{"report_id":"a8ce06c5-1f46-46c1-b199-872e3de2348b","version":6,"status":"done","tags":[],"date":"2025-10-14T20:10:17Z","url":{"schema":"https","addr":"cs2mastercup.com/","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"final":{"url":{"schema":"https","addr":"cs2mastercup.com/","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"title":"TOURNAMENT - Masters Series"},"submit":{"url":{"schema":"https","addr":"cs2mastercup.com/","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":0,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-18T20:10:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cs2mastercup.com","ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2025-10-09T20:21:48.570948Z","last_seen":"2025-10-09T20:21:48.570948Z","alert_count":49,"request_count":25,"received_data":1873883,"sent_data":11178,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}]},{"fqdn":"wstatic-prod.pubgesports.com","ip":{"addr":"54.240.174.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-03-27","domain_rank":5094213,"first_seen":"2024-01-03T09:32:11Z","last_seen":"2025-10-09T20:21:48.978805Z","alert_count":0,"request_count":6,"received_data":174505,"sent_data":2855,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-10-12T22:16:17.088796Z","alert_count":0,"request_count":2,"received_data":541575,"sent_data":882,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cs2mastercup.com/img/Ultima%20NECAT.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/Ultima%20NECAT.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 28910\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-70ee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28910,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"e5d7ab11bf87edab903a27681c208446","sha1":"af4d13be539b696118c4e90852cbfe4efa5e8eb6","sha256":"84090f09c1d3fba183548f91ad9faf9e3c5e4dded26be898d3fba8a8b97b6192","sha512":"c0a5744bffd40227d3cbd2d274241a70f077f8c59bc2be99548185029dfcb1e63479c9bca486b2204d096ab1c4750ce6369e10ca1221cf51cba61d0d2bdb4ab6","ssdeep":"768:CpSP5ZY1dBN0Po3BAXOBfaoxrPLZRqOQvDjy:CMPPc/awqOBfaMrKNDG","tlshash":"8ad2e10bb5532ddccbfb9bf14a52bd2981c27e8c1720bc1c011b8a601f685e5e77944b","first_seen":"2025-06-09T10:52:34.943706Z","last_seen":"2025-11-05T19:57:00.013909Z","times_seen":14,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":98,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/main.css","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.779Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /main.css HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 08 Jun 2025 07:23:37 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68453a79-9ab43\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":633667,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65380)","md5":"e1587958e8f15758ea2f7fba3dbdef38","sha1":"4f942e7aad71960d12326eefedf8b06262603002","sha256":"49273a6091bcbcada984afe7222e7f2db3ee689dc0f270be34f1c764a6156630","sha512":"aca051e0a26f3cb90c82561113b9c991cfd0f59019131a6fa15c084bfc5fd9a1876cdb7302cfb0bc8d109b6e5d655ff3d8aa7aba4ab94a0e2c0dcf0fba6efc1c","ssdeep":"1536:aCt/rp/rKZuiYQaJSUedJtnUY21OnqMq9N+PIS4nc3fDhzrrDuJKaAGgUByOEvPE:8nvxJ2nvxfky3Qyar+qmUzP4SOmceM1V","tlshash":"2cd4e722b6d8201db03bc16684d1aa98363bd753b6134afdb96d759dc7c7284213bf8c","first_seen":"2025-06-09T10:52:35.005178Z","last_seen":"2025-11-05T19:57:00.019754Z","times_seen":14,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/ShiftW.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/ShiftW.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 20338\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-4f72\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20338,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 174, 8-bit/color RGBA, non-interlaced","md5":"7e9410d6eab9865fc12ffc4a3fb18d09","sha1":"7a7da7e04825a28d03c9ac5799e5d0d54b7d9d6c","sha256":"0343eb50cc47f232325f3651c466a3522174e630d5811c0d403f96de8e730abd","sha512":"013d532d889baa9187a2b21926005824c0e42d6b27cd1e980db9f324165c2b82ca617243c85c074b54ee6f681819c9a4366f2ba3e4affaf1c6285596d63e482e","ssdeep":"384:e7Fr45guVxSvsMbuV30/mcDGtplO0q6irFaqY6Q9i9W+AwFT:exUa2MvsMzGtplw6eu6Q9i9W+NT","tlshash":"2292e14b774177a4c548d9facc613363cae6c505694e6444e62ff82365c4111f7f9b28","first_seen":"2025-06-09T10:52:34.962571Z","last_seen":"2025-11-05T19:57:00.023507Z","times_seen":14,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":36,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/XLR8%20eSports.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/XLR8%20eSports.