41188)","md5":"092f430142be7ed96655fb715c37c0e7","sha1":"d6662dde85f8db6d6b71aa0cce792e2a4243df87","sha256":"9b5faa7b0b6c28f9c772f2a7755a722c542749395e4b6f3db8ea02c1c00fc1f5","sha512":"a0f05424762b01eaa0104ecc8037a836ce5b2bbab3278dc7a4cc7c1b0b89da05e5c7b991e7fb1135b03b84a8b512c196dbe02bae03abfb633bf63703180f7969","ssdeep":"768:nSIsUAwyMjOfCg/jl6fQBnX4iPf2NUVv71VP:yUAwytPEf0oiPf2NUJ1VP","tlshash":"17130a506216bafda7521442613ec409a0ae9b0cc80fc42c757e3c773daa5c5b697bfb","first_seen":"2026-08-25T19:57:11.696623Z","last_seen":"2026-08-25T19:58:16.10921Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/game/spinner-arrow.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.876Z","timestamp":1787687778876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/spinner-arrow.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 15026\r\ncf-ray: a30d28c9ff0c8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\netag: \"6ab681ac19717565bd6d08e228047b93\"\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:42 GMT\r\nserver: cloudflare\r\nx-amz-id-2: liqyM6+51+ytwrRU2+wFOjJfG2HwQphABgRNUMuDg0SV5Dzi7pTx766BwG5yReo7UFk8SYftN5bZYguPxuteH2qUGXBPkMpj\r\nx-amz-request-id: RQG2YBWXJM1BCB2T\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: qzOgUYN3Qd1kzcUGobbmIjfKYKWD6shh\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15026,"size_decoded":15696,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6ab681ac19717565bd6d08e228047b93","sha1":"362b667c3015e37e57511d7fb88800fc03732227","sha256":"10532127adbe705cbda46321ac2b7398986eca3ab50c34a3b568c3dedbc2d215","sha512":"9cfda4b1f00ed333286c28194e63d76c4cd588ae4b88f7392b52f51f00fb8a3bcd8c7663d65452c0a09a89bdc6a860cea099eb306dbde911f05e4ea320255fd3","ssdeep":"384:RUAf1XW1xvc8lsBL8nr/wOHQOz/71kji4P6Mmac:Rlf1G1xpl4LnAQcT194SF","tlshash":"6862d12f1c5a20935449b1ee837fa592e5f50fe551f8025f0f7f08d268c5c9d066997c","first_seen":"2026-04-19T20:33:15.76885Z","last_seen":"2026-08-25T19:58:16.141714Z","times_seen":17,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/6d203a8210c1a9b043416e890f0ad0a4-69e0d57c70a6d.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:38.008Z","timestamp":1787687798008,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/6d203a8210c1a9b043416e890f0ad0a4-69e0d57c70a6d.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8548\r\ncf-ray: a30d29418f068be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1342\r\ncache-control: public, max-age=14400\r\netag: \"ca3166cc2a6c71d01743b4a0ca0638bc\"\r\nexpires: Tue, 25 Aug 2026 23:56:38 GMT\r\nlast-modified: Thu, 16 Apr 2026 12:26:37 GMT\r\nserver: cloudflare\r\nx-amz-id-2: /6eIW24cfDmnX7+3Dm68WMcdINSSOO380dWkRrbTUAiV4TuHqtUCfV8bRrkVEy/tHrTFDKLfpPY5tuSgLlQk5tPSL+I0/wSb\r\nx-amz-request-id: G769TEBC295S8F8T\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":8548,"size_decoded":9179,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"ca3166cc2a6c71d01743b4a0ca0638bc","sha1":"500e3b80315e409ec7b7630157d921fc95f0d200","sha256":"d615f8a28ced06e53d8f73553f3c1e45fa94bdfa91f74fc73d3a4f0cfc6473d5","sha512":"f7a66ceb1bb93e7f40d3ca54c3ddd42751b5f224dd1ac0504db701a725acbb827b7d9b85e394ecceb5ccec554487f3783538a046d64ff7f1074e86eb1777a532","ssdeep":"192:r7Qh085UJwh9yx90my47ZAVIeGjC5RBKQfh6e/r86A:rYUJH19nWrBKQGF","tlshash":"39028c6a6e00f4cebf5a2427a91fff2470dc987a94a6da273dcc6e835e146904a0031c","first_seen":"2026-08-25T19:57:11.699209Z","last_seen":"2026-08-25T19:57:11.699209Z","times_seen":1,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2e7vtv3v9k2ri.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.818Z","timestamp":1787687776818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/2e7vtv3v9k2ri.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"30d49-19ffb9f4150\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 998130\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd1f508be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":200009,"size_decoded":52772,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65251)","md5":"4d78d240da72d3f7983496a2b7cbc821","sha1":"a10a6a1016d485e6b912e60efc65a170a15b1f79","sha256":"c076d082a77cb47681a3ad6731b97662220918881ab0e22b124f9f44a1847aec","sha512":"b31c009394b433d0adebce488a6b414fa242872d866349f11bb907e3fe96403c619847c4ce4af60efc0d6b50c7344d607adae77ad57e0c773630f7b2fbfc8d11","ssdeep":"3072:ejWwB0pTX1dUkn+mUrpNctO199jW5DIcYd+0HapRqm6:ejWfpTX1dUk+mUrpWtO13CScYTapRqm6","tlshash":"f21407f932d1f99207a740a5c03f1007f22c4d72249e6460e3e5dcda796859de2b7faa","first_seen":"2026-08-25T19:57:11.70079Z","last_seen":"2026-08-25T19:58:16.149534Z","times_seen":2,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/api/payments/categories","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.194Z","timestamp":1787687778194,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /api/payments/categories HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: ru\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nContent-Type: application/json\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Language\r\ncache-control: no-store, private\r\nset-cookie: __Host-_cdid=v1.Y2tbfVw7n7Zbn15hqWc0Nw.1787687778.QOyi97iLvNRrjaq5RQh6bw; expires=Wed, 29 Sep 2027 19:56:18 GMT; Max-Age=34560000; path=/; secure; httponly; samesite=lax\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28c5b97c8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"__Host-_cdid","value":"v1.Y2tbfVw7n7Zbn15hqWc0Nw.1787687778.QOyi97iLvNRrjaq5RQh6bw","quoted":false,"path":"/","expires":"2027-09-29T19:56:18Z","raw_expires":"Wed, 29 Sep 2027 19:56:18 GMT","max_age":34560000,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"__Host-_cdid=v1.Y2tbfVw7n7Zbn15hqWc0Nw.1787687778.QOyi97iLvNRrjaq5RQh6bw; expires=Wed, 29 Sep 2027 19:56:18 GMT; Max-Age=34560000; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30366,"size_decoded":6266,"mime_type":"application/json","magic":"JSON text data","md5":"e917d386914e2201c862ba56f2a806da","sha1":"a4d191eeb8f9c77c659e9f0fe321fa517bcfb6a9","sha256":"b4b8f3e1102d2fc02f8578d96fbf4de949dbed7bf420bfea9de9050fb4f21f19","sha512":"2fec1393516ab7ca1de1a130c7af6ec3950cc173dc9036ec8a4d667414855ea1dfb8e48f55068fb4e14feeec66d5ae5b9122b117978b02c50e9f7fa21b0b114f","ssdeep":"384:zjn8iaKM/5uTngcETROpzI9aARw4RYvK1BBBojV+iCx29G4xN6Y0MatVStAox+BG:IHBL+L","tlshash":"9cd203ca285e68f9d999c151fdb6a51b65fce937e4c8ceacca78443013c53e28422773","first_seen":"2026-08-25T19:57:11.702454Z","last_seen":"2026-08-25T19:58:16.19008Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwiYbf_jdk4OSrerRsM-OsDXWRyuFhj-B-Xxa7kBwxqnOBytmqcH2ePVApA8dyQOBe5BPtldTgN-7m5lbeg4NHmH_2ii1J7C5o_a9cBpJFOKRb/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.400Z","timestamp":1787687778400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwiYbf_jdk4OSrerRsM-OsDXWRyuFhj-B-Xxa7kBwxqnOBytmqcH2ePVApA8dyQOBe5BPtldTgN-7m5lbeg4NHmH_2ii1J7C5o_a9cBpJFOKRb/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 02 Oct 2024 23:06:36 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 7664\r\nCache-Control: public, max-age=255836\r\nExpires: Fri, 28 Aug 2026 19:00:14 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7664,"size_decoded":9492,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"65d61672223fbff5c8bdea3e10584168","sha1":"843738c8aa6a0937ed4ed3fdac7303db91004161","sha256":"d87d35536bfa5c3373d647b1b78c2037d37cc10b91a11f298086dd63184eadf2","sha512":"6d621aa5f2fb02a1405422bd9439b10283d62be74d3a62be7f3dc8e5441e035fafaa795be056fc4c6b402cafe8957f81f62b8f840ba127658392f69795265f9b","ssdeep":"192:58eSLpMghF/kQqeQ+HfKWFcTTOYq8HS2/:58eSLj3ABWFc7jSG","tlshash":"91f1aea0a3591028eee2a0275281652487d9cdcbf743fb5182dbcf291e4bd820edda17","first_seen":"2026-08-25T19:57:11.704268Z","last_seen":"2026-08-25T19:57:11.704268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":2,"connect":2,"send":0,"wait":4,"receive":0,"ssl":224},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL1m5fn8Sdk7OeRbKFsJ_yWMXWV0eJ_s-BWQyC0nQlpsjzdwtqgIHqfZgAgDZBwROBbtRDsm4HiM7zislfYitpBniz6iy5K7DErvbjLUTqBnA/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:22.564Z","timestamp":1787687782564,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL1m5fn8Sdk7OeRbKFsJ_yWMXWV0eJ_s-BWQyC0nQlpsjzdwtqgIHqfZgAgDZBwROBbtRDsm4HiM7zislfYitpBniz6iy5K7DErvbjLUTqBnA/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:41 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 7793\r\nCache-Control: public, max-age=157686\r\nExpires: Thu, 27 Aug 2026 15:44:28 GMT\r\nDate: Tue, 25 Aug 2026 19:56:22 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7793,"size_decoded":9621,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"96b9df88af84d2b8a7184de528012adb","sha1":"5e23bb4b3907d2790037e020d1c3b1595830b936","sha256":"47c4f2b5cc976bcf1c838f55ec9e1d7f703a3d52d5d1c81ef61a23481a52feed","sha512":"e6002e618e2fdfd76149e2317ba2db40a5ef0b9e1bd74365ebc71c8f5a01507bab387cd35ffaffefb48dd007c769d582726cf1d89e349ddb253ebb8e818bb7aa","ssdeep":"192:ZW9sMp6rgqj9bCld3jFUnXxPMWZ4dkgE+60JsqjL8XS6Bw:6s3rP5WlFeMW2dkgx60z2k","tlshash":"1ff19faec0e8edd7d9601fb0b11729f8816305e1e4b06add18c1cd5cb009be61e9994e","first_seen":"2026-08-25T19:57:11.705882Z","last_seen":"2026-08-25T19:57:11.705882Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qeOZI2f_bSXNKW-JSQ8_TrYKZjzd_zeh4e7BEz3BF7wlRgpXePBXoGEdNJ-JP0Y_0tIM5XW2kAJ-ERonYMhTfBuy2ngKbOp9kSVHdvvPeh-u/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.787Z","timestamp":1787687778787,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qeOZI2f_bSXNKW-JSQ8_TrYKZjzd_zeh4e7BEz3BF7wlRgpXePBXoGEdNJ-JP0Y_0tIM5XW2kAJ-ERonYMhTfBuy2ngKbOp9kSVHdvvPeh-u/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 20 Aug 2026 00:00:00 GMT\r\nContent-Length: 13410\r\nCache-Control: public, max-age=491004\r\nExpires: Mon, 31 Aug 2026 12:19:42 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13410,"size_decoded":15239,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"ba6ae8abfd70d46b64ae30e28ebf64c4","sha1":"e41c3bdd74161233f85d43f6d7edb7a5e9eaf34c","sha256":"3b7d421e18b133fef88f28fc423ec73b04464cfd4587d0d189aa3b133bcdfdab","sha512":"a89f870a21910c8488cbf9f7cac64ab0adfca4a553056afcde374c71d901bdfe0108f86c7839cb300bdfb7eb2c72a1b46db092a3f98f544fad04c758f759bafd","ssdeep":"384:bgTZpDrT2fG75WKWAU6QFT8wRW3LNhn1Y0S:bgTZpD2e75thUrFTRW3Lrn1y","tlshash":"af52d18b74a3c3c5edbf4129a02c0b4085702a424e557e7d8ffd599e5f43be35590256","first_seen":"2026-08-25T19:57:11.707585Z","last_seen":"2026-08-25T19:58:16.161218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/d84a68f45d208f7ebf4a667572345c7f-6a23313ab4820.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.921Z","timestamp":1787687779921,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/d84a68f45d208f7ebf4a667572345c7f-6a23313ab4820.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 14297\r\ncf-ray: a30d28d089998be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 278\r\ncache-control: public, max-age=14400\r\netag: \"84a6bd12b06948cb59a343d85923ee20\"\r\nexpires: Tue, 25 Aug 2026 23:56:19 GMT\r\nlast-modified: Fri, 05 Jun 2026 20:27:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: BAnJeCZf5TD9HJ8ck5c+NzxI/CxL3InvaAILPtqP1TULxDFdLFOgfpkdbGenXS43YonJQ4ajWYMeCQEg+WQNBS6f3wwkbOlY\r\nx-amz-request-id: GTM60GM9WGFGEHEG\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":14297,"size_decoded":14928,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"84a6bd12b06948cb59a343d85923ee20","sha1":"3ecd892be43df94faad07b58c840b459278b2a94","sha256":"e03f684302064db02afbf98b027e79bb95ce7b9987681d1d742ed17ad6f052ca","sha512":"2263c46b1afa121fa05db1531850f46fc0fe8f588725217597d66c4008909ed081fb59a789c8cd6b5a898c2da5da4ea6bf284900b6dc4da6c5ffde67387179de","ssdeep":"384:T8A62tqZWH//Pu4MFiga1kM0gtDtET0Ue0OzgyQhT3pHo:T8A62tHPu4NkeDtETX1Oz6pHo","tlshash":"6052d0827de371d1fe3b64776132bd9875e0a002c5bfe13e91ca611528a1653a87f0aa","first_seen":"2026-08-25T19:57:11.709045Z","last_seen":"2026-08-25T19:58:16.102618Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLjm4Dv8TRe_c2vaZtrLPGeC3SvzedxuPUnTCznkR9xsGiHzomgIn-UPwN1DZZyELNe5xDrlNTgY-jm5FeM3tkUnDK-0H3jUXrCJQ/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:40.286Z","timestamp":1787687800286,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLjm4Dv8TRe_c2vaZtrLPGeC3SvzedxuPUnTCznkR9xsGiHzomgIn-UPwN1DZZyELNe5xDrlNTgY-jm5FeM3tkUnDK-0H3jUXrCJQ/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:18 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 9242\r\nCache-Control: public, max-age=308875\r\nExpires: Sat, 29 Aug 2026 09:44:35 GMT\r\nDate: Tue, 25 Aug 2026 19:56:40 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9242,"size_decoded":11070,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"1f2da41d14147cbb911f5cbbc099bb5d","sha1":"505937b353bf11292b63fb90a509185df006c178","sha256":"6c7538ab584719a17c476741a45022bb557c9e30655ac03d84d8942ede22a910","sha512":"31f813dfc32d7f8d4837be7f44068a32e5e0cd15295d3d704995b07eade080fe1bd58f1cbb53b6e6fcc5bfb2f8a65ea9357202e00f5aa1f64bf89e8d63142e73","ssdeep":"192:bm5xfYaVc6/ZWlBSVDgAwDukRnsCIvp2P5OuOAhMUeQbvpJT1SdsquoO:bm5x79hzdAnIpU9ThM1sHss5","tlshash":"eb12bf9a26c12cfcbf6a26e03d708d2760c7f5036334edd016a8e5d8a6db054fa91736","first_seen":"2026-08-25T19:57:11.710597Z","last_seen":"2026-08-25T19:57:11.710597Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.798Z","timestamp":1787687776798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/d18812f10256b6a0-s.p.3ud7qwv93jsc9.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25520\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"63b0-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996500\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bcfeac8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25520,"size_decoded":27395,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25520, version 1.0","md5":"96e59d8ddd8db6744b7befc5a00b07f5","sha1":"8e1e04df23199a4ae26b41a82dd5e9bb6f8f17bd","sha256":"654a10e16314151c19a2adcfe65a18f4b8aa05bad373e578267cffb8f777965e","sha512":"134a7b084abf4fa71e3d6724ec01f3ad2d13299baa114f9c5786fe17e5e93e2ff49390ed17f3f82a6d7b6ffc21745658f6c0e29a37ab536c36d66d7a0038ef0f","ssdeep":"384:hBLfkY4jja1ObWBkh9lShbgW9A/vOv+Y7Ggj1K6bEPHv4myQLUWsqSgP3MUBQN:hBfa5HXOMWkk+Y7dj1fbjmJ1MYY","tlshash":"b2b2d17ce7fa20b590c5b61006dc3464e85f49ab1e685e4f80f541e7eb195326f9c039","first_seen":"2026-04-19T20:33:15.784832Z","last_seen":"2026-08-25T19:58:16.087341Z","times_seen":19,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2maed7hpfelmo.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.815Z","timestamp":1787687776815,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/2maed7hpfelmo.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"d8ca-19ffb9f4150\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 998130\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd1f3b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55498,"size_decoded":21002,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (37206)","md5":"634416bd69e824d3ac5bf7e21b3495f9","sha1":"f70c2cf07fb73a5ab02d49d69ce12777e7912a3c","sha256":"ab07d817ad97f9efd10e383ec8371bc45dd945d15de30f97482f4c0d870f353c","sha512":"39f6e5d5bebda8b7b99657701c9545d7a771e967075e07835275580cbb56b2aa7469b07a1454bbb5c49bea7fdf9b052379d2ee0d7660657fb021e248eca2fb47","ssdeep":"1536:kmro6CqnLBnAzD4pYBeDHWRDbzUYk2PbZ:kYo0AfwGbzJZ","tlshash":"4743c6e5b3967631479b0125907a0107f7ba8d90104b4938fa7cc9de3aa844ef2f6f79","first_seen":"2026-08-04T16:27:04.703207Z","last_seen":"2026-08-25T19:58:16.088129Z","times_seen":3,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/general/buttonNet.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.861Z","timestamp":1787687776861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/buttonNet.