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 32109\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-7d6d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"ec9c1394ea294c17e80294cc96745387","sha1":"1fcfabc08e530f470ca9849ab1d490721125451a","sha256":"53ffce8d77c3ee386b76e507f2152d503c23a25f1577625c5201820e27a034f0","sha512":"b80ff730d004c749f7f0ab56f76af01fa20a3a3080621dc1c46ca6c19640de1b235cdc3ad44990a2770f79fe14e1f8db6b7d51c9b52e51d49edd069b01777597","ssdeep":"768:5zv7cdEMk8XRd0EoY+OnNbjuQhE9EuE2kgiNSmhfaHNgcj:5zvJz8ByJYpbjV8EHgiNSmEt5j","tlshash":"62e2e195018a8ff0c95a247356006bbae0b334f8f1c9cdb0b6767bb851c6a037c17a43","first_seen":"2025-06-09T10:52:34.946626Z","last_seen":"2025-11-05T19:57:00.042041Z","times_seen":14,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":101,"dns":0,"connect":0,"send":0,"wait":34,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/midway/app/js/main.js","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /midway/app/js/main.js HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Thu, 27 Mar 2025 23:46:27 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67e5e353-290dc\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":168156,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (64778), with CRLF line terminators","md5":"e23389108daaca5f1bf0a4f872112fd9","sha1":"9800cb216f023db9fcdbe9339ce77974505a8098","sha256":"e5c341f7ea7ccf20fbafdc4089ec2d4f41ba8da3c46d73aafad936fff3800d1d","sha512":"a256ec2bd4281f35b19c92c85df0b281a19958b166d202ddcfb0fe13ce659ff070bc44b76ded6614816abcf20f297563fcc54093dc620838de9e771b3e60770e","ssdeep":"3072:29uaQ4MW64omqgdYgLLFk5rkyyikFQC2bZqRftkh8Icyahi5S6F7CMnkuw:pRWnLdYgLLC5AyFEQC2bZqfkh8IcyaA8","tlshash":"cdf3b38577d5bc9302472b73331a71e5fa7a9ca9b0e8444ee504bc68f4bd922fad4930","first_seen":"2025-06-09T10:52:34.975989Z","last_seen":"2025-11-05T19:57:00.033479Z","times_seen":14,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":52,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wstatic-prod.pubgesports.com/web/live/main_18f7b4f/img/3a9bef5.jpg","fqdn":"wstatic-prod.pubgesports.com","domain":"pubgesports.com","tld":"com"},"ip":{"addr":"54.240.174.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:51.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 27 Jan 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:06:BC:CD:A5:E7:2E:56:A8:86:5F:50:A8:7D:1A:AD:1D:E5:8D:44","sha256":"E3:7B:96:F3:37:73:9F:B0:24:05:FA:E0:D2:48:82:35:27:8C:AD:F7:3E:F2:BC:D5:80:08:AA:07:67:D9:31:03"}}},"request":{"raw":"GET /web/live/main_18f7b4f/img/3a9bef5.jpg HTTP/1.1\r\nHost: wstatic-prod.pubgesports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 25614\r\nlast-modified: Mon, 28 Apr 2025 10:27:53 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 14 Oct 2025 03:19:45 GMT\r\netag: \"d38dc199237bb8eee4c0b353892c8018\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ot-pkjQQTtWSmeCiMbHEVg-ut7BuZqnItYq0xq7nDdlcvtURdtnlKQ==\r\nage: 60606\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25614,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1320x424, components 3","md5":"d38dc199237bb8eee4c0b353892c8018","sha1":"e0ee5733ec844eff0496c3d300a2eafc1076dd1a","sha256":"3a0306f16555ba154e98cb9ae298533afae96bf8091e621998a32d63f1e8095a","sha512":"9324d9255a335416f45377eda4a8255c3e5869ce31fb5de607f8a4679e01b3c2be6e89899ff7f5fffea2a6416ea887b7b45ea84c98050b02fe52c235d153f1a6","ssdeep":"768:2l3cBCQSHRkCH9LlLDTaeShPud7SCJiCp:03cBCqCHC0d3JR","tlshash":"aeb2e182ba448d25ff179b73247548f72aa4577208c2a63022ee7b811769fbf250d60d","first_seen":"2025-02-12T14:31:57.911116Z","last_seen":"2025-11-05T19:57:00.04321Z","times_seen":15,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/ACEND.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/ACEND.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 25222\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-6286\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25222,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 356, 8-bit/color RGBA, non-interlaced","md5":"02291bfc78d6b9b4c5573b1e33d82181","sha1":"7aaf5b9e918758c05d084705701a785f3cad1d43","sha256":"b01633cbf92448e90df7e8389ee2ece6f86ac9c53c3b55674dd1513803b999e9","sha512":"915b87ccc953f5398af952e88878e1501f9857ed86f95e43722ec2734dab55014c8e1fb76e9ee20412a5a1d2b8b2897ebff3686ba91fe913a3a7f59db03bf440","ssdeep":"768:2+xx9kOjQaGDs/a1t9gYpteyAaXUvowujDTcF:2KOOAsyjHLAaX6ZujDTcF","tlshash":"e1b2e1d5f37599a898db55048e83109b3272bc6bbb872bb4602fcd341b43dd43274b86","first_seen":"2025-06-09T10:52:34.954266Z","last_seen":"2025-11-05T19:57:00.047061Z","times_seen":14,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":184,"dns":0,"connect":0,"send":0,"wait":36,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/ui/1.13.1/jquery-ui.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /ui/1.13.1/jquery-ui.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-3e46a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Oct 2025 20:09:50 GMT\r\nage: 712387\r\nx-served-by: cache-lga21975-LGA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 48, 3707\r\nx-timer: S1760472591.867156,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 67637\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":255082,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64399)","md5":"842e3946fa938e62f185abb29ab00dc7","sha1":"c72ff777806f59b02c8e9fd84ac258051d2a2b39","sha256":"793cb14b4ae48e92c4a35eae5d34b4b95092e3cd7995ce342b6895a560ef7526","sha512":"d4ecd1c8d89773626a38cab9f3c6735dcf49e5ecbc303a13698b140805d03761f4b9e6a4272d7b8a3f101f4f130f59cc68231eb5ee2d3bb73151d374b7419a14","ssdeep":"3072:PDUNddBFak8JUaaDp9ujVOUc9Lb5VppuzpPMI9fB8NNU5BFfCAV:ANdyVSjoh9oW7fV","tlshash":"3844f84d72403a3295dfa265103b2a0ba237955da601809cb43ccedf9e7ce4571bbfb9","first_seen":"2023-03-07T13:16:24Z","last_seen":"2026-07-27T08:05:15.762077Z","times_seen":1920,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":40,"dns":3,"connect":13,"send":0,"wait":14,"receive":17,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wstatic-prod.pubgesports.com/web/live/static/favicons/favicon.ico","fqdn":"wstatic-prod.pubgesports.com","domain":"pubgesports.com","tld":"com"},"ip":{"addr":"54.240.174.