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/general/buttonNet.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 56718\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd68d08be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/3a6da684d9aa07d6edade12da0624891-6a6abba14c845.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:29.563Z","timestamp":1787687789563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/3a6da684d9aa07d6edade12da0624891-6a6abba14c845.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:29 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11564\r\ncf-ray: a30d290cc9758be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 5069\r\ncache-control: public, max-age=14400\r\netag: \"4221eadaa0905b77f8560f3d80eab619\"\r\nexpires: Tue, 25 Aug 2026 23:56:29 GMT\r\nlast-modified: Thu, 30 Jul 2026 02:49:06 GMT\r\nserver: cloudflare\r\nx-amz-id-2: F5ho63K5PmM1LQaPcovbr3MmCjYJ4xgSOJB07w1KlEWO5sHcIAf0/7t/nFuDo8ykP8DM8C3Hf3RyYhv4lvTV/wRaqS27Y/tO\r\nx-amz-request-id: A2AT5PP8NW4ZJ3ES\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: TlSadF_sDmSUkXraNuStRRw7rRGsYPS6\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11564,"size_decoded":12224,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"4221eadaa0905b77f8560f3d80eab619","sha1":"2a3e077862495f0af34e0f555809314fbf197b81","sha256":"3e972feae3740874f9e6a53e1a65a46d8033d40ffc3335d394235e77ddbce066","sha512":"a5c6a359ac02c8c5dedfab13302fd02cac32b218cc3f426220f7ff938a667cedb1abb648f92400e7895737a14f1d1a3721c49be12a86818c944eaa32f67dccc6","ssdeep":"192:EjuDUk4q3/SQAPFYIZUQBczsB6l0UGMDDWnqfMHxBHDFqk4IHqj5PTE9Bvion:ESVb3aQw/Spl0eoqf8HDF4y+c","tlshash":"9e329ea3820211f3f3913aab4a644d558ae532dbbc6f4c6ea5c4c577c17acc61973e0d","first_seen":"2026-08-25T19:57:11.714165Z","last_seen":"2026-08-25T19:57:11.714165Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/footer/allGamers.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.084Z","timestamp":1787687777084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/allGamers.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28bec8298be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: fZfDdNdHLxFgTiv4cchxYELm5iPv3vhL\r\naccess-control-allow-origin: *\r\nage: 47714\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: G8Kh2/AirnD49eumetXadWhU9PuWMP773RKHhM69V3YIL8anJA4VY/ubMBKiQhbcGN+4gUOe8tpRZXaeOYrcmKcVKx0epvYG\r\nx-amz-request-id: ZQ9S1ZJZ1G85AHJG\r\netag: W/\"eaf931a3b9f50190792646cf27c4d3a0\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":767,"size_decoded":1004,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eaf931a3b9f50190792646cf27c4d3a0","sha1":"e93ba1969023fbdca2ad89c295d124afbe5f0055","sha256":"8d4beff6ebcd09c3fb6bc42b9d21b6175fbfb2d3825c5868a5a019ba8e374c69","sha512":"3279dc6c4813773a8570587155c54f601d5b46a1be878f5e997b4276d65f1c2f3ca80341f9fe215debb3410fb57a5b3850bbe928e66e6bb67fb19175ccd48385","ssdeep":"","tlshash":"610124bacb0ca64c0cab8dbccf1f76e0031d56ea3484c298795f837025452e9f557d44","first_seen":"2026-08-10T05:31:31.998539Z","last_seen":"2026-08-25T19:58:16.07464Z","times_seen":5,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/android-chrome-512x512.png?v2=","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.923Z","timestamp":1787687777923,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/android-chrome-512x512.png?v2= HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/png\r\ncontent-length: 65679\r\ncf-ray: a30d28c409da8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3809\r\ncache-control: public, max-age=86400\r\netag: \"6ceca288f6c1177e5df6d6562d91b18e\"\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: Fppzbef2RWmj4/hrmUI+BzCXHO7HtjrMF1bLX4OQ0F5F5zUvUTvtYQRDqDafLw5KSNKoLc0BN8A=\r\nx-amz-request-id: S9TVN9HNBKA4RJX4\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: eDThb9HOM12p3pVMWlogTj6fd3rpMJt0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":65679,"size_decoded":66318,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"6ceca288f6c1177e5df6d6562d91b18e","sha1":"356b4ac481cf9d7693cdfcf13866794fb54bdcfe","sha256":"2973111d19a3400433625fadf23dd2e3851468bd3af2e9c5d3420bb8695fbe42","sha512":"c7fc1f67a87d92b8e9a2e519a3ae08f2919d1511a50262c5045b7ab0316138086d2e37a4845ded5aa09523f0b87603605e7d7b30a2b9b5a0d46f3f54237f0871","ssdeep":"1536:Dd4YBQ3MAI/5GFBBmaGoQ8bR2A8GudiK9TNqPeiUT:Dd4YBhGFvNGrAjudi4THZ","tlshash":"7d530203c6c61edea79a9b360db51f145381e128ecd3ab488f1de86a27414d9de53fc8","first_seen":"2026-06-25T10:28:05.325623Z","last_seen":"2026-08-25T19:58:16.064018Z","times_seen":7,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/sounds/Upgrade_Wheel_Roll_Slow.m4a","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.302Z","timestamp":1787687778302,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/sounds/Upgrade_Wheel_Roll_Slow.m4a HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/sounds/Upgrade_Wheel_Roll_Slow.m4a\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28c66c728be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/sounds/Upgrade_Win.m4a","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.308Z","timestamp":1787687778308,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/sounds/Upgrade_Win.m4a HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/sounds/Upgrade_Win.m4a\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28c66ca68be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"binary/octet-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru/rewards?_rsc=sV45AUiX02iMrD6O","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.758Z","timestamp":1787687778758,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /ru/rewards?_rsc=sV45AUiX02iMrD6O HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /ru/caser-one/main-app\r\nnext-router-prefetch: 1\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: text/x-component\r\nx-geo-country: NO\r\nx-nextjs-rewritten-path: /ru/caser-one/main-app/rewards\r\nx-middleware-rewrite: /ru/caser-one/main-app/rewards?_rsc=sV45AUiX02iMrD6O\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28c93b888be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3697,"size_decoded":4356,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2582)","md5":"c5fbe5bb28fca34bd04e2fb2ccf13878","sha1":"56fd3c381582e7ee05bf1b868841deaacdde862e","sha256":"ea50c08a9defe319655f79fbf09176b474f16edc4fcd01f35ead1b9283df993d","sha512":"c4cd1a357a2fd1864a6d92a230c9ae5a6f9417a79f1c7adda8ed857d060ef675ca471da906a3fad2472e9882c7567eac5e9fdde14a6a4e700f4a1d112f36b644","ssdeep":"","tlshash":"d471bf378245187f9b5797c8608fb20be68f123f1ea56e76944e1e1800eb7261e076f6","first_seen":"2026-08-25T19:57:11.71683Z","last_seen":"2026-08-25T19:57:11.71683Z","times_seen":1,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0seuKG3jye3nHKXKARVhpTuFeNG-M_2WltLjBRW2YRel_S1sDePAD82AYacuAPhBvysdVrCO7mEhyDBs9ftFPYAOilyIWZbt8ziczezAG/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.773Z","timestamp":1787687778773,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0seuKG3jye3nHKXKARVhpTuFeNG-M_2WltLjBRW2YRel_S1sDePAD82AYacuAPhBvysdVrCO7mEhyDBs9ftFPYAOilyIWZbt8ziczezAG/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 20 Aug 2026 00:00:00 GMT\r\nContent-Length: 23042\r\nCache-Control: public, max-age=599908\r\nExpires: Tue, 01 Sep 2026 18:34:46 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23042,"size_decoded":24871,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"d440282a0d486ef336b7d4f5503201b9","sha1":"9a6695e497bcf0dc0b06ecd9f78ab7020bccbc83","sha256":"b7300949a50e9881fac837d9c0671e625cda5cfe14ed00661749638461d90089","sha512":"95621510186d076bc0b443331ed5b12889376feea6253a5a4431eaa837e5ad9337e0c406789211abb1318807a34ce7f0305c9418d09bd77b9533b41eabbd33dc","ssdeep":"384:Sb/N2h4crFbv/H8HHerNkn1BJibeMz8NwdhutPWXhyAxP8+:o/e/v/H8H/l7Mzfdhu5yhyAxP7","tlshash":"3ca2e1d3230f2c24da53d45852b57e531e13bb72a7e419d4bba636f08e022e95c355f2","first_seen":"2026-08-10T05:31:31.870651Z","last_seen":"2026-08-25T19:58:16.138657Z","times_seen":6,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/sounds/Upgrade_Win.m4a","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.813Z","timestamp":1787687778813,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/sounds/Upgrade_Win.m4a HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://caser.one\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 67862\r\ncf-ray: a30d28ca0f778be6-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: \"dc65ffcb8763aa5b7d4afb00cc098f0c\"\r\nlast-modified: Fri, 24 Jul 2026 12:39:44 GMT\r\nserver: cloudflare\r\nx-amz-id-2: bqaELcnAaInxGQi7kQjpIwcP+0bbCJdfiTe7n49PTv7BMp+nOKLmEV+mYkxZRcVYCIBHVGgQ4EwWJkYclVUBinPepy7FnMew\r\nx-amz-request-id: VP0290SEVE7A3AD8\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: ZcYNbzRJAdV05sWZIRWmxuUo8pCtbLi2\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67862,"size_decoded":68484,"mime_type":"binary/octet-stream","magic":"ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio","md5":"dc65ffcb8763aa5b7d4afb00cc098f0c","sha1":"d0313255fb5e5b779f621fbc580e71b31bd463d9","sha256":"5604c8964b515919bba26d32c21b0e109b81d80f5b77b7b11229f093f4a373e5","sha512":"f2bf32328fb2432a8a0aea3f211afd0325507c35759c3cd532872e95c4f0d4ed97658a8549ccd412bbb12b9eef58ed3a7030bc29511254b7ca496997c5f20682","ssdeep":"1536:fHY41a6ZbaPkazGm6tDXnD+xAtrgHRigDSMhWB7uTgk5ItU6a6tpP7F8:LZbGGFn+Qrg8gzWZkMr7X7m","tlshash":"c363e011cb7a80cdf910833c6e57e30afb68342d45de45a6e3983a8fb99ec4991137c6","first_seen":"2026-08-10T05:31:31.801194Z","last_seen":"2026-08-25T19:58:16.148092Z","times_seen":6,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/2pcfs0_xhh0_7.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.830Z","timestamp":1787687776830,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/2pcfs0_xhh0_7.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"891d-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd3fbe8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35101,"size_decoded":15487,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (23089)","md5":"c81365888ab9be0734fb8450590091bc","sha1":"64f7878d40e435dfe2b6fd620f8d2ee7fbb221fd","sha256":"48b832784935dbb37840307f619f8ea8147992137610d6be80d16ee49afe89cc","sha512":"000cccc8861eafe2c2f5fc11b0597b06aa600af89c4fb09f2d0c3bfaac77664ab3984f99bfdee0fbb04ccb92f4405af1127d0e4a600a3e58e0d14fda0a8c93e7","ssdeep":"768:nSIuzNtEHRSZoqAqcrmxMTZbK1goQCEM6eW:dkAqcruM1G1gp6W","tlshash":"14f22c663287f482179b91c4942f000ef2795db9509e5424f3f6acb9297058ea1f3fbe","first_seen":"2026-08-25T19:57:11.719787Z","last_seen":"2026-08-25T19:58:16.0601Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/7363c6724ef764149ba2d36744cc709b-6a74445db11b2.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.401Z","timestamp":1787687778401,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/7363c6724ef764149ba2d36744cc709b-6a74445db11b2.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17573\r\ncf-ray: a30d28c70f338be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 52\r\ncache-control: public, max-age=14400\r\netag: \"76d06c7ec7a07a4c488c1808bdb43655\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Thu, 06 Aug 2026 08:22:54 GMT\r\nserver: cloudflare\r\nx-amz-id-2: Tch7NGg+gvPf6C0KXDwl8cg0ksVC+fXS5gTG6yVg+agn7cqfdoOg/Ui2k8vP8ANMbjyQP3JCaFe+L+XAgb6s1Q28deDxzmxU\r\nx-amz-request-id: DE8DR3KP16SVYKNR\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 2ghHCm4i05Nku0Tw9h7JQ3swnLsZvDGT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":17573,"size_decoded":18231,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"76d06c7ec7a07a4c488c1808bdb43655","sha1":"a6895ff5b6fc55b5f9c34e0238a578a242ea6364","sha256":"4e547844721176926eb2520c9b223aeb7d57c355a72149b65672c0069958db0c","sha512":"4a4279aa83f352f04407eb8c169f44ceca2df580da1dcb63deaccaf9ae9b0d99c77dd6046f12b8b2e6bb713b3609546cd7930a78ca8997b655536ff4beb7d1fe","ssdeep":"384:SK5qyNXs+UNmCOk6hBBKuV6tqI0YrP/h7ZWR+bwoSUO5LlW:SAtNsjyk6cdtqWjG4MoSUOHW","tlshash":"f182e0043284e2d1b698dd43c2765c1729fbe0b55803267b83d4549c5c7eef68baa4fe","first_seen":"2026-08-25T19:57:11.721267Z","last_seen":"2026-08-25T19:57:11.721267Z","times_seen":1,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/3ed6c08454b621c56948605280cf1344-6a15b899c57a6.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:34.554Z","timestamp":1787687794554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/3ed6c08454b621c56948605280cf1344-6a15b899c57a6.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:34 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12240\r\ncf-ray: a30d292bfcff8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1098\r\ncache-control: public, max-age=14400\r\netag: \"44e75636ab01a8e47599830f7c351b1b\"\r\nexpires: Tue, 25 Aug 2026 23:56:34 GMT\r\nlast-modified: Tue, 26 May 2026 15:13:30 GMT\r\nserver: cloudflare\r\nx-amz-id-2: PhXQU7r8s84QdMm7tGwIWIv2W96MkM5YPw2WdiQij6O49T8WYf/7Hi1BsuPqdhpc15Fcp+cki943EF/Y8D7F6OeN6BBiN59H\r\nx-amz-request-id: KGR9G1GFR75AVS2V\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":12240,"size_decoded":12872,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"44e75636ab01a8e47599830f7c351b1b","sha1":"50ff2698eddb9ce451d5f071f32354c4aa33869a","sha256":"a028113c44aa58c427dd4cb5f4934e6e49df1d50154752c4ab33945a790750cd","sha512":"cf39ddd734aa009065887c546c48c313da7b902e2d4f2ed90c7a124ed2b880bb7366d5cdfb603e4fa2ac80084f2ae468516fa8e0ae1e439c3c47eae3c8502303","ssdeep":"192:YElZJfuhhZVn0VZqYhIuIEwjF0CH6heK2w/hiVFKvft2kMyORMLgMBln58YsX1ai:vlZJGhhb0VMYhIQwra/Kyt2LnMXn58YM","tlshash":"7a42bfc72da72ecab4479931a6f44fed91e6bf0450e992c381c0484724e76dbc4ae249","first_seen":"2026-08-25T19:57:11.722897Z","last_seen":"2026-08-25T19:57:11.722897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/3p6b3ql599bru.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.832Z","timestamp":1787687776832,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/3p6b3ql599bru.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"84c3-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd3fc18be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33987,"size_decoded":11218,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33646)","md5":"7290c08242ef76d05e0d91551cdf88f0","sha1":"040b8bd37062bd371e4d6cd47b4e06fc568e620a","sha256":"fc2573aeb805c1109ab67ba9cbbe7b1acb6efe13d67e9da0de76e2dbefdfb630","sha512":"eec6240313d9425429c0af2366a208538b33797b70cf8b6a66aa8fa8dd697475c456e9d5f5b262892d5047774151cfd5183d058a6ec04f1f5418231d4a3eef93","ssdeep":"768:nSSLaGWb54fU5t3hBF/QVRPjaBcsttCtg7Rat8b48k5An:7LaGWd4fU5t3hBF/QVRPjaBcsttC2Ra0","tlshash":"e5e28800502e6bbcb6163966342d940d60cdab4ccf1fc864b5be7c261da50d87b97bee","first_seen":"2026-08-25T19:57:11.725228Z","last_seen":"2026-08-25T19:58:16.179028Z","times_seen":2,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/general/sortIcon.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.864Z","timestamp":1787687776864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/sortIcon.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/general/sortIcon.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47713\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd68e88be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/game/spinner-arrow.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.387Z","timestamp":1787687778387,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/spinner-arrow.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/game/spinner-arrow.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47715\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c6eecb8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2zYXnrB1c_M2pO7dqcc-RG2STwOBztfNWQyC0nQlp4j7Syt-rdHPEOAIjCpV5TLQK40K5wdLjY-_r7wfeio1AySiriCIf6DErvbj1Mwus0A/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.426Z","timestamp":1787687778426,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2zYXnrB1c_M2pO7dqcc-RG2STwOBztfNWQyC0nQlp4j7Syt-rdHPEOAIjCpV5TLQK40K5wdLjY-_r7wfeio1AySiriCIf6DErvbj1Mwus0A/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:52 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 9736\r\nCache-Control: public, max-age=131870\r\nExpires: Thu, 27 Aug 2026 08:34:08 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9736,"size_decoded":11564,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0b7eebc8ae9d0d11e9bd995b3aeb0d4f","sha1":"ebe67986dfad600dc03c36ae90abe7c1a60952bb","sha256":"01174572e0aa58a735c5cf01940c8922a03446ea09a02a01b2081984b3d02ef4","sha512":"96dff26d1b27542cc98b18a6669bff69ab9969c0f30a553c58f4f7223f861f7957fed0918ded43510e3bf00957b9b7a90e6752df7d37f622845e491e7a39456d","ssdeep":"192:Llsele53Nx8Ge/GMja20OvD/4c9eN36zfnyNmvN6GsA6yuQtxVZqtm9e:LlsqwAjTLvEjofFFJSZOvZSmI","tlshash":"f6129dc9665b050f40963e50f36367da61b6f1484b427f9eaca6cd2b8e5c1c884ce2e9","first_seen":"2026-08-25T19:57:11.72714Z","last_seen":"2026-08-25T19:57:11.72714Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/4c97440619ddefa4ab16353fc3841662-6a3052ff8ff77.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.466Z","timestamp":1787687778466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/4c97440619ddefa4ab16353fc3841662-6a3052ff8ff77.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 21170\r\ncf-ray: a30d28c7696d8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2954\r\ncache-control: public, max-age=14400\r\netag: \"28f1fb82f3d700387dc7bfb107b0d34c\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Mon, 15 Jun 2026 19:31:12 GMT\r\nserver: cloudflare\r\nx-amz-id-2: ZIJaTAENh/O6pALLfKBily+gFq8SXO/Fw29Yc8mMnMYqAgnjeEEAXnNxIGIGy5QZ7nxx0g6O/9KxFVo1R7HgJjkD64i6U6k1\r\nx-amz-request-id: K1Q1S7WYESQ7YCAJ\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: C2s0_k.NO0NHDMmXPfYzyFBhmpJl_aRz\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21170,"size_decoded":21830,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"28f1fb82f3d700387dc7bfb107b0d34c","sha1":"1e9557c66e14ff89f6557f7539ff2c4543ff3457","sha256":"6cf30ae03df2c3afe3df95ac4549fd0c22870cd6e4f1eac66213660d7fbd0501","sha512":"4de8536d8688c8e0e4ae969606e28316e824a699f11cff0991b1b9b08990c80bd9d20aece9b707300b36badd4935cdee91c6d4081fdfe3dbb5f029b3a9ca62b8","ssdeep":"384:0hYjiMKVULtt00a6t5dUcwDZSX6ZrBlq2NaP9tlM1/4m5:0hciNm00acDUcw1SClDae","tlshash":"1e92d08e182d4769f8032de2348ac96973c89407b119169ef1d2cd989eefa079c9716c","first_seen":"2026-08-25T19:57:11.728699Z","last_seen":"2026-08-25T19:57:11.728699Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8jsPz-R1c_M2jePFSJvWAGm6GwOJJtPNgXxa7kBwxqnPdw9epJCmXagEjDpd2F7FZ4RO5wYK1Mb_g5lbbjYlCyiWvjXsfuClp_a9cBrTn4kH9/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.432Z","timestamp":1787687778432,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8jsPz-R1c_M2jePFSJvWAGm6GwOJJtPNgXxa7kBwxqnPdw9epJCmXagEjDpd2F7FZ4RO5wYK1Mb_g5lbbjYlCyiWvjXsfuClp_a9cBrTn4kH9/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:09:57 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8642\r\nCache-Control: public, max-age=297427\r\nExpires: Sat, 29 Aug 2026 06:33:25 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8642,"size_decoded":10470,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"8b637014fd102462c169336f9b17f678","sha1":"f95785ea094569db02fe70645aa16cccf68bddd2","sha256":"7e5d97bcc3ac2e4406d4beda8b5ecbb6af160c138b0fed3f8ee49c7c8231bb9e","sha512":"72dd938d348c1d42d2299e83de0f258535561c289d0a6f5f69578f3b32f904c1cc97dc00d08dbe541f9838dcfb3868a6911df17c190d38b208b800ca36cad45f","ssdeep":"192:+BPSALCEmpLS4sLFQDn8VFOKmM4i2LHslXOwWSo2t:kWLpmXOKF4i+HslewWSf","tlshash":"ee029eaf7049265b36e33a2382f473c249a3499fd7451d8e9885e9dd0c2659db10ca49","first_seen":"2026-08-25T19:57:11.743899Z","last_seen":"2026-08-25T19:58:16.186402Z","times_seen":2,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/game/spinner-group-2.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.889Z","timestamp":1787687778889,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/spinner-group-2.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 11940\r\ncf-ray: a30d28ca0f728be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1347\r\ncache-control: public, max-age=86400\r\netag: \"6aece2d787cdfc068af89f1fce97f9bd\"\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:42 GMT\r\nserver: cloudflare\r\nx-amz-id-2: EmDP+1gcZYvcmqanutdoGp6WDAqz7C0+OLlhdzN4HWnoFXA2dLy0c7kxEjCnjL22seZSsR1rZA9VJQ5tO5xu5MxVs6KPvL1q\r\nx-amz-request-id: 171Z0D1FJ5ED6DBY\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: mYwgRrJUYde51ngnXh3Exep3OJ69FY9N\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11940,"size_decoded":12609,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6aece2d787cdfc068af89f1fce97f9bd","sha1":"02efd8c837a186029d588868bd7d944063ba1781","sha256":"53193e619303b1f19ca7656040f52f61f12be63da19f462ee270f6716fb078d8","sha512":"595d6c7385212ae4a7c84ca0c6a441a307c1df07d5f2ee338592ab9afb05363ac2a04e636c2302921295e503bb5ddf5b9b848984742f0db09bf188f4d1a84964","ssdeep":"192:tNiWzMBBwEjwWWymxGMusWu2dbbaqJ3PNUfAtd3sTEpFB3lOnuBt8:tYNmxQCebbaqJ3Zd3sgpFB36st8","tlshash":"9e32aff0758f3856ca00426924a1e4e86ef37d629bbe857b9340f8aa7d294d62ed4118","first_seen":"2026-08-10T05:31:31.775228Z","last_seen":"2026-08-25T19:58:16.191862Z","times_seen":6,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL_kYDhwixU-fORe6lsMuSsAm6Xyfo44OI_G3vhkEUi5W_dw46reXiWbAZzWcN3E-QM5BDul9HiNevkswLeipUFk3v5u-E4uw/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:41.009Z","timestamp":1787687801009,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL_kYDhwixU-fORe6lsMuSsAm6Xyfo44OI_G3vhkEUi5W_dw46reXiWbAZzWcN3E-QM5BDul9HiNevkswLeipUFk3v5u-E4uw/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 08 Jul 2026 22:51:17 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 6797\r\nCache-Control: public, max-age=139904\r\nExpires: Thu, 27 Aug 2026 10:48:25 GMT\r\nDate: Tue, 25 Aug 2026 19:56:41 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6797,"size_decoded":8625,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b9dd318e10b6cfdb62acc603119897a7","sha1":"a5adffaa7a6f68b9693fec0f10c403a1ecf5558d","sha256":"89a4fb81ea679a24f38fb4ac24ee872085798b25a95ac1e51febf9fd677cb2c8","sha512":"b810be5e002b2ba2b539004c3a38bd076172dac1ee3e2197483339cd72f187ccd8dec560ced865546a4e4fa1ccfc8f63da983158ce571e4e5606ff7e3b7e7181","ssdeep":"192:smweNEMvODvmtMfoJnLcwG4psqS6rhkHcDNMIZ/tdKdfcGlSd:0YuvIMQJnfRS4hkHc6IZ/tdKxcGO","tlshash":"77e19ef7b548fcb70610ba05025420036d6676774a3ba4e803ccf4a4ed94e98cb5ae2e","first_seen":"2026-08-25T19:57:11.749491Z","last_seen":"2026-08-25T19:57:11.749491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/liveDrop/hotGray.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.855Z","timestamp":1787687776855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/liveDrop/hotGray.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/liveDrop/hotGray.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47714\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd589a8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/general/buttonNet.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.067Z","timestamp":1787687777067,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/buttonNet.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28beaf928be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: bPCleLPE372DBEDQu_fWtYgO.yjRKCt.\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: W/mZ9eVWK7cdtcR8CAUitWCqR5Ln68VNtF6DhYwobgsvTRZZiyUgW5lQV1BW16bFOfXcf2ZJ0rJaFvxqPSQK/ZH5ghppj3CK\r\nx-amz-request-id: ZQ9RNYD4218M9PB7\r\netag: W/\"3e82bd2c4bc5e00353e832297559e05a\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6024,"size_decoded":1326,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3e82bd2c4bc5e00353e832297559e05a","sha1":"8e59d799bbf1e70602ab7f8f89122fd4ff1a4252","sha256":"7cfce763138a8afa5e312665718218fc8bac88a3523a14fd07bef078b3949f4b","sha512":"7a7b6aca3b4ec3f84ab9e37072de667aa4ed9abb702aa8b2f199bd37aad92574698cf53940512251161c840488ab2e8af446ea5bf592ce0e471f998a971f7352","ssdeep":"48:e/YLY5K2azBwKQTqN8+Knpt2rt2rO5k+L:X2azBwKQTqNPKnWv","tlshash":"44c1dcc77a5451bf07ff026a8b61b91153eba6d425b3c98b638422415eeb9ddc4034f8","first_seen":"2026-08-10T05:31:31.916083Z","last_seen":"2026-08-25T19:58:16.142801Z","times_seen":6,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8n5G3wjFL0P-vb_NSJvmBC2WZ1fpzvt5hSiiljFN_5D_XyN-rdX-XaVBxCsEmFLJetBjpkNe1Zerj7wWMgo9ByC322yoa8G81tIf4hEY4/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.452Z","timestamp":1787687778452,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8n5G3wjFL0P-vb_NSJvmBC2WZ1fpzvt5hSiiljFN_5D_XyN-rdX-XaVBxCsEmFLJetBjpkNe1Zerj7wWMgo9ByC322yoa8G81tIf4hEY4/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Wed, 07 Feb 2024 00:09:57 GMT\r\nContent-Length: 10145\r\nCache-Control: public, max-age=572437\r\nExpires: Tue, 01 Sep 2026 10:56:55 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10145,"size_decoded":11974,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"5894806850ef542b0cf284960c21b781","sha1":"98930e7afe4528a1f61cb74987e65017ece2dc73","sha256":"f2dc844ebc76973aa16b5fad285a0733115334216be9fb7dca2ac77e469d7184","sha512":"03596d1e6f7fb31a6b27765e8371ca4c39592c837a84702ac0dd55b2fb7b44a88c62c66f866866cf49f152860d8c8a5a2b2b0754575f4d89e982f9e0058c69c5","ssdeep":"192:Nr2yZ7BIxlZfoqEikNRY85lHtemijoaRXg7uAgM4N25VrD7EQWzz7sF:Nr2IWFCxwUO8aRXOSWrDPOoF","tlshash":"01228ef07377b559f914c0a0663da026e2e706d2e666c5ea1824bb3c528faf403509ad","first_seen":"2026-08-25T19:57:11.75638Z","last_seen":"2026-08-25T19:57:11.75638Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/game/upgrade-logo.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.878Z","timestamp":1787687778878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/upgrade-logo.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 24340\r\ncf-ray: a30d28c9ff148be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47723\r\ncache-control: public, max-age=86400\r\netag: \"9134febf29b82614c99691bc19a264f3\"\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:42 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 4XITd/jzQmm1mHAJwF5qoLliBRMlWqtO/6A/sT35Lxgx9dlBQ+iI2htY9DO7PUErz0qW5tONi+qZUkdPXFqpaLrK+RiX2e9O\r\nx-amz-request-id: RQGD892NKSCNCEAJ\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Juoxj8x.otaBoNjG.5LCM4e3MpIMq40l\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24340,"size_decoded":25010,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9134febf29b82614c99691bc19a264f3","sha1":"7f19e966d42ae9075b6b80e6a14b3fc4c5f6418f","sha256":"faa9402945646702b01efc603f0638e470e6f56bcc6160006fd29a79523425d5","sha512":"6b2f24391e152607adc8e737f8dc1d50af87dfa8386bfea3da22c6b555a36018462b244cf565a47f4f09d27418061526f22c8febff312041851f4e76a9a78ee4","ssdeep":"384:QCBTBKHpbVJ971VMDN+vTM5t0Wjbd3ZIgeTn/86sKmOv2MBVsMAhvI3nuHh/3m:vBEV/hyRV5ioN8L06sK1vAjhvI+R","tlshash":"14b2e1dd2cd3440342bc1f9a69f72799ed3d420f57779cb6e0581c55fa361a2b4920b8","first_seen":"2026-04-19T20:33:15.918383Z","last_seen":"2026-08-25T19:58:16.189007Z","times_seen":17,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T19:56:13.123Z","timestamp":1787687773123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nlocation: https://caser.one/ru\r\nserver: cloudflare\r\ncf-ray: a30d28b9bf578be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":3159,"timings":{"blocked":-1,"dns":5,"connect":1,"send":0,"wait":7,"receive":0,"ssl":3145},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL3n5vh7h1a4s2gfadhJfGBMXSb1OJ6o7NWSSi-lA4YvjiBk5r0b37EZgJzC5V2EbFe5hm6ldWzNby25FHb2NhMmyT_jnlKuH094OwFBKU7uvqA6fqDl5U/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:23.176Z","timestamp":1787687783176,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL3n5vh7h1a4s2gfadhJfGBMXSb1OJ6o7NWSSi-lA4YvjiBk5r0b37EZgJzC5V2EbFe5hm6ldWzNby25FHb2NhMmyT_jnlKuH094OwFBKU7uvqA6fqDl5U/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:46 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 10396\r\nCache-Control: public, max-age=227893\r\nExpires: Fri, 28 Aug 2026 11:14:36 GMT\r\nDate: Tue, 25 Aug 2026 19:56:23 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10396,"size_decoded":12225,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"50c8689ed6984321d983b5bf1c9e27cf","sha1":"c92f63597451e697f7759ed8237cc3ad727a5ae7","sha256":"3ccb5a08bf07e033a5204d71d78d9456722ceb8515e715d37bd1ff1fdd9fda76","sha512":"56b89935b59ac06521913b60025ee14c5f5713f1ddb6c7bd651d7464f66cff705a280ee46f93556b3b8d87d0b8a594fc56313849404986d1ce0adc8c84fea5f6","ssdeep":"192:/Qa76qLhH+f5utp4Sa0vAYnatJB65KyxtdMh7wCH0U98Pg2ypmFvINPkJ:IG6YhH+fap4SavjyDTU+Y4gNO","tlshash":"b122b030c3bfe31cb74b88526114fea2d229a1a20d06eac6954db54bb292f1518fd666","first_seen":"2026-08-25T19:57:11.759913Z","last_seen":"2026-08-25T19:57:11.759913Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/1zzi2w2ce1xmy.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.840Z","timestamp":1787687776840,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/1zzi2w2ce1xmy.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 14 Aug 2026 07:54:25 GMT\r\netag: W/\"1ec0f5-19fff43db68\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 692540\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd4ff88be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2015477,"size_decoded":564271,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (56963)","md5":"a71310d766127bb232fa4c91a3931e75","sha1":"ca96779e15f0f8bc8e3305dee75bd865d4dd680c","sha256":"70641dd3fd2951c5d092e6a4ed36a7fe67f5d8e0cf6db66c87cc66d5844b44a0","sha512":"33846a189926db3eeac722132132c514637f63300af908831750cd8baf0afed166cac8333d78c955e6d1761a04e0da8ade75aba3163234de46b3303bd1b3550d","ssdeep":"24576:vbTryrhOo8vB3Cm+hWoYcgwxHSUQeIaiHhIKF7sZ3ssc:vryrhOo8vB3Cm+hWoYcDHSUQeliHhIKd","tlshash":"20255ce573a5b0278b5b6097047a0442f32db8e62c0d482cbe2c98d7769589572fffb1","first_seen":"2026-08-25T19:57:11.762649Z","last_seen":"2026-08-25T19:58:16.188421Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/header/activeState.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.196Z","timestamp":1787687778196,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/header/activeState.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/header/activeState.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47722\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c5b97e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/ru/inventory?_rsc=sV45AUiX02iMrD6O","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.757Z","timestamp":1787687778757,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /ru/inventory?_rsc=sV45AUiX02iMrD6O HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nrsc: 1\r\nnext-router-state-tree: %5B%22%22%2C%7B%7D%2Cnull%2C%22metadata-only%22%5D\r\nnext-url: /ru/caser-one/main-app\r\nnext-router-prefetch: 1\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: text/x-component\r\nx-geo-country: NO\r\nx-nextjs-rewritten-path: /ru/caser-one/main-app/inventory\r\nx-middleware-rewrite: /ru/caser-one/main-app/inventory?