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:51.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 27 Jan 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:06:BC:CD:A5:E7:2E:56:A8:86:5F:50:A8:7D:1A:AD:1D:E5:8D:44","sha256":"E3:7B:96:F3:37:73:9F:B0:24:05:FA:E0:D2:48:82:35:27:8C:AD:F7:3E:F2:BC:D5:80:08:AA:07:67:D9:31:03"}}},"request":{"raw":"GET /web/live/static/favicons/favicon.ico HTTP/1.1\r\nHost: wstatic-prod.pubgesports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/x-icon\r\ncontent-length: 103883\r\nlast-modified: Mon, 10 Apr 2023 10:49:06 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 14 Oct 2025 08:45:24 GMT\r\netag: \"314fab1005a8b3d225ce16a0dfe08623\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: gQvvVqYzaImAZHErOZNLAEbBZbH-V8fUQ0Dfz-l0WhNIWwwrAHBEMw==\r\nage: 44991\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":103883,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel","md5":"314fab1005a8b3d225ce16a0dfe08623","sha1":"04954a03574802ed85d2b78ba20cbdcb9ae394a3","sha256":"ff53b3674e3ef0787e2ad47ba1a81043a42eb1ae3a66570563210280ba361d1d","sha512":"db27d354d2de8b8aeb8b9c7e13cd4db79f802031ff475598839299a9375d491e993f800596cdc6e7344bd18aee4116bc47648598d407fd4fcb8818b1cac48f1d","ssdeep":"768:02LpfXb4pJ///i///8nnn399D999999D999999D999999D99eb27gvvH99HxVHHE:02lfLUJ///i///Bb27onWtZb","tlshash":"72a3bc84684ae495de3bd2b660e1f5b262601cae85ef89949bc43f17b1370c52e1dccf","first_seen":"2025-06-09T10:52:34.984832Z","last_seen":"2025-11-05T19:57:00.048918Z","times_seen":14,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/FUT%20eSports.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.792Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/FUT%20eSports.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 12367\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-304f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 1136, 8-bit/color RGBA, non-interlaced","md5":"8c7a2f31555af448e6ad37235c28f19e","sha1":"cb3455f9fb77480794a5d7d4efdc0219dfb8ed77","sha256":"4454e4bd46ec46cc191cab7807efb0e665bccdfbf7d7ce6338543b611a7cb4f0","sha512":"ff72207a00c3d637041d456ce99c261718c3e4d3598396aabad8e7bc733780c48ac04c2ab925f0d3d84a12694a25d89ae67b1c1911cf2cb6e1289718416c6be5","ssdeep":"192:nSC0OFjPf6azc6EGFasu86vnGAOVMVQ2MwmpV10:SCvF76sc6Vb2nGrCjmm","tlshash":"a8423a83b6929143fb3c79f491c1f6780c0d4d4c3bb2bbb2524b125f931a5f544ba986","first_seen":"2025-06-09T10:52:34.997048Z","last_seen":"2025-11-05T19:57:00.039621Z","times_seen":14,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/PENTA%20Sports.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/PENTA%20Sports.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 15037\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-3abd\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15037,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit gray+alpha, non-interlaced","md5":"8ca28c1022b8732d2b906cc259236d2c","sha1":"f50ef4067300cc1936019ad487052b42afa41467","sha256":"9153919a8b4dd26a177df2dc626669910a673aea92352b62ae9e8e318750062f","sha512":"348e2ef72f6030ef29a63b5329d662183bb7077deb86e0f1db8a4fd2f289ebe781430802d40617cb2c6937f015b35160f095ad4e364a88364b1ccbb1efaf2c77","ssdeep":"384:yM4mEohtYeyQOh5hUNlc+Any7MmSRy3XHTnSEzPHA7NN:LwohtKhA3c+pxmyn+r7T","tlshash":"d262b0accc1aef18b4b827dfbbd2ce082cfd54d856445068e4d0a25b4a573a17a5e1b3","first_seen":"2025-06-09T10:52:34.986972Z","last_seen":"2025-11-05T19:57:00.044132Z","times_seen":14,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/src/global-gnb/images/img-logo-mobile_2x.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.782Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /src/global-gnb/images/img-logo-mobile_2x.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 1556\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-614\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1556,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 80, 8-bit/color RGBA, non-interlaced","md5":"540093ab59452517af235d6cca2f74ef","sha1":"b0f8a07183f2da67b10fb7fdd4692e0b189f5d83","sha256":"09641ca60b4e3dfa59480b0a814951c8a1bac519bbd36005226d6f0c0747c386","sha512":"85bef56a4ff7001270635e246f3f116b4e43bbeb72e558ff177ab757cd64e3ad555b09ae923b3332d8b4b34756d8d269803f76be59cd9686864825b9303b34c2","ssdeep":"","tlshash":"4a31eaee877b00bc4c8b9f1b49eba019a3bae452201e5f89862a6d8649c0a256505149","first_seen":"2025-02-12T14:31:57.879741Z","last_seen":"2025-11-12T23:47:48.747346Z","times_seen":17,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":179,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/tlogo.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /tlogo.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 158785\r\nLast-Modified: Sun, 22 Jun 2025 07:45:43 GMT\r\nConnection: keep-alive\r\nETag: \"6857b4a7-26c41\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":158785,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 600, 8-bit/color RGBA, non-interlaced","md5":"ea4d46f38b78d79f66d333aa716c7c88","sha1":"54a7e41883d995c235e16b84fb69f31ef780a04d","sha256":"9676dded39a5be863f5055d784ead5f7d8339408408a3637c8f5d07083fa8ee5","sha512":"c9d5c9f442f6084d41481639d71ca36dae5e6345f2a6397fbd4f5a6be738359b907989cd71afcaf70ad944344fc74f7618657d32184a6bea21e2c412e62b66ce","ssdeep":"3072:Tb3WbWSbCDtN7UDFw+eI7KV0UI09CfJGswA0ky7LQkoUpf2/oQFdjxzbqzttW0tY:TbmySbCTuFw+LSCfhFgpfYxvqzW0u","tlshash":"7ff312f4eb70ea06d56cf4e6e69f8b41d1692afed37702603c9bc0395a02a14ddd5390","first_seen":"2025-07-24T16:36:46.801334Z","last_seen":"2025-11-05T19:57:00.029245Z","times_seen":13,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":187,"dns":0,"connect":0,"send":0,"wait":33,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/GQ%20Team.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.796Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/GQ%20Team.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 4344\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-10f8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4344,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 184 x 182, 8-bit/color RGBA, non-interlaced","md5":"80b08246b7f89a6dac9fd09dab147932","sha1":"56e0409189010a9bb0fb7cd2b1be56b777afda74","sha256":"3d74f38141f3e6bd78d5018e23110848060aeab352898ad38855aaf343909a89","sha512":"c819927b8e18f7aa6447feb3c49a3bb7876c176cb0a11f80c5743f114def5fafe63e0d7296f5257e0334508d4aa4c0f7aa45ef6a11c5a6a083bcb17a13a78cae","ssdeep":"96:8fwWKIjbj/DWDQYqyvmLLC2I3Ttyl/eODK/XC6cgN2MHat:YwWJbj/DWDQYZ+wyAOGLR1HK","tlshash":"3d915ba7bc7269b4d7ef3e4a68a017ecfd702f098394791c9f2217846322c11ae81675","first_seen":"2025-06-09T10:52:34.98274Z","last_seen":"2025-11-05T19:57:00.035103Z","times_seen":14,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":150,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/logotip.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /logotip.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 137277\r\nLast-Modified: Sun, 08 Jun 2025 06:46:34 GMT\r\nConnection: keep-alive\r\nETag: \"684531ca-2183d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137277,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 360 x 360, 8-bit/color RGB, non-interlaced","md5":"0949f1ffa35d30a224eb360e4a1a8f7b","sha1":"e2cd729460743f259a7a293823685f890edba02a","sha256":"cbc360ddbeb702243c474af334800748bc5e16c7f797d3457aa538b585ce8fbc","sha512":"10fe69cfb712564af7b35949aa868885d97a6303a4a25dbded5df542a91c9e470ff1cc99d2d31057267cdf9b4abd108bc058a1b1d6d017e3128dd96245599e18","ssdeep":"1536:Bn1CK3TsdfVcwkteTHhBKdHAn5s0lRrt7GA1EnJ5Vm6BGGPXHlv4LUu9fEy9wCDF:B1v3TMxrJnFmjs68a3QzFEYXDUCAy","tlshash":"16d312b3afb54fc9724a21c816e49871777ba9705c8026afc5ce963d3c2497f58c2e18","first_seen":"2025-06-09T10:52:35.001182Z","last_seen":"2025-11-05T19:57:00.036911Z","times_seen":14,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":31,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wstatic-prod.pubgesports.com/web/live/main_18f7b4f/img/111aa29.svg","fqdn":"wstatic-prod.pubgesports.com","domain":"pubgesports.com","tld":"com"},"ip":{"addr":"54.240.174.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 27 Jan 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:06:BC:CD:A5:E7:2E:56:A8:86:5F:50:A8:7D:1A:AD:1D:E5:8D:44","sha256":"E3:7B:96:F3:37:73:9F:B0:24:05:FA:E0:D2:48:82:35:27:8C:AD:F7:3E:F2:BC:D5:80:08:AA:07:67:D9:31:03"}}},"request":{"raw":"GET /web/live/main_18f7b4f/img/111aa29.svg HTTP/1.1\r\nHost: wstatic-prod.pubgesports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 28 Apr 2025 10:27:53 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nserver: AmazonS3\r\ndate: Tue, 14 Oct 2025 14:58:44 GMT\r\netag: W/\"7c61c377521cbce58442d50051ba5b37\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: PZLwNyhsDlFXd6CtmMi1aPWkgkQWH1ucgdXkje4f7EftYDvbyxk6XQ==\r\nage: 18667\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6984,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7c61c377521cbce58442d50051ba5b37","sha1":"39ae7b105a07faa03e85a7b94e06835a43c45667","sha256":"1d1372f18e7f479985fb8266b8eaa5f8399a0539472a0cee214f7c950f412ca1","sha512":"f3637b50af0597a6d183af847056976035b606d414056357678d683a2509a29a82fa399fb3141cada392b87ea6da473acc90520ac32a5f541e1cbb7deb9ba77e","ssdeep":"192:IP1l+DinbCLUT7kGeHpmXOhudkLJb6psdzu9wu:cyACLU/mp9myxhJBu","tlshash":"73e176d69760d3dcdbcbdcdfef225d9c1219b0f8a56754c0465e8a1ca0c7ad8f909810","first_seen":"2025-04-29T10:00:10.379099Z","last_seen":"2025-11-12T23:47:48.752589Z","times_seen":20,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":85,"dns":88,"connect":1,"send":0,"wait":7,"receive":0,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.66.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.7.1.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://cs2mastercup.