_rsc=sV45AUiX02iMrD6O\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\ncache-control: private, no-cache, no-store, max-age=0, must-revalidate\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: a30d28c93b748be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2518,"size_decoded":4180,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (1401)","md5":"d6f3b5f9a6b9932f5ee287d0e4d2e532","sha1":"614fd991dedcb8f50f5da818e61b0b524d3f5b07","sha256":"7e240cf00b1d328199d9cb090945da4adaa60fac33d74e1a0d00ead61988d9f9","sha512":"63c5260c8d8b4d88cb1d0248dff063e870ae2b5dbe5f79fd26a4a40f775467f782888d984595e7b58fa3937c80537b0d66a07035b6e6132f21231fb95905a083","ssdeep":"","tlshash":"7a51123b8600689f5b6786d5108be14afb4e037f5b986db280492d2806eb7291f533f7","first_seen":"2026-08-25T19:57:11.76506Z","last_seen":"2026-08-25T19:57:11.76506Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/header/headerBG.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.850Z","timestamp":1787687776850,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/header/headerBG.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/header/headerBG.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 1332\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd586e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qeeMDmC5bDbHf3aNHQk6TbMLZzrcqmH04ruQQz7PQe4tRQBXL6VV9TFPNJiAPwx9itAdqGq0mFZwCxo8e9VKaVK_nndKZL8EWO28Tg/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.775Z","timestamp":1787687778775,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qeeMDmC5bDbHf3aNHQk6TbMLZzrcqmH04ruQQz7PQe4tRQBXL6VV9TFPNJiAPwx9itAdqGq0mFZwCxo8e9VKaVK_nndKZL8EWO28Tg/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 13 Aug 2026 00:00:00 GMT\r\nContent-Length: 12719\r\nCache-Control: public, max-age=314846\r\nExpires: Sat, 29 Aug 2026 11:23:44 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12719,"size_decoded":14548,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"5d21b21efc6cc2db9be136c5fc7f1b2e","sha1":"82563ab4b426a74a31922452fbb87013ef0e9f86","sha256":"60e32586633f087e5366e4aa023e3c42051157ce21e5929ac4fec384e9b62f07","sha512":"92f0a24ed325bd2394adbb7a9d71a9e473b0ce63851a1c807be94e312f6334835410f1536975d634cee8cb93596432e3d30b6381f47fae5f0b8cd4c322533a14","ssdeep":"384:VHtmauxuggv+qnXCoqCGq94AarGfHyRytKeXW+QFy:H6s+qny092rGfHyRyt5W+QFy","tlshash":"2542b070e2de12e0d9547cb0f6a0c2a46dc587f30970e9a864772a6376db3c28a1a95d","first_seen":"2026-08-25T19:57:11.767423Z","last_seen":"2026-08-25T19:58:16.139175Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/game/spinner-group-3.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.876Z","timestamp":1787687778876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/spinner-group-3.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 6312\r\ncf-ray: a30d28c9ff028be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\netag: \"3f9a4663c842cc8f707d1e4085591765\"\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:42 GMT\r\nserver: cloudflare\r\nx-amz-id-2: qfktgd08Tt/RCzMei2WWlQC0RptZasGJd8rRaNzYdIiqlZgXfci/No3WZIUMJMXLj9Exnb4RufZpMMK6a67R9Qh15et0rtGx\r\nx-amz-request-id: RQG7TMAN96FG3Q0N\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: vvYIZtHYdD9ejq1VSaziZHFCVn1.ImIn\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6312,"size_decoded":6981,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3f9a4663c842cc8f707d1e4085591765","sha1":"156fe72b726adf12ad49485f49c3fbf86cfa2d33","sha256":"32b3978a3c5d11ef6a6e1745801ef1ce7a1b128d0919bb984ff2444fc50a126f","sha512":"0a15a026793a412a6dc7f7501dd909facd4944a20b74909eb09948edb4b3f40daa04b44a6ba6c006868f361231e51417c482b5bd2e61ccab5dd5723a35a26558","ssdeep":"96:OeODcDfrHjY2Hj5+2hyZdPrBsMbzzsIei+dAtZDHiaqvjae5+FrdSn:ZOD6DU2DY20ZdN/bzzXeFd+BHPcjgZ6","tlshash":"1ed190c8e2a5084d1b0f876ab4879145efd7a03b75bd72a599a5761688cf42e35f0820","first_seen":"2026-08-10T05:31:32.000185Z","last_seen":"2026-08-25T19:58:16.168233Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wiNQu6WRbbx9LP-AB3GV_uNztOh8QmexlhtwsW7Qno6vc3ufaAd2WZR4TOcJ4RC-lYezMbngsgCLiolHzimvkGoXuYrtgXO6/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:34.552Z","timestamp":1787687794552,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wiNQu6WRbbx9LP-AB3GV_uNztOh8QmexlhtwsW7Qno6vc3ufaAd2WZR4TOcJ4RC-lYezMbngsgCLiolHzimvkGoXuYrtgXO6/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 31 Mar 2025 23:00:19 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8170\r\nCache-Control: public, max-age=155614\r\nExpires: Thu, 27 Aug 2026 15:10:08 GMT\r\nDate: Tue, 25 Aug 2026 19:56:34 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8170,"size_decoded":9998,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"a9657b874e94ae198c22820e5cf52181","sha1":"be013c72ba89fd249865438925a2a44913a5f423","sha256":"c68ab74cf92258082de8e14b7b57456717d80fc60d6f3ca0af044e0c851500ad","sha512":"b206d29bf99b93d22b181634addc0cf4c8d4fea0088ca41d0e521cfef87aacdf63b9c2f956af83d737e18edeed0957a3347fbae7b7b2c216406b7144290e93b1","ssdeep":"192:fahb1bkLyqnM2e40Lu7uR5xvrrzz35vQbyMGHyWud3:fahb14OUzvqjtTz35vQby16V","tlshash":"50f1d0474110f29223f9b63528e23a29ce98b6171cdff45175c47cadaa52fd09413acf","first_seen":"2026-08-10T05:31:31.824125Z","last_seen":"2026-08-25T19:58:16.191301Z","times_seen":6,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/542c81e7f1d31ffaa57e60c25e775d26-6a6cc49be6d5d.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:38.698Z","timestamp":1787687798698,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/542c81e7f1d31ffaa57e60c25e775d26-6a6cc49be6d5d.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:38 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9617\r\ncf-ray: a30d2945dbb78be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2994\r\ncache-control: public, max-age=14400\r\netag: \"df0f9d678815263324f46a3b980e8f6d\"\r\nexpires: Tue, 25 Aug 2026 23:56:38 GMT\r\nlast-modified: Fri, 31 Jul 2026 15:51:57 GMT\r\nserver: cloudflare\r\nx-amz-id-2: NiwE9D6xQZ9DRabwtu0iI6b0cI0sAVjLsASYzkn+pSM6KIsumTy3HF0SXduZ717UucfSn73Uf4IuRQ4h3eOz4TempfCsGLkh\r\nx-amz-request-id: KM9GA7NJ3WHJHDW9\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: D5MQzKEgV9vL_rG6O9hgZDDUUFpIwp9A\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9617,"size_decoded":10276,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"df0f9d678815263324f46a3b980e8f6d","sha1":"efd620c46a91da47f7849690bc0d34fbfadd2431","sha256":"a6a31731a84c02c9dbce073739493ad3abb9b962c384abbccac312698b438603","sha512":"25a6e78eb998231ccdc27e9a34b9ae4d0163e4c28527ec81a19332a0aac64f195b913e0fac3ed7d757aa73e919f5c7058ff15482199ff2319b3d7a68f0b0ca68","ssdeep":"192:hxkeY/J6NFbJb2bIMxOVnynY1UM++iclSJDwWGx2I8Mln:hxkeY/oNukkYqT+TSVwWGEK","tlshash":"fc12b04333e10ce7f89166b1c6ae27e13ad7d5e4e83c892d01d27a3186f166a018cc97","first_seen":"2026-08-25T19:57:11.771821Z","last_seen":"2026-08-25T19:57:11.771821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/general/sortIcon.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.069Z","timestamp":1787687777069,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/sortIcon.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28beaf9c8be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: Wg3XyBAP2PTwxCap63XFF7ZfFY9SXE7y\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:40 GMT\r\nserver: cloudflare\r\nx-amz-id-2: dGdLWwqHxv0/NtYzcaK8ahhjG4JtYWNaD/rBmTEpApmVqv1up+qIHTVs70EZZNoLRx+AATn1gpvMC/qF8ZS/r1JL5BptxvCt\r\nx-amz-request-id: ZQ9YY9324B4QWDJF\r\netag: W/\"5ec9f05d972a95f15200df756862e7ba\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":694,"size_decoded":960,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5ec9f05d972a95f15200df756862e7ba","sha1":"bbb9ab5fffa30f297822d87a8fa119b34730177b","sha256":"91759fa1f341093476d503259df2ac3ed359d4748d27a2a8686f06af60743491","sha512":"fa9c9a874b443df20df66f2e0a8824b15d12663078c9babad0c90b2b3abd0ab923067dc13bc97a3b990a0756db4a9b387d27a2fdb3e45fac8dfea99fd73e4daf","ssdeep":"","tlshash":"3b015e1952ac750f355c969786386470eb3e2874317cf0e45a4ff38780420c5e3230ea","first_seen":"2026-08-25T19:57:11.77419Z","last_seen":"2026-08-25T19:58:16.181662Z","times_seen":2,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.caser.one/static/javascripts/en_default_a7f5f2d.js","fqdn":"chat.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.428Z","timestamp":1787687779428,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /static/javascripts/en_default_a7f5f2d.js HTTP/1.1\r\nHost: chat.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://chat.caser.one/static/javascripts/client_default_a7f5f2d.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: https://caser.one\r\ncache-control: public, max-age=315360000\r\nexpires: Fri, 22 Aug 2036 19:56:19 GMT\r\nlast-modified: Tue, 25 Aug 2026 17:55:47 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nx-content-type-options: nosniff\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Authorization, X-Crisp-Client-Url\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 300\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a30d28cd692b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16215,"size_decoded":5915,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16121)","md5":"cca1c7873906505ac437cfd1670b22c8","sha1":"9dbadd75612848154bfec4070e9d1f96f60978ae","sha256":"1fd8bae6b49e451e887237c30383ba9a81e8a2626196050319883be4503166b6","sha512":"b98c11851f12ddeaca7109bcb2b6cb8ef9750220412a26255e76b1e92a177a26574f038888b5898401da3836e50e7a2cd453536d6d2e2873732ecce58e43767c","ssdeep":"192:viJbPFmXDS83jwhKwPteE2WZXgkEeMeTAFSIPAU1RrUWBGfj7nOmrY2FYXCYLvv0:vePFmX28+XgkEeMeYSIPfRrLc7sQrSRs","tlshash":"6e72ca0edf32de7b03b74b83b185ba024eb5117106e0687ed45d497d02a4ecab69bf49","first_seen":"2026-08-25T19:57:11.776478Z","last_seen":"2026-08-25T20:55:38.764729Z","times_seen":4,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"chat.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wiFO0POlPPNSN_mdGmKC_v1mv_N9cCG2lAs-_TiAmNevcH2SO1V0XJMiRu8MtkPtwdXmNL-z5VSLjIlDmyz33C9OvyZ1o7FVaIy7BmA/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:42.862Z","timestamp":1787687802862,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wiFO0POlPPNSN_mdGmKC_v1mv_N9cCG2lAs-_TiAmNevcH2SO1V0XJMiRu8MtkPtwdXmNL-z5VSLjIlDmyz33C9OvyZ1o7FVaIy7BmA/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:20 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8171\r\nCache-Control: public, max-age=479480\r\nExpires: Mon, 31 Aug 2026 09:08:02 GMT\r\nDate: Tue, 25 Aug 2026 19:56:42 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8171,"size_decoded":9999,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"6ca4ef8d6a2bcb32842f6b97a2192e6a","sha1":"44d2fda1f66dfd16424c32b204912ad1effa973e","sha256":"5f1983432267a31ef9bd4b9b3822151138604386dc8b0b920bd45412e778742b","sha512":"1d56e453acf763a88d99866006a27ad335372a7a0146a9ac579dece0b80be96c29406c5f2bcc06d08dc244a751d41b0d978e6d8c7eef2dfa418f88e4e655b0f3","ssdeep":"192:DX/ZI5tSt13+x1Hi7piC3GIvLq93kjtmYX8Wv3:jI2oDHlAqmjt1v","tlshash":"09f1bfb163701a1bb923b71d806e0c9152e0d413e431de091996626479b1fcadeb37f5","first_seen":"2026-08-25T19:57:11.778734Z","last_seen":"2026-08-25T19:57:11.778734Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/general/arrowDownIcon.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.074Z","timestamp":1787687777074,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/arrowDownIcon.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28bebfc58be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: VdHYk98iRV7LyMmeBriz_nEFMMXH1kQI\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: qLtSl494o61m4pg30C3uBfDM5e6PXJGiZyO67rbmVb0pAREzQPinQG+N6gVMzWUEJ7awgle4tmmgnMUhiqsHdXCgG/gwnWxh\r\nx-amz-request-id: ZQ9S0YD2C6PM6X18\r\netag: W/\"ec5936df841238f658462032d30e5fb2\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":309,"size_decoded":841,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ec5936df841238f658462032d30e5fb2","sha1":"a8b71d270d99d9f04b289ea6e872f76ff6fade17","sha256":"e3fdf69aaa8d9356cf06f2f29ccc801199bfda5f401e21c58ae830fa9d1da890","sha512":"a4496818312851d091bb979a4fdd7036b619703e8c47d470f36758f6841fc6c5112c6a8d5a82d2b7b6674783cabaae47b76859674e4bf66f44f4a3c5c828d6c1","ssdeep":"","tlshash":"e8e046bc8e3c130c8b268e413a5cb1053bae61e4664cc5ae98cc6e6bb1c7366d90bc05","first_seen":"2026-08-10T05:31:31.984642Z","last_seen":"2026-08-25T19:58:16.168713Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2n5rp8SNJ0PG7V6NsLPmfMWSY0-F7sd55Rie4qhEutDWR1NivcH2VOAchC8B4ReZesxa5l4LlPu6z7wTa2IhHmCj4jyNJ7Sls4LscEf1yskqHCW4/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.409Z","timestamp":1787687778409,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL2n5rp8SNJ0PG7V6NsLPmfMWSY0-F7sd55Rie4qhEutDWR1NivcH2VOAchC8B4ReZesxa5l4LlPu6z7wTa2IhHmCj4jyNJ7Sls4LscEf1yskqHCW4/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:55 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8794\r\nCache-Control: public, max-age=541619\r\nExpires: Tue, 01 Sep 2026 02:23:17 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8794,"size_decoded":10622,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"bc91623a05c0b1f46b963e3e82b7f4b4","sha1":"7dedfe054d6256d5bb171237315c97fa6e6bb7d1","sha256":"9fdaede075bd58a284553db122b352c284f9caaf07585bc80f83cf83a744de4a","sha512":"26316646c1715221139089181c9d33bef8f1d6672310e6db14e7451021b5f8c9e4c2061f504a0822df792db7e56238dba39394473bf953dc6fb2eb51a234094e","ssdeep":"192:WaIpXLoOCC5RJ55Ul1g5NeI7LYnfR/uaIes6DKHvv/M:W5b81g+IQJmaIjPP8","tlshash":"6402bf5a828d3fa242119d2b4f13dfeb3b9766a26c230709354fd963bc59db09dd2502","first_seen":"2026-08-25T19:57:11.781888Z","last_seen":"2026-08-25T19:57:11.781888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":3,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwi5Hf-jFk7uepV7d5Of2DBmacyO94j-NgXS2gqhEutDWR1Iz6cnqXOA8mD5shTOEPuhm-moHlZLnj4gLWjdhEzimr2n8bvC5q4e8cEf1yYjdCpmM/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.412Z","timestamp":1787687778412,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwi5Hf-jFk7uepV7d5Of2DBmacyO94j-NgXS2gqhEutDWR1Iz6cnqXOA8mD5shTOEPuhm-moHlZLnj4gLWjdhEzimr2n8bvC5q4e8cEf1yYjdCpmM/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:25 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 10638\r\nCache-Control: public, max-age=136944\r\nExpires: Thu, 27 Aug 2026 09:58:42 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10638,"size_decoded":12467,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"89b2f5287519be3dd1dc105413e24716","sha1":"42dc5ad9ba18884d812de07bd83cde6eacf44720","sha256":"15f1b62dac4abac14e7d00bd26923b721236c4410f7b6c4533489897817e304b","sha512":"0e64d42c22ae49479cff6cae8914da4e9f965708a5600b348685275406c763c483b1689775b5358c2049c3308cf27188eec14e48bdd93591bcfc611b2ddc7e55","ssdeep":"192:PZX/+XTn9ssjoVvU7aMhuGMqg13G3ObCLdugT7708kUr8n9am1vV2ZrEBQxSEToa:PZ2XesKULUGML1YOaEM770gsL1v4WfEx","tlshash":"f622cf3b435200d5e3a1e14cc184b4ca852526e9bcbe8b8bc4c6c3c58d3af464ac8a56","first_seen":"2026-08-25T19:57:11.783936Z","last_seen":"2026-08-25T19:58:16.160717Z","times_seen":2,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":1,"connect":4,"send":0,"wait":6,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/general/steamIconGreen.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.865Z","timestamp":1787687776865,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/steamIconGreen.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/general/steamIconGreen.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 77605\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd68f18be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/footer/mastercardIcon.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.870Z","timestamp":1787687776870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/mastercardIcon.