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-45a82\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Tue, 14 Oct 2025 20:09:50 GMT\r\nage: 3680781\r\nx-served-by: cache-lga21929-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 14, 2500\r\nx-timer: S1760472591.897087,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 83619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":285314,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"12e87d2f3a4c8b347ab13a0764d420a3","sha1":"4be715e11048c057fdf2ee0fbbfad4dbf3504c55","sha256":"78a85aca2f0b110c29e0d2b137e09f0a1fb7a8e554b499f740d6744dc8962cfe","sha512":"fa4d699e582de05d47f0beeddf3f79a37fca3bea3bf083447174db9e8250fc5d95a835615a86a256697f3841eff47b1583151a556f886e264f50941f17f63167","ssdeep":"6144:gwsmYhct1SS+TC1lmhTzeKRYcYmD2zK8USJsdZQ/coLGVFyy/RgL/uiOgeNTIPfz:FuYcYmD4/cZQ/coLGVFyCJTiPf7AqqAV","tlshash":"e954a3d8f78d112e423231aaad2e12cdbb7dd171561454aefd4d497c24a083c83baf7a","first_seen":"2023-09-15T16:51:13Z","last_seen":"2026-07-27T08:05:15.770857Z","times_seen":17922,"resource_available":true,"data":null}},"time_used":193,"timings":{"blocked":57,"dns":3,"connect":27,"send":0,"wait":27,"receive":37,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T20:09:50.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 33451\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"jQuery UI:1.13.1","description":"jQuery UI is a collection of GUI widgets, animated visual effects, and themes implemented with jQuery, Cascading Style Sheets, and HTML.","website":"https://jqueryui.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery_ui:*:*:*:*:*:*:*:*","icon":"jQuery UI.svg","categories":["JavaScript libraries"]},{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":365491,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (310)","md5":"9c9dd8c58818a7da6eb9f0450a1a1d85","sha1":"48f9b7be47f3eb01efe46e99bf39f52bd91d6b45","sha256":"d43d1ed4fe57c40c1a4d5f11761ba80169a061b6720e495b4271c8efe99171e2","sha512":"16a1798d503923482272ade8973c2a6956a68c39be5a88fbb70d12f4b4c0b4030fb5318ccd75eb35e01f27ee96449cec410f95e4f61ac35bcfa290ff33449e5a","ssdeep":"1536:biHREYaqzjqnqxOIUq/6KWNBW5FXktW7hW71Wh5WTdWWVNV180VNMJN9P18VB8ap:biyJbeQJfsDsbeSN","tlshash":"cb740c2172e848a200bbc1e599752f072bb4f70fe14b058175ad8be54fd3db2f91b689","first_seen":"2025-10-09T20:21:53.22786Z","last_seen":"2025-11-05T19:57:00.009041Z","times_seen":10,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":108,"dns":49,"connect":28,"send":0,"wait":56,"receive":24,"ssl":33},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/BIG.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/BIG.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 8775\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-2247\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 126 x 180, 8-bit gray+alpha, non-interlaced","md5":"c29b79e5e298515094bf6bf2deda04cc","sha1":"521caaa9065c2b958bfb594cecd139a21be7cb84","sha256":"725929e7d09c0455a77ae0a043d333885c9c83816f5cd1036f1cdc2e20c6098e","sha512":"a092d02ab60b78feed316e4fc4e84fa30299ce866000637337364641f6745f7045074a26df8b9e7de3b804bc3e3bb54cdd462043373f9db144998b71be42451f","ssdeep":"192:h7509EgBT/g4q/4uvGRzkQ83x/EUkg9QWDxtMWa0:hu9Bc4jZI//rdHP","tlshash":"7a02ae4a62b4707a380be0b3125b1211d4af5647d7e3e6c2eaf1d96d75c0dd10f50987","first_seen":"2025-06-09T10:52:34.988961Z","last_seen":"2025-11-05T19:57:00.010469Z","times_seen":14,"resource_available":false,"data":null}},"time_used":231,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wstatic-prod.pubgesports.com/web/live/main_18f7b4f/img/eb33050.jpg","fqdn":"wstatic-prod.pubgesports.com","domain":"pubgesports.com","tld":"com"},"ip":{"addr":"54.240.174.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:51.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 27 Jan 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:06:BC:CD:A5:E7:2E:56:A8:86:5F:50:A8:7D:1A:AD:1D:E5:8D:44","sha256":"E3:7B:96:F3:37:73:9F:B0:24:05:FA:E0:D2:48:82:35:27:8C:AD:F7:3E:F2:BC:D5:80:08:AA:07:67:D9:31:03"}}},"request":{"raw":"GET /web/live/main_18f7b4f/img/eb33050.jpg HTTP/1.1\r\nHost: wstatic-prod.pubgesports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\ncontent-length: 24891\r\nlast-modified: Mon, 28 Apr 2025 10:27:53 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 14 Oct 2025 16:23:11 GMT\r\netag: \"e04146d8e7f232b1ae6c8d72f2e23183\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: gA0fycERXd992Bk8_M8_oSi1lW3z4ODOXOWc8wxO7gMPgHJ6XhuRGw==\r\nage: 13601\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":24891,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 5120x608, components 3","md5":"e04146d8e7f232b1ae6c8d72f2e23183","sha1":"d89f073eb7fdd66542413636d35522eac5135ea8","sha256":"0a5774c0339a628e07ad0f42f9f44982cf16962406cb8902d3188929161648d6","sha512":"6ceb9e2167f6709adc1c779f724156a3866d7098873ac0a49e388657f54ea556c2420e712a1c291305408dd737f53aa1394c06ef2393b31b723fc24682b08424","ssdeep":"384:YwZ020f/mvPPH1O6dfdYOWj3G+0ffyGwu/MhOxzlayrMtEN3:dJ0Wv1ls6+0fK0/MsacMtEN3","tlshash":"abb2c0573394401be3a55af740532736ef7a3c22f686c17e790ea56785a8eb4b90cb01","first_seen":"2025-02-12T14:31:57.909929Z","last_seen":"2025-11-12T23:47:48.740591Z","times_seen":16,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/FTF.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/FTF.