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/footer/mastercardIcon.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47714\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd692b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/general/searchIcon.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.065Z","timestamp":1787687777065,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/searchIcon.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28beaf718be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: KNY.0KH8hVJFZyKNgZUZgq60l9_PN_V5\r\naccess-control-allow-origin: *\r\nage: 3872\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: f+7YAyShH3S7vesepI9lDtVHnYFdBuidjZnOR4JfzOKVz0rRzsOrzqDaquP7yUwn3s2QwgQZ6Qo=\r\nx-amz-request-id: 7VNX6S2992BYN3J2\r\netag: W/\"dc4d55536f1b04b61312ece7e629056e\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":391,"size_decoded":855,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dc4d55536f1b04b61312ece7e629056e","sha1":"c634b6797c61a178cd10a573430940a82dddb844","sha256":"ed9426ffb2c1ce29e535420831ab9faa3f25de3c67e99a7c4ad84a2edeffce12","sha512":"93f6e4b1082df28e223d76f9e272284f744447acd1cc117040f94480c7c889ce16a474d102b1db906e7977b80d518bd19cdd8258feeb644b3a9755239775da31","ssdeep":"","tlshash":"fae0d8e95ace000cd4425e91f62c77d2172f35f5fb5845fa928cc1b0b1c6d57a50bd16","first_seen":"2026-08-10T05:31:31.940868Z","last_seen":"2026-08-25T19:58:16.138179Z","times_seen":6,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/upgrade/inventary.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.862Z","timestamp":1787687776862,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/upgrade/inventary.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/upgrade/inventary.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47716\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd68da8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/general/searchIconBlueMob.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.079Z","timestamp":1787687777079,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/searchIconBlueMob.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28becff38be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: ddeJ8VIRza.GDR4WKic_7ja.MAb2WJHe\r\naccess-control-allow-origin: *\r\nage: 47714\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:40 GMT\r\nserver: cloudflare\r\nx-amz-id-2: fdwyZzrJEYs68D2Giwpqvjv+rkyQZAHSzaPoCcg2Jr2EIDxr4ObMkAjdka2409wmVW/lJ3SeCu1RpgVGPfhHfvnF2qPKL6xA\r\nx-amz-request-id: ZQ9QWS15M0FRFCX2\r\netag: W/\"83558f2b5661f771ef6c034ca3626803\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":523,"size_decoded":957,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83558f2b5661f771ef6c034ca3626803","sha1":"7ecc42bd7052037659413e05ee1aded04b572de3","sha256":"263f7c8f31b21d8f347507c30cf1610e8a9b4cff5b8efed812c7d09403f88735","sha512":"b4f836f5680a1635de019a0af4ff20b8b121aeeee746a8dff5e31ef8b59905f21484d8a823e8d76a14c705b8af17bed4326b399b4367eb45ca37a62b13acc502","ssdeep":"","tlshash":"bbf059bcf65c134c47de9724973ca8c1231fb07874859a7a5c8cb2b99006d66ebf7818","first_seen":"2026-08-10T05:31:31.784143Z","last_seen":"2026-08-25T19:58:16.103206Z","times_seen":6,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://caser.one/api/ws","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.218Z","timestamp":1787687778218,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /api/ws HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://caser.one\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Ifn6pIcRLr2QrMxL+nOzmg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 8dLabLJqxjJTeuej0Lzvh4y5feU=\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nContent-Security-Policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncf-cache-status: DYNAMIC\r\nServer: cloudflare\r\nCF-RAY: a30d28c5f8c056be-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":2724,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":83,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLhzMOwwipC0OL8PfRSI-KSDWyDyeFij-1gSCGn205wtT7Xn4yuc3qQbQUkXJQmEeQCtkK7wdDgZO7n71Df2IkQxH7-hyhXrnE8AH9Qqg8/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.430Z","timestamp":1787687778430,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLhzMOwwipC0OL8PfRSI-KSDWyDyeFij-1gSCGn205wtT7Xn4yuc3qQbQUkXJQmEeQCtkK7wdDgZO7n71Df2IkQxH7-hyhXrnE8AH9Qqg8/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:10:12 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8643\r\nCache-Control: public, max-age=237710\r\nExpires: Fri, 28 Aug 2026 13:58:08 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8643,"size_decoded":10471,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"410a5ff318024faab7b227d91d49987e","sha1":"f57c010c2b099da0d3b0fab804e3bc50546bf6d0","sha256":"13853ea17e6ee5fb16f5d0f88629858a66c7b6701789519c4e6b569e397659b5","sha512":"a649b8fe3c826981af2bfc35848fa64a62c5b79625cebde247c03df3c6ee5b38a2bfca0aa36753c51bd4994810aaeffb09a6fe3a15402677cd4bc2dffba96761","ssdeep":"192:Vppa9O3pQ/PNYBANnT76AoRVHdLorUVoHTx+4PWW14g3vr:7MgKnNVT76AojyrZN+4L1PD","tlshash":"6302be5345677815ab201c49e784e7332a070dda41277fd87b85e3029dcbe19539672a","first_seen":"2026-08-25T19:57:11.789244Z","last_seen":"2026-08-25T19:57:11.789244Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"metrics.caser.one/YpIb4/tuv7ew/R5X3UsD/ghhi/S?q=xxJkFDXmQQzv2KYlQubQ","fqdn":"metrics.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"172.66.1.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.891Z","timestamp":1787687778891,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"metrics.caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:26:22 GMT","end":"Thu, 12 Nov 2026 06:26:17 GMT"},"fingerprint":{"sha1":"AF:B4:A4:B4:E8:98:D8:CE:3E:B3:FE:7D:4B:C6:B7:9D:5E:91:66:90","sha256":"D7:41:55:4D:52:E1:BF:0C:F6:BA:07:63:56:CD:2B:38:17:76:33:46:71:15:D7:80:F6:B2:12:45:D6:F7:06:38"}}},"request":{"raw":"GET /YpIb4/tuv7ew/R5X3UsD/ghhi/S?q=xxJkFDXmQQzv2KYlQubQ HTTP/1.1\r\nHost: metrics.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: text/plain; charset=utf-8\r\ncf-ray: a30d28ca1e811a30-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31536000, immutable, private\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\ncf-placement: remote-YYZ\r\naccess-control-expose-headers: Retry-After\r\ncontent-security-policy: default-src 'none'; frame-ancestors 'none'\r\nreferrer-policy: no-referrer\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nx-robots-tag: noindex\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96,"size_decoded":761,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"464468795b7875ebc03b8e9d07535a37","sha1":"4d008f1331660dbd58fc2a5d47163a2ec6dcdbee","sha256":"0128bca4115a6f9ac26d28084825a9bd90978077064574e68b7f63135d6126f2","sha512":"c9c4bc493b99ee334146c7620a155b184a6532eb035bf2c21566c0b5dc614dd52b98c0daedc84c566651e7d0c17c9755c05bd2de164a7991aac6776808ed85da","ssdeep":"","tlshash":"01b012113c8de7230169dd4732886720afc690cba5d59834716f9348ec6e4768464488","first_seen":"2026-08-25T19:57:11.791294Z","last_seen":"2026-08-25T19:57:11.791294Z","times_seen":1,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"metrics.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/main/bg-cache.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.044Z","timestamp":1787687777044,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/main/bg-cache.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=2, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 29822\r\ncf-ray: a30d28be9ef88be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 3872\r\ncache-control: public, max-age=86400\r\netag: \"69cf53d0668e3bd816badad23696716b\"\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:43 GMT\r\nserver: cloudflare\r\nx-amz-id-2: TodiFDZAzd512WxM7vIjX2KQevDcrZrfyVZ0vJ/+9oGTHTlCS5kJX5Jb9SBeYy1/6oU43mR8c+Giv+cbrGVvxPokLLA3ECaK\r\nx-amz-request-id: YP5X8BJH69S8B80V\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 9UtqKuJdRAq_kzcxcdKL68AO908NQrF.\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":29822,"size_decoded":30491,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1081, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"69cf53d0668e3bd816badad23696716b","sha1":"f9a36551a6b825f5cd7571b4f98444a9b73d1a62","sha256":"5c6633f4af8667f048047eb40f1dd117fbca70330477042f4520f63b0e4d20f8","sha512":"171d2ae0a8c5c2e0334100f23d83f50902172537ae296820435fb3768fe1d75c0c6212dfa8f208341d2bd7dba3f6707b72a78e5b7e017b0714fd802f023fd639","ssdeep":"768:dFEDqlaHZULYBnHl+9jwwA6rBlikrxfEzs2rGylq:dFaql4Uon09kwA6fi9zs2rGyk","tlshash":"0dd2f16e9c04f4857a5f48bc3e708ac96b9d2cc5bb42dcd229da87f36117b0e1b912c0","first_seen":"2026-06-25T10:28:05.186922Z","last_seen":"2026-08-25T19:58:16.110361Z","times_seen":17,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":6,"connect":1,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/414qdzszey3ex.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.179Z","timestamp":1787687778179,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/414qdzszey3ex.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"49fd-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108127\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c598ed8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18941,"size_decoded":8472,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (18606)","md5":"973a8097df3fd9ceaa3084b75f583b07","sha1":"06a0bc3c7af8cc79f04997c8b43c7c1fa15d0564","sha256":"88cb0a33339033c6d1e75c07a7c8839fd9494fb3da5b9c12fe747d77d1114faf","sha512":"b3a6ce3e8f3759c6aa60a87ed5fe4284d54f117bb3e279a92daa73f4ab89d5ef1ebbee9e5bd07908c70d5f019a59db7452b24827afdd939757570c7bd754ad74","ssdeep":"192:nnSOGURTVMuCBv0FgHZcdu5d585I5h3GcjpNnINXNsUuNs0kNKjEuCqfT7HeJzwZ:nSlURTV3GHZzFlqS9SHuCqfFK7yA7Y","tlshash":"8582e9645215bd7ded723594891ec40d21be6e08f00acd1873fe1c272e6d8e8a71abe7","first_seen":"2026-08-25T19:57:11.79448Z","last_seen":"2026-08-25T19:58:16.122263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/8e410338cab7e12e-s.p.2888ryxa0751p.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.202Z","timestamp":1787687777202,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/8e410338cab7e12e-s.p.2888ryxa0751p.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15600\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"3cf0-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996501\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bf8b908be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15600,"size_decoded":17475,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15600, version 1.0","md5":"4a68bf8ca35241ab8e309f2b0ae1b95d","sha1":"eac486f3b59d7c93f616995c0e4f8bc3dab11fc3","sha256":"56f1681a9ea64e97ff5de104e6d28c7cb7fdd059ec7ffa69117070ddc2555131","sha512":"102d9e3a394772fd4e63b8d707916030b8783095701964b0269e8ac432ed82d78039dc8876b300b140bb7e25a19676a0c6a4f7d3e8fe1faec9f317247b8d1c4d","ssdeep":"384:/1M3tTB3ypiyyzYRxdR7XIdvU0+mtwoYCCFqpVajuH9aTAH42:/epB3yp58YRp7YdvF+fojCFqpVDH","tlshash":"2d62d00eb49db284fa2c8d282757ec4b391dde21ba832666ca3c53755c3c45eec43c56","first_seen":"2025-10-27T02:56:14.036304Z","last_seen":"2026-08-25T19:58:16.096291Z","times_seen":26,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL1m5fn8Sdk7uORbKF-JeKHC2aXzetJu_RkRiq7mhk1sjqKlLD0JC_OK1s-DsclRrYPt0SxltXlMLu04QyNjN9Hyyv2iSJB5ntitb4AAPIi-K3ShxaBb-NmvxQSPw/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.418Z","timestamp":1787687778418,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL1m5fn8Sdk7uORbKF-JeKHC2aXzetJu_RkRiq7mhk1sjqKlLD0JC_OK1s-DsclRrYPt0SxltXlMLu04QyNjN9Hyyv2iSJB5ntitb4AAPIi-K3ShxaBb-NmvxQSPw/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:41 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 7679\r\nCache-Control: public, max-age=227912\r\nExpires: Fri, 28 Aug 2026 11:14:50 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7679,"size_decoded":9507,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"7dc2a33c868e35ad8355b5e51b434cc2","sha1":"c3614a2541bbab1905d0e976100afbb2e6e41347","sha256":"11be8a7a10c2c8c27563c19aa7eb37091911a7a34e886530f9658389f478d608","sha512":"341d90e9a0470e5576eb8b1a4d19f117bed1b7eec7dc3f46d66a5f03621d0958b2f3f3046283fa1dc9d3b57223072da27edb25f88eed19b5ac678855444dc364","ssdeep":"96:7dZumiyq7pLxGO/uBMAIDh1G0VqgWejDNBXJkOGELNDvar4SBozjf5JiaI4Su/6q:BQmij5xGOGB6LG0NZgOGaacU0flB/p","tlshash":"01f1a0201e9e122c79d823f6a33562a88e59d440817c28f6de0d2e97b5c99dd617f0ec","first_seen":"2026-08-25T19:57:11.796381Z","last_seen":"2026-08-25T19:57:11.796381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.caser.one/settings/website/2d15ccf1-b65e-4052-b193-11ad4713e685/prelude/?2026-7-25-19-56","fqdn":"chat.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.859Z","timestamp":1787687778859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /settings/website/2d15ccf1-b65e-4052-b193-11ad4713e685/prelude/?2026-7-25-19-56 HTTP/1.1\r\nHost: chat.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://caser.one\r\ncache-control: public, max-age=14400\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Tue, 25 Aug 2026 19:56:18 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nx-content-type-options: nosniff\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Authorization, X-Crisp-Client-Url\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 300\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a30d28c9de8b8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350,"size_decoded":936,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"cd8aef903d2b4a14fb89c76095602112","sha1":"1a94a96f3706dde337de42524b0d0e14d788252f","sha256":"7d978245171e26a0fa69a99c2e532b1b0f9a7006281de9e126f06ae2d110a194","sha512":"fc5b839b1194749586cc881cf58c075b72fd60e35785358ccdb47c6b5b5f665d87add417fcd4a2789820c143cef8c7a0dba19a22aca8cff1c6d6feaec27feac9","ssdeep":"","tlshash":"f6e0c08e179040f167f4c709a41ce95f752f448f8894303cd440aced68320e41a37635","first_seen":"2026-08-25T19:57:11.798353Z","last_seen":"2026-08-25T19:57:11.798353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"chat.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/sounds/Upgrade_Wheel_Roll_Slow.m4a","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.880Z","timestamp":1787687778880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/sounds/Upgrade_Wheel_Roll_Slow.m4a HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://caser.one\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 123040\r\ncf-ray: a30d28ca79ae8be6-OSL\r\ncf-cache-status: DYNAMIC\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: \"7565af7e03a18d49fe75b8ded4c3083b\"\r\nlast-modified: Fri, 24 Jul 2026 12:39:44 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 1tZdjktqw7Vh/L4yo5jf0jXQ8ojbXopZhKreBSAuJAurj6x0aXaJPiYJAtSloC36usQ3EdGrA8NeAcof9Kl2NEjIW5qpHSRG\r\nx-amz-request-id: VP0B74N5BMD3J5JA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 5Lb3C_sgbeZ2C7w5yYsMigpIRJlFJXSg\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":123040,"size_decoded":123663,"mime_type":"binary/octet-stream","magic":"ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio","md5":"7565af7e03a18d49fe75b8ded4c3083b","sha1":"18a82b8ae99af32c2edba69f94523b96c4878a42","sha256":"d7576265f40fac2b20a0491dd5db4f0156a79a46bff48c30282e45165a439ff4","sha512":"d541e3852c3048127132c768a6321d1bcd5a1148b7a48d7215fc284eea29a95d188d7b879447ba3e8104a395a7a11dc1ad6ce0fd009b9bc575ab026775e4b3c4","ssdeep":"3072:rxPfiNQnwVh1KEmU1bUHV/Rx04YggGiIeSBnF9I6js:rxyW01rPmx34fIBjXs","tlshash":"44c312f343ac696ae4925b3d2085eb348d0db90538f12b203eca0d93b5da9b54f5e1d6","first_seen":"2026-08-10T05:31:31.898852Z","last_seen":"2026-08-25T19:58:16.074141Z","times_seen":6,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/footer/allGamers.