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 26209\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-6661\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26209,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 168 x 180, 8-bit/color RGBA, non-interlaced","md5":"e811da82bdfa51bd12000289eca365b3","sha1":"555d4989c12580cc50f6efc9d55d252963861a54","sha256":"895849ef36f624bf13008799521f4134aa8b077398ece87b2aa936fbb7a59e70","sha512":"5716ae8b661af3b5c2714016842c6cbdd1b11f0a53c1b19595e0d9fb0f6122ad75e8afa4869aae99716c59232da9b3818aff9bb4d2a8d82412bba7e04fdd6ab6","ssdeep":"384:+C3s0dHBlNPjSD72bUkiisx2mnslXmEyvgJ+uF+65ExNFif6eoKr+WG6:F3sGhlN0kfvZ6shmEyoJ+uFukfLLqe","tlshash":"04c2e1839835abee114df62987b556260e17ffe2166b1ff02540f182f04718eba9270e","first_seen":"2025-06-09T10:52:34.990893Z","last_seen":"2025-11-05T19:57:00.012806Z","times_seen":14,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":64,"dns":0,"connect":27,"send":0,"wait":42,"receive":16,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/Graduate%20Of%20Murder.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/Graduate%20Of%20Murder.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 34610\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-8732\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":34610,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 154 x 180, 8-bit/color RGBA, non-interlaced","md5":"424bd1a0f92ead523b823ace893d3b9b","sha1":"34ff70466feab86811720b65bc0bbb5c067f5781","sha256":"f7902be775583f219899e5fc22c002cd9342509744b273cff33ce31d26777022","sha512":"a9450fca193ff7f9de428fdb4c7ff2f04c02b03978a49dca62e520ef92d71679cf8a914c474e3f4b7cd1c88e76a0161e27f2b1d407c132199b64a9878acf3cdb","ssdeep":"768:PLQfeBzkeV31eWFnNHlEJ9/gVn70v1/BAPwMLNjkeiHWbBCZzfF:PLOeB9imnButgVn4tBAPwcNjhcWbBG9","tlshash":"baf2f16d871a3f5a9015b08ac3958a9f653b93d8e21620ecfdcc14d8a75bbe3c092c75","first_seen":"2025-06-09T10:52:34.992896Z","last_seen":"2025-11-05T19:57:00.025774Z","times_seen":14,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":46,"dns":0,"connect":0,"send":0,"wait":46,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/MKERS.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/MKERS.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 25652\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-6434\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25652,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 182 x 185, 8-bit/color RGBA, non-interlaced","md5":"5c9fa54d8025a60566adcd77c0a8409f","sha1":"3b4c13533722c970f039a92b80a80c211137d19b","sha256":"42e4991a4a3cdade42a52f35329b2b91d31f04a94d6787b67a001655d8065c2d","sha512":"3cb367b596f8d9bbbe085a3a9910c68a0f37f1a74b557e1d28860e22ba5d19c6148923dfab2ffb8739df42e8b15cc6ab3e9fa234c5c70e26bb993b8fb119486f","ssdeep":"384:6ykaNWwrcVl7d2ZRVZLHZ9uzFGJxxrV9q7x+HR1Usfo10zT7uORF6bNABOZN+:HkIFmlAZRVZN9+kTmx+v3S0zjSNABsN+","tlshash":"c3b2e1b668d42059e34c8a091f4fd42254d4ade5640ee09072e7c49ce3f579edebc9f4","first_seen":"2025-06-09T10:52:34.940097Z","last_seen":"2025-11-05T19:57:00.022199Z","times_seen":14,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":45,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wstatic-prod.pubgesports.com/web/live/main_18f7b4f/img/04f1f7f.png","fqdn":"wstatic-prod.pubgesports.com","domain":"pubgesports.com","tld":"com"},"ip":{"addr":"54.240.174.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:51.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 27 Jan 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:06:BC:CD:A5:E7:2E:56:A8:86:5F:50:A8:7D:1A:AD:1D:E5:8D:44","sha256":"E3:7B:96:F3:37:73:9F:B0:24:05:FA:E0:D2:48:82:35:27:8C:AD:F7:3E:F2:BC:D5:80:08:AA:07:67:D9:31:03"}}},"request":{"raw":"GET /web/live/main_18f7b4f/img/04f1f7f.png HTTP/1.1\r\nHost: wstatic-prod.pubgesports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2644\r\nlast-modified: Mon, 28 Apr 2025 10:27:53 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 14 Oct 2025 03:19:45 GMT\r\netag: \"4aab14abb1414493c2ff0cb509bfae0a\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: YDg4bcAJsgVF9-9rb47V1Pfps9pECo41Er2OPWkYNyR_YKTdJ91eww==\r\nage: 60606\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 560 x 112, 8-bit colormap, non-interlaced","md5":"4aab14abb1414493c2ff0cb509bfae0a","sha1":"3a1f44c927a987b58aa3f6b81c61f7c87c32842a","sha256":"e82bd2ea352767b8c9dda0ca4aea2ee223adb53a08a2cb5501181e54d21931df","sha512":"9985dd3e371d790d0f9f2a9694598f0206669c0be6554c6ac0b9e4223168a68412fd675709e09a0377d212de6282ad8b0ab31492723fad70db7e589f448411a7","ssdeep":"","tlshash":"18516def97189d3fb9be6d362200457da155f5d442199f0c6aceeb130995401c915620","first_seen":"2025-02-12T14:31:57.91328Z","last_seen":"2025-11-12T23:47:48.751878Z","times_seen":17,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/src/global-gnb/images/img-logo_2x.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /src/global-gnb/images/img-logo_2x.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 48495\r\nLast-Modified: Sun, 08 Jun 2025 12:12:58 GMT\r\nConnection: keep-alive\r\nETag: \"68457e4a-bd6f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48495,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, interlaced","md5":"9b7a72cccec3a4c98cc6a56c9aa1b59e","sha1":"a85a6277d89ec87e10ca7fc12fd6a185f7a0fd21","sha256":"aee7466b8feca1854dd819cb0b30d5f9a3edb68ead9d53e2c79d893755c041db","sha512":"f176420718a7feaac48ddf1ea5d5cd72be391c315a32d8c0fea1a6f891e9a5e70fc8746a4f321aa3abd47f123c512775b05c18a2f8e842a468c9c2ba1305506d","ssdeep":"768:aA5cFHEJm9ps8mg3R+ihZ58HdxqU0UnZk9C7tnAiv9BhrJZ6Vcmjb0g6YZMXtqOb:1udEwrP3Uo58vZk9C7tnAANac+6dXt/b","tlshash":"ff23029c6ed87ac2421ed89dadd740923e2d04c15f034edbabc66bd64fd3c64814dac2","first_seen":"2025-06-09T10:52:35.007172Z","last_seen":"2025-11-12T23:47:48.744042Z","times_seen":17,"resource_available":false,"data":null}},"time_used":221,"timings":{"blocked":169,"dns":0,"connect":0,"send":0,"wait":35,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/config.js","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 07 Oct 2025 15:26:47 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68e53137-2c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"a0065e2fc2c3fb5bb812f79bbd4358f6","sha1":"ad6da0b76bab9fc44b1183aab84c161ddc3b6ca8","sha256":"ce1d46ac375628c451c33ecc629e26cca6d61e87d2c89e985c5198e89d613152","sha512":"0d0d1b951a0613a2960df121fca3501b3c8e558cb8e119bbd5241aa287a3340a8fd4a06e5e2a5c2da717bcef85845207bd06fb74a559cbfeeebbd30bed743a28","ssdeep":"","tlshash":"e29004f3c47f044c0d144dc004015d354d13dd3c34441351517c104104c53305dc15c0","first_seen":"2025-10-09T20:21:53.260172Z","last_seen":"2025-10-14T20:10:20.941992Z","times_seen":2,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/src/global-gnb/images/img-krafton.svg","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:51.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /src/global-gnb/images/img-krafton.svg HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/main.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:51 GMT\r\nContent-Type: image/svg+xml\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"68333868-56d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"767869aa611336b06ffdbaf83d3f233b","sha1":"287bf055723dd874db3abde72397ec9a373538b4","sha256":"9bf24116865bd59786c5e4f16ef39b283a8a9bb491d4ba0975c4d5c3f23c3be9","sha512":"df4a275f11ea2e2ff144957f676f65028fab26c8955757e38ce9130a2a419e3ea3220577fe29bfb0ac4366ff5419ac2c8db1e81b816728802a85d6fc267d2a6e","ssdeep":"","tlshash":"342133e4b381d2c18448b73ef32c39140a2be9b6baa641cccad4041b9cb60bd99186c2","first_seen":"2025-06-09T10:52:34.978532Z","last_seen":"2025-11-12T23:47:48.745347Z","times_seen":16,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wstatic-prod.pubgesports.com/web/live/main_18f7b4f/img/02583a4.png","fqdn":"wstatic-prod.pubgesports.com","domain":"pubgesports.com","tld":"com"},"ip":{"addr":"54.240.174.6","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:51.087Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pubg.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 27 Jan 2025 00:00:00 GMT","end":"Wed, 25 Feb 2026 23:59:59 GMT"},"fingerprint":{"sha1":"14:06:BC:CD:A5:E7:2E:56:A8:86:5F:50:A8:7D:1A:AD:1D:E5:8D:44","sha256":"E3:7B:96:F3:37:73:9F:B0:24:05:FA:E0:D2:48:82:35:27:8C:AD:F7:3E:F2:BC:D5:80:08:AA:07:67:D9:31:03"}}},"request":{"raw":"GET /web/live/main_18f7b4f/img/02583a4.png HTTP/1.1\r\nHost: wstatic-prod.pubgesports.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 7388\r\nlast-modified: Mon, 28 Apr 2025 10:27:53 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Tue, 14 Oct 2025 14:58:44 GMT\r\netag: \"d7769a25f8ea32c3082149b5383dba01\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 e2f427863e6bdb72ad8bed72b596d81e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: gAKylGEdOUuXxGxuAe8KiIhn0oAF2ogAnj1k4KmJWLGWRurpqTq6RA==\r\nage: 18668\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":7388,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1320 x 48, 1-bit colormap, non-interlaced","md5":"d7769a25f8ea32c3082149b5383dba01","sha1":"a18e7217d742e16356422ab212a1c6fb62cf7eee","sha256":"d0bd18930f12f2afe21a5c3d60b77545a2fb80b8040e1819e851fcfebf0af0af","sha512":"7400f2a44901b803ed1f9a8c7e043de5955138dc9d1536deb223410410a6f784be2bc9e7bcc17d8ccc5853a9cca1f2687c24ce666334b85ef3aee40527d4c7f8","ssdeep":"192:jSEIjZDxTgHyMobguLPD97tltZAVmf7OYktJdHw2dYg+K:WEwmHyZbgAL9tl/AVmybKC","tlshash":"a1e18de1c25a2cfe9f04f6f95e1b85e9f9ae343605d021121e1b68ce67cee4cd708849","first_seen":"2025-02-12T14:31:57.912196Z","last_seen":"2025-11-05T19:57:00.048019Z","times_seen":15,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/Endgegner.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/Endgegner.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 39896\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-9bd8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":39896,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 190 x 165, 8-bit/color RGBA, non-interlaced","md5":"3c09c7e8709a40222d2b4bc47570be6f","sha1":"82fa43d395a96046e89de3f005c903a95a24d505","sha256":"ce4ad9b38862a822b238204d85d7c6434cffacccdb4ece83701514ad6d3ff6a5","sha512":"d9a2a37c5c83bc8f978afe444a18059c7f02721cd3f5fbf6a0e0e20a8d857e0aa1c3d22610bb4a1eb5cbbc8a88e733c88b6b5afe052ee6e2b892357749ba86b8","ssdeep":"768:54mA7Jcp4kgttzm9MEysgC0M/mpOY00IM0rg2SBy8ljkgAvYsNebAxIDSAl:H7gaFyd2mELMag2SIvYmebAxwl","tlshash":"010302cbe718bc9763cc18baf52fc1a67c35066b778e06c081dd5d80856a1cd9a4a7c6","first_seen":"2025-06-09T10:52:34.959536Z","last_seen":"2025-11-05T19:57:00.030762Z","times_seen":14,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":186,"dns":0,"connect":0,"send":0,"wait":29,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/Equalize.