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.909Z","timestamp":1787687776909,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/allGamers.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/footer/allGamers.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 80933\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bdaa858be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/favicon-16x16.png?v2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.867Z","timestamp":1787687777867,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/favicon-16x16.png?v2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\nlocation: https://s3.caser.one/cdn/fa/favicon-16x16.png?v2=\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47339\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c3a8398be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.caser.one/settings/website/2d15ccf1-b65e-4052-b193-11ad4713e685/?1787671171025","fqdn":"chat.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.304Z","timestamp":1787687779304,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /settings/website/2d15ccf1-b65e-4052-b193-11ad4713e685/?1787671171025 HTTP/1.1\r\nHost: chat.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nOrigin: https://caser.one\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-origin: https://caser.one\r\ncache-control: public, max-age=14400\r\nexpires: Tue, 25 Aug 2026 23:56:19 GMT\r\nlast-modified: Tue, 25 Aug 2026 18:03:37 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nx-content-type-options: nosniff\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Authorization, X-Crisp-Client-Url\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-max-age: 300\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a30d28ccad538be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2469,"size_decoded":1808,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d8b9257d81b1494dbe5777260a8ef675","sha1":"552ba6107d937aff60e30b4c33419b8a2f3d2d1e","sha256":"33b8ffa2228794df1a066c881d8fa923d28f9767a83207c058e00d09466fbeff","sha512":"ff5f88feff8313a360ac835116a8abfd094b77d6bc060e79dcc4d2d67ae7525c80125f2d28e44c111893bdebfb20229d368e069165a4b8a6c457944b6a1df21b","ssdeep":"","tlshash":"79514229501408bfd3e8a3c6f61a7f8a0e2c605ba9c66c45f44dcd1c22e79cb6323193","first_seen":"2026-08-25T19:57:11.801278Z","last_seen":"2026-08-25T19:58:16.131179Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"chat.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y7vyne5t-L8-DG3WAzetJveRtRjy-2052tmrWntb7JXiWaQYnDpBxTeQO4BbqkdzmZu3qsVCPit0QzCT9ii5XrnE8z77Qaxk/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.458Z","timestamp":1787687778458,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL6kJ_m-B1Y7vyne5t-L8-DG3WAzetJveRtRjy-2052tmrWntb7JXiWaQYnDpBxTeQO4BbqkdzmZu3qsVCPit0QzCT9ii5XrnE8z77Qaxk/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 31 Mar 2025 23:00:23 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 7859\r\nCache-Control: public, max-age=152110\r\nExpires: Thu, 27 Aug 2026 14:11:28 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7859,"size_decoded":9687,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"57d31e80c37d17e42d7facacf06a163c","sha1":"6c1db7bdde9b26cf35197b05c286a77721612383","sha256":"7495e26e64aa793b5ff2233951de5e0a580a8379c4bca2a523815b721ea155f0","sha512":"51bc7904cb55b6506314e525fd7b9634bce246340dd4736db5ebaf5f7744ff10262827ce51825f45957e624778114a24f4d51c4f3878f2b635c3c5a32e1be2e8","ssdeep":"192:v2AddGn4zQuy7JpVwEG/JMcLlasKMwNsuHG0SPo2juZ:OAdTzQu0wE1ulbKMuPbSPo2juZ","tlshash":"35f19ee7fbe805ab85541b56af44f86bbb55c264e17e0e86c03dfc0437d1b2610d21e5","first_seen":"2026-08-25T19:57:11.804018Z","last_seen":"2026-08-25T19:57:11.804018Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0ovCCC3q5azbFdnbdRA05S-dfNDrd-DX3sO6TRmuaQbkoQgAFdaBWoTZBaZyMOQx9itAdqGq0mFZwCxo8e9VKaVK_nndKZL_8tlw68g/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.788Z","timestamp":1787687778788,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0ovCCC3q5azbFdnbdRA05S-dfNDrd-DX3sO6TRmuaQbkoQgAFdaBWoTZBaZyMOQx9itAdqGq0mFZwCxo8e9VKaVK_nndKZL_8tlw68g/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 20 Aug 2026 00:00:00 GMT\r\nContent-Length: 30227\r\nCache-Control: public, max-age=301494\r\nExpires: Sat, 29 Aug 2026 07:41:12 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30227,"size_decoded":32056,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"9895708cf83f85b34af8888273b14b58","sha1":"3dbaadd9f6677a0ad26ba428dce4523f98392378","sha256":"2c4378cbd655c6de7829bea353e0d4eb7f7db9d0b47075da1391df6ea9594910","sha512":"02fa29b94b94b6e213fcd34ce79a968fe8f7490dfd149a2bce800ec9998b41451381fd30c6e2ee00958bdaab3f775b9850cda7a45c8176557fdfc20084aaf0f9","ssdeep":"768:zrCaobFboM+/fOkb1tS/dCk/bXUISV8aRY37aSw0EL:fnobF8tOlKIS9cNA","tlshash":"76d2e0d31252e79ed30061ba9f608462bfb4dc81f2f1852680f6c9cf6911a7d4e62ec2","first_seen":"2026-08-25T19:57:11.806304Z","last_seen":"2026-08-25T19:58:16.073563Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/9a800f173b8d9e8f-s.p.3nglv5iys3s0a.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.797Z","timestamp":1787687776797,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/9a800f173b8d9e8f-s.p.3nglv5iys3s0a.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 28456\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"6f28-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996500\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bcfea48be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28456,"size_decoded":30331,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28456, version 1.0","md5":"18b9fa01ababfc8584a075af6e763c33","sha1":"7691e63d3c93b79ed0bbba256ac42a479a8ec86e","sha256":"c36937da4c39049704f1def587f7837a24ad52d3bfd2d27d3b6eb9f4220b2e3a","sha512":"42ade8060b7148e9f7cbb6c115ddf450508246c0616032e6837349558d7de9732585bb53df5502eef79129c01c75eda1606f171f2ab4a17b20662de3a74d8b9c","ssdeep":"768:b32Ikl00N5DVMVku72IH/PGXzko0relU+8sfcS+Y+VLLtScaR:Ty0+JVMVz72IfP92UhsfcCSUcs","tlshash":"6ad2e16f1707daeaa4a45c1c025e81983503eeb483ce2e6bdc5587fec6467b30e13978","first_seen":"2025-09-13T18:58:39.377337Z","last_seen":"2026-08-25T19:58:16.077291Z","times_seen":5489,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/3jms2da-1b-lf.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.836Z","timestamp":1787687776836,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/3jms2da-1b-lf.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"2df-1a03408d060\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\ncontent-encoding: br\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd3fe58be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":735,"size_decoded":3325,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (400)","md5":"208504b5e90ff28de73d22e819727f26","sha1":"7ead14deaec9fe92b0d5fce44475bbdaf4e72c65","sha256":"42c7e16bd635e49a8765b9c7dd1671275afe42db33709e57e1912e0b6b59bb7d","sha512":"54a829a3bb8e7dec7ff6a9c89a330cbd670d1240d90e57c57a456e98113e3f7c5e29af0ecc6161e96e6aa422e934ea14d31629678d3901b61fc3a8cfc70e8046","ssdeep":"","tlshash":"bb01c09861109455355d12ee813b490f38b61b3f03cda675f6398c702f78b4ae2562db","first_seen":"2026-08-25T19:57:11.808715Z","last_seen":"2026-08-25T19:58:16.066106Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/game/spinner-group-2.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.370Z","timestamp":1787687778370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/spinner-group-2.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/game/spinner-group-2.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 53832\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c6de608be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/a952d324dae9a4759b02d92215aa1123-6a73380ca7169.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.417Z","timestamp":1787687778417,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/a952d324dae9a4759b02d92215aa1123-6a73380ca7169.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4915\r\ncf-ray: a30d28c72fe48be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 1684\r\ncache-control: public, max-age=14400\r\netag: \"aad42db9995611ba71fc73fea52ce708\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Wed, 05 Aug 2026 13:18:05 GMT\r\nserver: cloudflare\r\nx-amz-id-2: Se1fD6lFMvsHIaJg6cSRvelsw8PJLQiyIQXparMuySDFtn/5Oyl3YQ3VTfI0CXvdPu4+8aY9itQ=\r\nx-amz-request-id: G0C3ZR9CV3X74HVZ\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: WOVz.ryknvLtYRzdRl8uhecTDtmKxRN5\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4915,"size_decoded":5554,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"aad42db9995611ba71fc73fea52ce708","sha1":"3aa8d32d218397091a3f5cb503fa6612711dd838","sha256":"93abd359ce4e44cd74ff1b53a7302228ba877fe3defefae712c72bb43099ac66","sha512":"c9c782b83777ce2e9e43aee246be9ede04e96cdb67676e1b5c3d58e14efe8e2024363b3c0d555e475ae9db31536a610db33b60245c7b7d206595e9b5b5747bd9","ssdeep":"96:nPMUv93k+csHGjT3ELjTn6T5cHCw+la+tV8O3rnTeleAUkkAe:nEUeBsHGjT3oj+lcHYT+O3rnTeXle","tlshash":"2aa15b11b6041cd9f00515b98d8c8e6ec7e9080a14a49a4a77ec0ef68ff67f2ae46181","first_seen":"2026-08-25T19:57:11.824104Z","last_seen":"2026-08-25T19:57:11.824104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/e0db31511a4370ab71834aa970c05ff2-69e00c13ad9d5.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:26.601Z","timestamp":1787687786601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/e0db31511a4370ab71834aa970c05ff2-69e00c13ad9d5.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:26 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 17259\r\ncf-ray: a30d28fa4e288be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4255\r\ncache-control: public, max-age=14400\r\netag: \"e95cb07d1ae24a9d53a9981d38e5c4cc\"\r\nexpires: Tue, 25 Aug 2026 23:56:26 GMT\r\nlast-modified: Wed, 15 Apr 2026 22:07:16 GMT\r\nserver: cloudflare\r\nx-amz-id-2: hIAykjxOqT6RVTZHyM6ND0EBmtgrCg5FPEJqYaV9l8k3EJ9p2ikp5zCTXZG9bsF3GTkvp1bVDt8t4Dr2sVjO26GvdZzM/K5S\r\nx-amz-request-id: D9FD91C8Z37V143P\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17259,"size_decoded":17891,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x184, components 3","md5":"e95cb07d1ae24a9d53a9981d38e5c4cc","sha1":"d0836928bc1b818c6bd49894acae4d5ab480662b","sha256":"f74f76c14c909f528f8ffdc76d36c7b0b910a1bfda043405507be0dc3d0d4d54","sha512":"3e28088affce53468c8bf10156b5b15c6328194f8783fa3d87d783f9eba24951ddd5b42f9a3015c3c6e4971b09885c3a1b5dda8ef914cf2bae3e527f17b22b51","ssdeep":"384:e+wlwjoTWAKXbD0rkto/uaVC9stjwLtx5ekKma3Fux:e+wlwsXegSyhV3tjwLt3exHE","tlshash":"5772cfd44291ffca3622266b91d52e9d0ff104592663be8ed2cd998ee5c09d08e005db","first_seen":"2024-12-30T02:05:04.04357Z","last_seen":"2026-08-25T19:57:11.826789Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/api/statistics","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:19.286Z","timestamp":1787687779286,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /api/statistics HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: ru\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/ru\r\nContent-Type: application/json\r\nsentry-trace: f900869365c1498cb8e84e8d79b7078f-8771e57f62699075\r\nbaggage: sentry-environment=prod,sentry-public_key=56a91d7e700e8093d62966d76a8646b2,sentry-trace_id=f900869365c1498cb8e84e8d79b7078f,sentry-org_id=1399173,sentry-sample_rand=0.8568738368197009\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:19 GMT\r\ncontent-type: application/json\r\nvary: Accept-Encoding, Accept-Language\r\ncache-control: public, max-age=30\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 18\r\nlast-modified: Tue, 25 Aug 2026 19:56:17 GMT\r\nexpires: Tue, 25 Aug 2026 19:56:49 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28cc8cb18be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88,"size_decoded":2949,"mime_type":"application/json","magic":"JSON text data","md5":"ca83d7780d93fcec6308325d76f05726","sha1":"7542fb4592a3fe9a6cb7a76b80e4cf1e9c0c628d","sha256":"c6ce735b35d9ee85f7cfadb3a85dc186007f301a7b155043db7a882854ddf154","sha512":"20ca78f852182cb9d7e85407ca80b5c9ae9cfe73859fc8fd7facaa8b2451107281d7083110576074fcffa97f162785ef8313feb66e3f1c00fd1cd5470c356812","ssdeep":"","tlshash":"7cb0220cb0a3f082b8222e08feb08c33020c023230222f0880b088ce30c0aceb88b0c8","first_seen":"2026-08-25T19:57:11.678719Z","last_seen":"2026-08-25T19:57:11.678719Z","times_seen":1,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwi5Hf_C9k5fOqbZthKfebGimWkLlytrI5TXrlwBx-sGyGw9-gcC-fZgAhCpRwQbRbtxe4kdSxP7vm-UWA3MgZU-ku/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:38.007Z","timestamp":1787687798007,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwi5Hf_C9k5fOqbZthKfebGimWkLlytrI5TXrlwBx-sGyGw9-gcC-fZgAhCpRwQbRbtxe4kdSxP7vm-UWA3MgZU-ku/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:23 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 10450\r\nCache-Control: public, max-age=586715\r\nExpires: Tue, 01 Sep 2026 14:55:13 GMT\r\nDate: Tue, 25 Aug 2026 19:56:38 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10450,"size_decoded":12279,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"ef7666f08b4196e2cbc28c35037fec5d","sha1":"03d7f54204c969c69ee6a8163914a38e4e79f471","sha256":"cbf032d28db2cfec0286f15dafce2b3db069f53856ada230fdfaf8e6da3dc5d4","sha512":"1aa1d4dbf2f3f008c57e4785800e56496d1a2d3812bacc5d57874bab66ec94c681f17400e3a745f5927e1caef9f2ec54e3831a09b5d8b9f94bfef102a7922854","ssdeep":"192:hyW4qtp1AYxwn2qOf5JcikiXRVOEHb9jBLCAYt78cyBWbAubj2CqlHD7:hyWDtp1AWM2qOf5+MuC9jJMSWjbjzqln","tlshash":"7e22af2b136d22c00cd4b2a0d79b17e55d7a5fb6022b646c9fb7710c3cd172559a9c8e","first_seen":"2026-08-10T05:31:40.966265Z","last_seen":"2026-08-25T19:57:11.830301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/general/searchIcon.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.866Z","timestamp":1787687776866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/searchIcon.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/general/searchIcon.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47713\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd69068be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qe6yGX3wYCPGLi3VUlttSuJeZzvZ_jr3s-idSj3BRLorRQoGeaZWozBNO8-ONhA_0tIM_DL2h0p6WBUnfspUfRq33n0DPaR4kCdFIZ4GkpncdAE/360fx360f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.786Z","timestamp":1787687778786,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/IzMF03bi9WpSBq-S-ekoE33L-iLqGFHVaU25ZzQNQcXdB2ozio1RrlIWFK3UfvMYB8UsvjiMXojflsZalyxSh31CIyHz2GZ-KuFpPsrTzBG0qe6yGX3wYCPGLi3VUlttSuJeZzvZ_jr3s-idSj3BRLorRQoGeaZWozBNO8-ONhA_0tIM_DL2h0p6WBUnfspUfRq33n0DPaR4kCdFIZ4GkpncdAE/360fx360f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nLast-Modified: Thu, 20 Aug 2026 00:00:00 GMT\r\nContent-Length: 16100\r\nCache-Control: public, max-age=599908\r\nExpires: Tue, 01 Sep 2026 18:34:46 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16100,"size_decoded":17929,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGBA, non-interlaced","md5":"00a3ad524ff2e1cd3d1d88dfbf9877a5","sha1":"f8d5294dcf715b27395c2b3420dd5477cd67e927","sha256":"bd3de44a72b81d1b604fbe71c76460672ab4c2aff52a202a700372eb58f82ee5","sha512":"5d4a25b7f7b00dbe06ccea8310be7297de16e4877a62cbe9179eda435ca1868d9e0eff823b37b3ba745949509221b5cc0f7536ba48b4550213f71fdf953c71cd","ssdeep":"384:9/lIyMzrcMLi0Qz9lNYTp0GBIxStxRNG3x99fz10V0UWOfvvCH5IKkE:5lIyQJrQzOpDyxSc1wWuvvEaE","tlshash":"0972bfb58c09bbfedf4e91364f7260b44cfc1e4989e8c4b841e592595e67a4fc00b6b8","first_seen":"2026-08-25T19:57:11.833203Z","last_seen":"2026-08-25T19:58:16.156267Z","times_seen":2,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/d7bdd5e754e57c6e56b12659a4db19b6-69dd2985410cb.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:28.824Z","timestamp":1787687788824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/d7bdd5e754e57c6e56b12659a4db19b6-69dd2985410cb.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:28 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5493\r\ncf-ray: a30d29082bb48be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4894\r\ncache-control: public, max-age=14400\r\netag: \"2f0d7b9651d5218ab06c5283dbff4758\"\r\nexpires: Tue, 25 Aug 2026 23:56:28 GMT\r\nlast-modified: Mon, 13 Apr 2026 17:36:06 GMT\r\nserver: cloudflare\r\nx-amz-id-2: TgJhjxwqhvunULFzDSavo0t74XNmydboJ3zXpo8GBMGfDvnZQQv7PGvoqJB5AnghEoqRqrsBJjUpMdjWcEiL9B4KIP9Psdfd\r\nx-amz-request-id: CYG1WY60VZ44RX97\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":5493,"size_decoded":6124,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 184x184, components 3","md5":"2f0d7b9651d5218ab06c5283dbff4758","sha1":"89eb76155029a885bba0979897c10d0963547c3a","sha256":"45a3c82619ec6ec86bf6b80ce47263e9d70c8b6e0735e7aab85ef235448d9b7b","sha512":"2e10c843463dcdfec38cb1b729753294b8658886d6c101823cd9f62dcc1a223f44d3eb90211fd886ec000178dca0d8c0808f53a6b512faea380e0bf6af43196f","ssdeep":"96:2xlb9ikT3woploYh5KlYF1DlvlART3sLK+CHbHnxVCkd:ib9iQwEL5KlYLA53MK1/Cq","tlshash":"91b16b463a7587c2fed3ce34eec7de23d7f5980aa1d45d9a10eb59860c40d49c07b90a","first_seen":"2023-09-11T01:43:25Z","last_seen":"2026-08-25T19:58:16.144555Z","times_seen":10,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/6a3da1e98539cdfed604f896a5387fd6-6a6b30d364f51.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:36.475Z","timestamp":1787687796475,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/6a3da1e98539cdfed604f896a5387fd6-6a6b30d364f51.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nCookie: _ga_91CV07RNJK=GS2.1.s1787687779$o1$g0$t1787687779$j60$l0$h0; _ga=GA1.1.930343083.1787687779\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:36 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11750\r\ncf-ray: a30d2937f9978be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 2118\r\ncache-control: public, max-age=14400\r\netag: \"a5411d9812b998ead2e3cbd8699c0665\"\r\nexpires: Tue, 25 Aug 2026 23:56:36 GMT\r\nlast-modified: Thu, 30 Jul 2026 11:09:08 GMT\r\nserver: cloudflare\r\nx-amz-id-2: FbKn3WKk4UKmaYCPSgPA21paAKN038i07zrKPcwLw+pvzmM+92PIpYcqyKRREfAO65U//ZEWm6QNTQKfDb2jLs88Kbb6xRC8\r\nx-amz-request-id: 72P5MBTNW5F5RTEW\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: OYH_cOSzeaiTjDS9cFwTPy0pTkiSim24\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11750,"size_decoded":12410,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 0x0, segment length 16, baseline, precision 8, 184x184, components 3","md5":"a5411d9812b998ead2e3cbd8699c0665","sha1":"5953156ac0bf47d277068719d7036cb6f42bcf4a","sha256":"11c9b235b2a6dd3555290374b9fea5eff4798f7a6e37c7ee9e4d3127a185f195","sha512":"e067211bf860ede853f4aa2eb029c4e3ed8cece6d40dfffb810bd2308f48ae8e9f3cf50807896f84315214359f58001826f8bee2395a7e609ac7131558e43d62","ssdeep":"192:V/+vw29FEQu9VK4bOyyxwPVRLVXHIAcNgEk4u6qRJ4/nK1THMRZzx:CEH9V4yXRLzEkZOnK1Wb","tlshash":"5f32bfaab89048d9fb38295295c81c234eda1fd1073370e611f5cf914375b649ed272f","first_seen":"2026-08-25T19:57:11.838309Z","last_seen":"2026-08-25T19:57:11.838309Z","times_seen":1,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/socials/telegramIcon.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.057Z","timestamp":1787687777057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/socials/telegramIcon.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28be9f3c8be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: UzP_EJReA3ACUQUGIXyIaq7GyzcMRKoc\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:41 GMT\r\nserver: cloudflare\r\nx-amz-id-2: 33A/iunAPxnqtuv1XxACwVhnuecLfLxRpY3EyJCDX9TvkCJ9INEvc/zopJyg64SdAIsKKBGzCAI05Y+tEi9f4VMK1Ptmnipt\r\nx-amz-request-id: ZQ9T1ET6ZFWFSCR1\r\netag: W/\"cfa08d321949c8da3c3bf4691f4c9d8d\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":410,"size_decoded":935,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfa08d321949c8da3c3bf4691f4c9d8d","sha1":"ccbb84c08bfd8f394102f4cd1024b8ff98993796","sha256":"420000a1492233cb3aea950e406652a3924c142ab8c43b750d2357769e0fbadb","sha512":"d4ee0c597d5c9cb666525f2f1a484064ea9cd4166212d8c194d1b658d18ee8358754d315b5dfa18a6b97ebc4eeff7fb5d7705345b8918be7fddc1a4553a555e7","ssdeep":"","tlshash":"2de0ab4492709bd0c61e8768ff782601001f28e08e661d7ed2a33115fd95969f120b6c","first_seen":"2026-08-10T05:31:31.811824Z","last_seen":"2026-08-25T19:58:16.14602Z","times_seen":6,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/footer/mastercardIcon.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.078Z","timestamp":1787687777078,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/footer/mastercardIcon.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 2828\r\ncf-ray: a30d28bebfe98be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47722\r\ncache-control: public, max-age=86400\r\netag: \"0726199bc67a183c9b66571a860d433d\"\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:39 GMT\r\nserver: cloudflare\r\nx-amz-id-2: gdQobVljParXBZBdOxYhJSAzckl2nN9hhVIqsvx/v7nkzoc5KMjQO0wqhl2qkLv3jgHysPaldumW8V/MJ1x81l84trHr6tff\r\nx-amz-request-id: ZQ9ND19CTEM3YTRQ\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: K9G_RKGUH9MOx_0bV2sn6GMiTt8Z_TQ4\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2828,"size_decoded":3497,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0726199bc67a183c9b66571a860d433d","sha1":"1bcea0a6fe5e287ab8e7a57526a0e41c90c1086a","sha256":"5f835aa2160a8270e5501f51cd56cfa07db8c67e9ce6e475572f9055b837b634","sha512":"1d1d3cc93a2aa6c8c52bf60d5ce5f9e709ccafbac2b2f09665f3a369642f3b27e9709cc3b54c89dc6f6b656f93f68fffc31bd338db288a571078149e3da083b3","ssdeep":"","tlshash":"9d517ca68d988fa1f884ae0c3c46414f63ab943cb4c7bed0d00685fec4216fcd4a44d6","first_seen":"2026-08-10T05:31:31.728166Z","last_seen":"2026-08-25T19:58:16.179575Z","times_seen":6,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/media/5e1aff448c8521b6-s.18k6ab96ew9tl.woff2","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.397Z","timestamp":1787687778397,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/media/5e1aff448c8521b6-s.18k6ab96ew9tl.woff2 HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/_next/static/chunks/34yv7fq1p68-m.css\r\nCookie: geo_country=NO; __Host-_cdid=v1.OCC6Pso-AxY41RoQaPAY6A.1787687778.2HalYNLViW3_xqxqMBGDYg\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 18372\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Thu, 13 Aug 2026 14:55:46 GMT\r\netag: W/\"47c4-19ffb9f4150\"\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://*.crisp.chat wss://*.crisp.chat https://chat.caser.live wss://chat.caser.live https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.live; worker-src 'self' blob:;\r\nage: 996466\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28c6ff128be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18372,"size_decoded":20247,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18372, version 1.0","md5":"7164ae77e9eb195e89a2b77ad18e90d5","sha1":"b0c626ff88ccc1071e2a8153918b51a47548243a","sha256":"f9146728b0c31c0ed7887cd8180696762d1ec2abc4f019fe91f24679b0e7e79b","sha512":"593f5a51b9d4baefcacbeb94e8998ba6163acc36e122734b991c657d66fb5464950fdec209fcce7ab7eabc3b3ded9efb2d53c40ce77a0b6e77661d88a2a3e91b","ssdeep":"384:MxdVJkcAfY+cK51BucI+JDDswx8wWmakb7g4Yz2vFBWpgx7f:MfVJk7th1BnjKwx8wpbLYeDBZf","tlshash":"3582e1edc2951fedf4863fa622bf3292b8417cc552b8a4007274cd733d56a1faca4802","first_seen":"2025-12-10T00:08:51.314947Z","last_seen":"2026-08-25T19:58:16.135698Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLzl4zv8x1Y-s2sYb5iLs-SAmuvyOBJveRtRjy-2x4isWncw9j8di6RaA9zW8ciFOACsRPuw9zhZujgslPe2N9ExC3_iipXrnE8zkJPxX8/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.465Z","timestamp":1787687778465,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLzl4zv8x1Y-s2sYb5iLs-SAmuvyOBJveRtRjy-2x4isWncw9j8di6RaA9zW8ciFOACsRPuw9zhZujgslPe2N9ExC3_iipXrnE8zkJPxX8/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:33 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 8735\r\nCache-Control: public, max-age=138870\r\nExpires: Thu, 27 Aug 2026 10:30:48 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8735,"size_decoded":10563,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"b77b6e40c2580b873998403b2ff4f0f1","sha1":"00876ff28a97519eb830082d1768050d3a361e7e","sha256":"a4a7dd263cfe1d0ceafb5c1c027c37981623073bf306f70d05f486280f5e4668","sha512":"e3b394436e4a3132908f7f29b0a440b27a605ab7ca637558f56f8ad671c56692b6b57cc3ca62c6c84f627fa678077bb5bc3da422dce9e913c6a43d6eda5e90c5","ssdeep":"192:R8LG2cfGs8qBLSsj3Umu1v5Qis517J2ARtzHkeNloNkF:c3DqrbUVhhgpRtzbx","tlshash":"0a02becc971873d8551fa77eb8000b77ca749cbc07a2ef960c56b45a76a82876b09e41","first_seen":"2026-06-25T10:28:05.21777Z","last_seen":"2026-08-25T19:57:11.848532Z","times_seen":3,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL_kYDhwixU-fOReq1-Kf6UMXSFz9F6ueZhW2eyzB9z4WjTzt77JXKVaQcnC5sjTLEMthDpwdzkMr_lsVbW34lGmyj5kGoXuV-iSbwM/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.472Z","timestamp":1787687778472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL_kYDhwixU-fOReq1-Kf6UMXSFz9F6ueZhW2eyzB9z4WjTzt77JXKVaQcnC5sjTLEMthDpwdzkMr_lsVbW34lGmyj5kGoXuV-iSbwM/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Mon, 31 Mar 2025 23:00:28 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 6722\r\nCache-Control: public, max-age=163480\r\nExpires: Thu, 27 Aug 2026 17:20:58 GMT\r\nDate: Tue, 25 Aug 2026 19:56:18 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6722,"size_decoded":8550,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"520ffef3fafb86d4ef0d45f566262773","sha1":"c0b7d5f1f64ad1cc39a21c7cb5ae49cfc7a50894","sha256":"d54c721f8b9805b18d85a49af771c3b644ad93363231df81c366c9cdc71f6b4f","sha512":"e164388385a461d655a4d03afb911c2eb6a684bdbf7436b45f29305e1f9bc6f713292768ef6868bd32cd6b3a17999c10d494a3cd98c924cbda63a5e1945543e1","ssdeep":"96:FP0ppH4EROclfni8C7HZ5MDuNh9tTviogyZN4O8WuyiLGnUOnuSCunPcETP9+i:Hvclfi8UZq+Z63xA/gGUOnuTEGi","tlshash":"efd1af02fe08198bce7c6327159b54e538ccd9b8c7cec2ec4125b229ced899903608c7","first_seen":"2026-08-25T19:57:11.849288Z","last_seen":"2026-08-25T19:57:11.849288Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/icons/general/searchIconMob.svg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.054Z","timestamp":1787687777054,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/general/searchIconMob.svg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\ncontent-type: image/svg+xml\r\ncf-ray: a30d28be9f118be6-OSL\r\ncf-cache-status: HIT\r\nx-amz-version-id: bMSUnzcluU95p.KVOQVKkJXnSgIS_kiq\r\naccess-control-allow-origin: *\r\nage: 47714\r\ncache-control: public, max-age=86400\r\nx-amz-server-side-encryption: AES256\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:40 GMT\r\nserver: cloudflare\r\nx-amz-id-2: pRIg+I/maPHGSKjXjM4PJVVOjNf263wZguytdijwE9vUuWGx3FlQ0Lw75AZ+9MrOvUDS+lZlNTkG0S0RqLQjyMILuKsxv7Yw\r\nx-amz-request-id: ZQ9GAR7YFRFK03N1\r\netag: W/\"aeb486af9b4bfd6a5a60a71192511e28\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":322,"size_decoded":886,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aeb486af9b4bfd6a5a60a71192511e28","sha1":"cbdaf0081982d16985447769f5ed8d9a55aa40c5","sha256":"6e4fba75e201c4d708763eb705589f01cf6531afe9f0381b4c3521befa5e6b51","sha512":"a7834011bfdf1015e389c39962966f77904c4412444ce9d55ff8a84889dbd4ae19e6e85d952d35cc9546d81b24bd9328c996c35e2a11537afadf755a472bc0fe","ssdeep":"","tlshash":"84e07dbaf388470c48c68730ef2d19d6a37ff0b9bac506a498e8f129b040596e5df108","first_seen":"2026-08-10T05:31:31.818952Z","last_seen":"2026-08-25T19:58:16.081248Z","times_seen":6,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/burger/menuBg.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.393Z","timestamp":1787687778393,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/burger/menuBg.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 97220\r\ncf-ray: a30d28c6feee8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47716\r\ncache-control: public, max-age=86400\r\netag: \"7b001bab14c7e5c80f251b974736e2e1\"\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:41 GMT\r\nserver: cloudflare\r\nx-amz-id-2: REn70fMZ+D7Hrte8KntaBsAHgU5sFvH7lI01fnoBEBB2FqhqtApATtMKlAV7e5o78qYb/nOeR4cHEskZTKzKF4EzVa7jClYf\r\nx-amz-request-id: RQGAGE3ADCTB1VQ6\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 7o.UV4nlAQSvTC9zvl7lm67h8ZFAl23R\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97220,"size_decoded":97890,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b001bab14c7e5c80f251b974736e2e1","sha1":"6074ec1a25335c775265e19df5147a5ab2834eb2","sha256":"5ca3361e3644f46b7fa7d620c073ea1841f6848165be9e26b0c14bf156a2e59a","sha512":"4b3bb6d01922de064d95dc60acba784c0479817e507b49ebec2b02bb82a6e2e68546468caabc416f6ba94f78ebfc19218d0643f72171b986da71553164fc3601","ssdeep":"1536:MicuD5bczrY/5FuFTUBJHL+1uMAGcXnPYkRlfLrPxUqfE/UzQ1UCfGDrZ7st6ooz:HfbcY5miJHL+CGAdnfE/XnfGOt6oLKW2","tlshash":"ad9302563cafea334f41c72bcd51c7e2917a736144be02f4e8a9552c9bc04b9686983e","first_seen":"2026-08-10T05:31:31.733529Z","last_seen":"2026-08-25T19:58:16.06482Z","times_seen":6,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMmuOW6a50NmptelvBbhQAf0oZ7v8S0V7vStPKdod_bCDzDDkOsgsrRqG32xxBxw4jnRy9iseCiebVMjDsNwEflK7EffO9xFEw/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:30.294Z","timestamp":1787687790294,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGJai0ki7VeTHjMmuOW6a50NmptelvBbhQAf0oZ7v8S0V7vStPKdod_bCDzDDkOsgsrRqG32xxBxw4jnRy9iseCiebVMjDsNwEflK7EffO9xFEw/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:13:30 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 10646\r\nCache-Control: public, max-age=377177\r\nExpires: Sun, 30 Aug 2026 04:42:47 GMT\r\nDate: Tue, 25 Aug 2026 19:56:30 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10646,"size_decoded":12475,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"a1ff7fb88990e775c07ad41007386662","sha1":"3f70e232a95c4bbdb7d5071d26af689ba1c495d0","sha256":"9991ced8c9904055ceaf7d66963b6672cd0307afcbe36706e079ce43cc79b497","sha512":"3a82c4ad754a83b99d337184e8cf72dd7e0aeb1f329ebc7bb50101171522f056972d346eee9fed5953ba1abfaeb808b32ed240bf27711d06d122bbf96df6841b","ssdeep":"192:vGGTh3DlXpJBqXWovfn/DljMSyTS/f5tO+3BE5RikvhBtbkpU4n02G7:DTxrnobnuA5tOTiKJqz0x","tlshash":"5e22c1e3ae4993339ce87d187b653025d63ac4783e1203b58ab365fb17543e4c1e60a5","first_seen":"2026-08-25T19:57:11.855963Z","last_seen":"2026-08-25T19:57:11.855963Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwi5Hf7jJk4eelbbd5MvmDC1if0-94t-RWTjy0qhEutDWR1N__dX2WOlIoX8N4QOYDu0K6kILuM-m05ASP3YJFz3r3jy0buio_4uYcEf1yDazvhM4/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:41.922Z","timestamp":1787687801922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwi5Hf7jJk4eelbbd5MvmDC1if0-94t-RWTjy0qhEutDWR1N__dX2WOlIoX8N4QOYDu0K6kILuM-m05ASP3YJFz3r3jy0buio_4uYcEf1yDazvhM4/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:26 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 10553\r\nCache-Control: public, max-age=225992\r\nExpires: Fri, 28 Aug 2026 10:43:13 GMT\r\nDate: Tue, 25 Aug 2026 19:56:41 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10553,"size_decoded":12382,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"fefecfa78d7526ab3e2c6b421933ac95","sha1":"c5fb5c15679ae4a6e97313691c83b10c54918f5d","sha256":"ae653f1acd9dc1296171d5c95cdc8d71671a8c96ecf93ca2f0d7086024097c3d","sha512":"54c1a1af8dff7bc996217e657d016dfc63be5c4c7719783c1353097cf2548541c3a0263aa4573534ac7dfc3a3114e25bcb7583f532e4213ac1e9b3823a244da6","ssdeep":"192:M7Ic8UUqKeec1qSTgSstfQ9HM2YtRyGK59Wk7WYAwzHG6KpqgnlebzTaAA+:Msc8Uh3UdtfQ9HtQyGK3W/YAwTG6ylsr","tlshash":"3922bf08aa02e29961e2d1f35e0e2984f24148345457a4578f3869538ebe71dbfceaf3","first_seen":"2026-06-25T10:28:05.263485Z","last_seen":"2026-08-25T19:57:11.857807Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/_next/static/chunks/0r5y64tuo09rx.