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/Equalize.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 16416\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-4020\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 158 x 180, 8-bit/color RGBA, non-interlaced","md5":"4127816aed65ffd51622b708d67666fb","sha1":"199363002342870d4558147ff618215fefc61e28","sha256":"0cdde5636631fb781d7126bacd59434a64aa9f071243e2b4b7baa3b2c2c91d9d","sha512":"e9f6f90474dfdfa560038359d4f83732acb73f32bed1a22d3132c7a0e38020a09739a2a448c7f090f3925baddb53d927285602347a64f06da0656b251d807523","ssdeep":"192:2E+Aq5ijS+zG6NS3jALKPIr/cDbF/+5/tyiRse53x7EkIpuM8TbK3WDZb09z2CYW:RZq5im7MCjL7DbF/+eQEksYTbkWDq4XW","tlshash":"3772c00698ffa4e8d9f35b636d72297db7411685b20387ef6910240c1aad603b6367a1","first_seen":"2025-06-09T10:52:35.01117Z","last_seen":"2025-11-05T19:57:00.011615Z","times_seen":14,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":65,"dns":0,"connect":30,"send":0,"wait":42,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/G2%20Esports.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.795Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/G2%20Esports.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 11811\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-2e23\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11811,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 167 x 190, 8-bit/color RGBA, non-interlaced","md5":"dfd0c8882ac03bcdba36fa3a6d861edf","sha1":"fab2daeca121b825c48d5855ec14bb3949ed3f20","sha256":"57f1c3b4791bc8150944d8d5a21501d46d1f1dd47a09abbff33c1278255aa15e","sha512":"c85ad409ba35f84c74f5487a5154f90d877bd699d76c5bc2114247209538fb5edbffd2a8ff136f1de6476fffcaef9ab7e5ab5f2d7960effa888a70f6685c65e4","ssdeep":"192:K2ZKcbt+4wN88yMhTSkaNjCLWAnDZUg4oc+so9aFBx3FenX/HPfQ6VqnstazVD+:K2ZKAuNX5LaJCLpDZy+1M3Fe/H3qs2q","tlshash":"f732b0e8bdd06c88546f167bc4f281021d75b3bd6ea71c16d987d3e0b628f116bb5381","first_seen":"2025-06-09T10:52:34.980483Z","last_seen":"2025-11-05T19:57:00.021027Z","times_seen":14,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":144,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/NET%20Team.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.813Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/NET%20Team.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 30464\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-7700\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30464,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 153 x 180, 8-bit/color RGBA, non-interlaced","md5":"fd90df20fe1bba367ad9c6c5f3c8b5af","sha1":"5a9d376c7c257a0ea324bc348e370791b7b231e7","sha256":"e99be19bbcec174a96d23d4440692644cc31b51fae7fd584f80f5c68d7874ce3","sha512":"76d031922c708ef04415b22392c790cc67260e0348041f3b90c7ecb38c125cc38ca5c27852b03152f389c2d7abc6f7846507d9e10a5582d4df650bc040830ffe","ssdeep":"768:mSH0uSXbpkhdcP1AUiPeRcdp3KwVSxa2dfz7nF:NUuutkkCUcGGZNK7F","tlshash":"c8d2f10ad398ff5cb41ce057badf96980c1940c292ba7aeb51c0e8e3d97a551fa391d0","first_seen":"2025-06-09T10:52:34.973508Z","last_seen":"2025-11-05T19:57:00.04082Z","times_seen":14,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":66,"dns":0,"connect":0,"send":0,"wait":37,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cs2mastercup.com/img/Team%20DOOM.png","fqdn":"cs2mastercup.com","domain":"cs2mastercup.com","tld":"com"},"ip":{"addr":"91.200.14.203","port":443,"asn":0,"as":"","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cs2mastercup.com/","date":"2025-10-14T20:09:50.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cs2mastercup.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 19:27:34 GMT","end":"Sun, 04 Jan 2026 19:27:33 GMT"},"fingerprint":{"sha1":"9D:C4:DD:B2:32:52:75:2F:D5:54:C9:1B:52:B2:DF:0C:00:42:94:35","sha256":"26:6E:6C:6D:28:D5:07:09:8A:5A:4A:20:D6:B0:00:8F:1B:50:A3:04:11:81:EC:F3:31:BD:9C:7D:3D:38:BB:37"}}},"request":{"raw":"GET /img/Team%20DOOM.png HTTP/1.1\r\nHost: cs2mastercup.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cs2mastercup.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Tue, 14 Oct 2025 20:09:50 GMT\r\nContent-Type: image/png\r\nContent-Length: 20773\r\nLast-Modified: Sun, 25 May 2025 15:34:00 GMT\r\nConnection: keep-alive\r\nETag: \"68333868-5125\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20773,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 178 x 180, 8-bit/color RGBA, non-interlaced","md5":"85b2339fedc4cba74b01cf7f1ba2085f","sha1":"ae85a6f125c0cb638226545db276b184892d9608","sha256":"2e11358f92fc0e7984ff846d10d85d6c398facc8209ac65708258baa4775a7e4","sha512":"18a529408e5f789ef510e18597abcb37651ee4d62ac8db358e5558cfbd95b4e3381ee0c16726047b884135279869f74854ab8f10eff08203fd44777320a2888e","ssdeep":"384:1/m6xbdjp23y2EDKysPaBF1KfZ/quxA5Dr4C6UrXEX6plUSyI5kd+Vg:1exEWPapuYD8C/4KzJlEp","tlshash":"3c92e0dea4a4c05e507ef41663cf40915e3917f091a82ebd8a24aaecfd16971d79c3c3","first_seen":"2025-06-09T10:52:34.999281Z","last_seen":"2025-11-05T19:57:00.032013Z","times_seen":14,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":35,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"cs2mastercup.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}