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.822Z","timestamp":1787687776822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /_next/static/chunks/0r5y64tuo09rx.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 24 Aug 2026 13:49:48 GMT\r\netag: W/\"e9ec-1a03408d060\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 108132\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd2f6a8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59884,"size_decoded":20273,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (44339)","md5":"a8bd3c374c0965b3dacf6b2294effdc7","sha1":"2c3132171a2db7b30d6c11cf8c95506e9dece1c3","sha256":"8b4862ffdae763ea6c732243123e19190affd9537e744357f76fc69b2af39252","sha512":"8ea12faa140c3178f460c4f6864f92195d8d3c9877cb235f26324e79b3ef238eeea5f403dcc9e4b799cee2d75bc2b4c6502122bd03ee2dc8607a568625b4809d","ssdeep":"1536:AMHmm5SXjx+7KEPX5LcLdv7Os4aFv8aMUB5F9V6JZEFSLpu6HjpBS/0F6zNpxpf8:A2SX0KcALj4a9J5I7FdExrZ4OPyANti","tlshash":"5d433db2569d209e0202b50be8097e497ebb80fe3f67576618a42c7f31e3434c779799","first_seen":"2026-08-25T19:57:11.859984Z","last_seen":"2026-08-25T19:58:16.127928Z","times_seen":2,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/icons/socials/telegramIcon.svg","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.856Z","timestamp":1787687776856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/icons/socials/telegramIcon.svg HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\nlocation: https://s3.caser.one/cdn/fa/icons/socials/telegramIcon.svg\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 47715\r\nexpires: Wed, 26 Aug 2026 19:56:16 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28bd589e8be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/svg+xml","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn/fa/images/liveDrop/overlay.webp","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:17.009Z","timestamp":1787687777009,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/liveDrop/overlay.webp HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 307 \r\ndate: Tue, 25 Aug 2026 19:56:17 GMT\r\nlocation: https://s3.caser.one/cdn/fa/images/liveDrop/overlay.webp\r\ncache-control: public, max-age=86400\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: connect-src 'self' data: blob: wss://caser.gg/api/ws wss://caser.club/api/ws wss://caser.vip/api/ws wss://caser.pro/api/ws wss://caser.live/api/ws wss://caser.one/api/ws wss://caser.gold/api/ws wss://caser.skin/api/ws wss://caser.is/api/ws https://www.google-analytics.com https://*.google-analytics.com https://google-analytics.com https://www.googletagmanager.com https://mc.yandex.ru wss://mc.yandex.ru https://mc.yandex.com wss://mc.yandex.com https://*.amplitude.com https://*.onesignal.com https://*.tiktokw.us https://*.tiktok.com https://s3.caser.gg https://s3.caser.club https://s3.caser.vip https://s3.caser.pro https://s3.caser.live https://s3.caser.one https://s3.caser.gold https://s3.caser.skin https://s3.caser.is https://prod.spline.design https://*.google.com https://google.com https://*.apple.com https://apple.com https://eu.api.fpjs.io https://api.fpjs.io https://*.api.fpjs.io https://*.fpjs.io https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://*.crisp.chat wss://*.crisp.chat https://chat.caser.gg wss://chat.caser.gg https://chat.caser.club wss://chat.caser.club https://chat.caser.vip wss://chat.caser.vip https://chat.caser.pro wss://chat.caser.pro https://chat.caser.live wss://chat.caser.live https://chat.caser.one wss://chat.caser.one https://chat.caser.gold wss://chat.caser.gold https://chat.caser.skin wss://chat.caser.skin https://chat.caser.is wss://chat.caser.is https://*.ingest.us.sentry.io; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://fpjscdn.net https://fpnpmcdn.net https://metrics.caser.gg https://metrics.caser.club https://metrics.caser.vip https://metrics.caser.pro https://metrics.caser.live https://metrics.caser.one https://metrics.caser.gold https://metrics.caser.skin https://metrics.caser.is https://www.googletagmanager.com https://mc.yandex.ru https://mc.yandex.com https://cdn.onesignal.com https://api.onesignal.com https://applepay.cdn-apple.com https://pay.google.com https://client.crisp.chat https://chat.caser.gg https://chat.caser.club https://chat.caser.vip https://chat.caser.pro https://chat.caser.live https://chat.caser.one https://chat.caser.gold https://chat.caser.skin https://chat.caser.is; worker-src 'self' blob:;\r\nage: 3797\r\nexpires: Wed, 26 Aug 2026 19:56:17 GMT\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a30d28be4d908be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/webp","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-25T22:40:39.568707Z","times_seen":18102707,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLyhMG1_B1T9s25baZ-H_yaCW-Ej-0u4-VsH3G2x0x-sGXQyY76JXPGOAQkCMAlR-YNsBDqxtHhZerjsgTAy9USIjIDnE8/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:20.619Z","timestamp":1787687780619,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLyhMG1_B1T9s25baZ-H_yaCW-Ej-0u4-VsH3G2x0x-sGXQyY76JXPGOAQkCMAlR-YNsBDqxtHhZerjsgTAy9USIjIDnE8/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:39 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 9133\r\nCache-Control: public, max-age=519761\r\nExpires: Mon, 31 Aug 2026 20:19:01 GMT\r\nDate: Tue, 25 Aug 2026 19:56:20 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9133,"size_decoded":10961,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0813e2f7f11f635c5925ea339fd2b651","sha1":"d965d9f1a55f32b301de2bdfda4bd60105c2cc46","sha256":"2b9fee0814e9a11028ab0fb2b4132808eaa13bc0dbcdf3dd0c4176b28ce3da1c","sha512":"5ba3fe06375d495fdacc812128a9f01113de5d8d89bbdde101304032d1e0c25894adae78f38e69c68c582fe4a7bf0e5de487e4dd83cfdd589aeb9fe0a17381e3","ssdeep":"192:2rkRDuWeEwcsylCmyYXjI8u+cCyMzkYPjzGEKCtBJNl3Om9FV:xpCqCczI8uQJvf3tBd3OW","tlshash":"2312c0b39e452d629a00d174009bc302725e349517b5da6aec06fe5948f3e3e35f25cc","first_seen":"2026-08-25T19:57:11.86203Z","last_seen":"2026-08-25T19:57:11.86203Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wiFO0POlPPNSIf6GDG6D_uNztOh8QmfilEojtW2AmNaodS6RaQMnXpQjTLQJtBLtxNXhZO-0slDX344UmXn2kGoXucROEi-9/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:32.621Z","timestamp":1787687792621,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyLwlcK3wiFO0POlPPNSIf6GDG6D_uNztOh8QmfilEojtW2AmNaodS6RaQMnXpQjTLQJtBLtxNXhZO-0slDX344UmXn2kGoXucROEi-9/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:08:19 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 7620\r\nCache-Control: public, max-age=223095\r\nExpires: Fri, 28 Aug 2026 09:54:47 GMT\r\nDate: Tue, 25 Aug 2026 19:56:32 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7620,"size_decoded":9448,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"241c608a7c4923e3ab8deb690e15feae","sha1":"704f3aa7af6a8888442588d81cc03271fe7d10ba","sha256":"82e80f8deec0f1a3846310c74781133e9ee8737abdcf54fa8fe68fcca0dd8d94","sha512":"03b642d16553a28caa25e8fd34f9ad7ffa7d4cf68cf8b0c75fe32640b8afd2c89659bfb28eed174207b4f7df1ff817797009228be951c4507327550227427c79","ssdeep":"96:vhNAPg64AJ97NktYTytUjps8lz4EF+nk2WptAjna6hxrUkipNjUVHfdHQ0YN5p+G:ZxAZT2tUqw4dn4vyna6IxmQ0YtWp+RtH","tlshash":"e8f19e2af676cd8706b40228582a0fc7eddb1412eb1db6a8ca39e0720ef5159d73f118","first_seen":"2026-08-25T19:57:11.864265Z","last_seen":"2026-08-25T19:57:11.864265Z","times_seen":1,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"caser.one/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:16.844Z","timestamp":1787687776844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/ru\r\nCookie: geo_country=NO\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:16 GMT\r\ncontent-type: application/javascript\r\nexpires: Thu, 27 Aug 2026 19:56:16 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\ncontent-encoding: gzip\r\nserver: cloudflare\r\ncf-ray: a30d28bd48238be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":982,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-25T22:37:40.736156Z","times_seen":425602,"resource_available":true,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/avatars/ec3c9ae42abe5fa9891c1ebb4f949934-69de6659579e4.jpg","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.411Z","timestamp":1787687778411,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/avatars/ec3c9ae42abe5fa9891c1ebb4f949934-69de6659579e4.jpg HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 11289\r\ncf-ray: a30d28c71fbd8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 4804\r\ncache-control: public, max-age=14400\r\netag: \"128b5107a980c926d3d1d1f04d76c30e\"\r\nexpires: Tue, 25 Aug 2026 23:56:18 GMT\r\nlast-modified: Tue, 14 Apr 2026 16:07:54 GMT\r\nserver: cloudflare\r\nx-amz-id-2: vL3jItM5seL5Z5t7IpiOt5ACRfaHd8l7hSknPTrwPsU4ieekzJVDwVtyfRIqAjkzuWSIxxUHZziiKGiK6Py6uT4xOOC+g73i\r\nx-amz-request-id: XM3YQPK7RPT2KNZG\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":11289,"size_decoded":11921,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"128b5107a980c926d3d1d1f04d76c30e","sha1":"246fc959cb969853abb2ebe4817b7804e7adbb78","sha256":"e03cb11b8f4e13cfdb3014ac6be7f504ab5dc401accf5d15adaa06ad397168b5","sha512":"48462d12d115e8d06a789e94f0dbecd39224a41291a6820068e0d5e7fcc960026a41cabfdc98aa88df92b768e5776c5d6f4f30f7937e8927428750c615a051b3","ssdeep":"192:l0Y22p4U3kcdkeFnCs41dKY5P1pB3ZZ1QUknkADFIwIRIWis1KISrIWITuZkKfpd:8i4U3lnxGKY5tv717knDKwIRHisKZkwf","tlshash":"2d32c02243ddf1c9f26c6168e42b3e6c78c5244250f33cd96cef60b1455284bf6546ec","first_seen":"2024-12-29T01:58:04.331418Z","last_seen":"2026-08-25T19:57:11.866844Z","times_seen":9,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3.caser.one/cdn/fa/images/game/spinner-group-1.webp","fqdn":"s3.caser.one","domain":"caser.one","tld":"one"},"ip":{"addr":"45.199.188.12","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:18.874Z","timestamp":1787687778874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"caser.one","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 05:22:20 GMT","end":"Thu, 12 Nov 2026 06:22:08 GMT"},"fingerprint":{"sha1":"F0:87:D4:FF:85:0C:41:B4:57:DF:1E:22:22:3A:C1:4D:23:08:13:62","sha256":"7E:9F:65:27:E5:A3:54:AD:CC:98:B5:F6:D8:69:17:FE:2C:9A:B5:8A:CF:E2:99:9D:E5:49:27:18:0A:5C:BE:3A"}}},"request":{"raw":"GET /cdn/fa/images/game/spinner-group-1.webp HTTP/1.1\r\nHost: s3.caser.one\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://caser.one/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Tue, 25 Aug 2026 19:56:18 GMT\r\ncontent-type: binary/octet-stream\r\ncontent-length: 15848\r\ncf-ray: a30d28c9feff8be6-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 47715\r\ncache-control: public, max-age=86400\r\netag: \"9f49b86e7fc16b563c229b2dff78f77d\"\r\nexpires: Wed, 26 Aug 2026 19:56:18 GMT\r\nlast-modified: Fri, 24 Jul 2026 12:39:42 GMT\r\nserver: cloudflare\r\nx-amz-id-2: iNNe8saKyJTQ9tZwin2w3VyPnl5PStEZWdXwM4jA3xSLAGKlzXFcgO8UgUvlg5HOsvCIKPVnbQL5ZGLkrXPSRdoBUQSsgyMW\r\nx-amz-request-id: RQG41ZR6JY9SNJMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: BB7rmsgaF6_pWzdopXoaaXd70vEJtl_z\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15848,"size_decoded":16518,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9f49b86e7fc16b563c229b2dff78f77d","sha1":"18f683a0eb2f7f71bda6657e376c3dfce15553aa","sha256":"bb818d58699fbb6048020ca23cf0bbd84a12553598a60a82db65853ce9121def","sha512":"12a57bd9177c44f1e9649525f3460ae612565c4290ecdddf4c8da2af782ae634ddc7cea7076f63fb7a096015869e08994996bdfbe1d963973185d6c3ec805930","ssdeep":"384:cmR5+CxUDmuoGC9ICvhIRQaEGN9wOKgT5+:LvODueqimuG/gV","tlshash":"b362bf2e16e04e70ccca903376ca3f22fadf611476b095e48ba10465aa4d5f9df3d968","first_seen":"2026-08-10T05:31:31.93372Z","last_seen":"2026-08-25T19:58:16.105919Z","times_seen":6,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"s3.caser.one","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"community.akamai.steamstatic.com/economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8ypexwipC0OCrbJtlJeisAm6Xyfo46OAxFnHixEhztzuAyo79eCqfb1VyXpclTONctxS6w9KxMbi25Fbd2ZUFk3t2_C2R8Q/100fx100f","fqdn":"community.akamai.steamstatic.com","domain":"steamstatic.com","tld":"com"},"ip":{"addr":"23.36.76.123","port":443,"asn":20940,"as":"Akamai International B.V.","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://caser.one/ru","date":"2026-08-25T19:56:28.229Z","timestamp":1787687788229,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.akamai.steamstatic.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 20:29:30 GMT","end":"Thu, 22 Oct 2026 20:29:29 GMT"},"fingerprint":{"sha1":"1F:3C:85:51:F6:4D:82:6D:16:19:F9:A0:C7:C7:A7:A6:0A:38:D4:7D","sha256":"48:4A:9E:63:BF:35:BC:60:7E:52:24:84:06:95:92:88:01:9B:47:D9:6A:AE:EF:54:C1:50:7B:A0:C5:64:4F:83"}}},"request":{"raw":"GET /economy/image/i0CoZ81Ui0m-9KwlBY1L_18myuGuq1wfhWSaZgMttyVfPaERSR0Wqmu7LAocGIGz3UqlXOLrxM-vMGmW8VNxu5Dx60noTyL8ypexwipC0OCrbJtlJeisAm6Xyfo46OAxFnHixEhztzuAyo79eCqfb1VyXpclTONctxS6w9KxMbi25Fbd2ZUFk3t2_C2R8Q/100fx100f HTTP/1.1\r\nHost: community.akamai.steamstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://caser.one/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nLast-Modified: Wed, 07 Feb 2024 00:09:47 GMT\r\nServer: nginx\r\nContent-Type: image/png\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.akamai.steamstatic.com/ https://cdn.akamai.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.akamai.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://*.valvesoftware.com https://*.steambeta.net https://*.discovery.beta.steamserver.net https://*.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq.cn https://steambroadcastchat.akamaized.net http://127.0.0.1:27060 ws://127.0.0.1:27060; frame-src 'self' steam: https://store.steampowered.com/ https://help.steampowered.com/ https://login.steampowered.com/ https://checkout.steampowered.com/ https://www.youtube.com https://www.youtube-nocookie.com https://www.google.com https://sketchfab.com https://player.vimeo.com https://medal.tv https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/; frame-ancestors 'self' https://steamloopback.host ;\r\nContent-Length: 9431\r\nCache-Control: public, max-age=159908\r\nExpires: Thu, 27 Aug 2026 16:21:36 GMT\r\nDate: Tue, 25 Aug 2026 19:56:28 GMT\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9431,"size_decoded":11259,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"1a1a9b9ed728868d3c64e80c62c4f000","sha1":"447471d2bab663b837644b85c69d49d4d4ec7633","sha256":"17d89c5b90a311df407fd63cca93a9563d4535972d579b82b2defb1e307d44d7","sha512":"495bc4901d8d61ac6573c3b58badf9d6b3245706c6c7d657ca1a7e3300f99d1b9c2ac09f23af32029cfd8544d8b57648ba363af22d04f4da9fa40055e5776e0e","ssdeep":"192:ERg9xmqA0Ljxm8KAuBkiZC2kJyfoMkiswCZgWdbvV7icKLSdqXo:AgP7fF7d2QhjwagUv1a7Y","tlshash":"ad12c073fc4f566d18c611b4eb0f1b4652ae540301262bbc0cfc1f4a2718866a9a89ef","first_seen":"2026-08-25T19:57:11.870001Z","last_seen":"2026-08-25T19:57:11.870001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}