{"report_id":"b9d3ad31-75a2-40be-9d5f-5336a63024f0","version":0,"status":"done","tags":[],"date":"2026-08-31T09:13:15Z","url":{"schema":"http","addr":"casebattle.id/","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"final":{"url":{"schema":"https","addr":"casebattle.id/","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"title":"CASE BATTLE - Официальная проверенная Платформа КЕЙС БАТЛ для Опенкейсов в CS2, работаем с 2018 Года.","dom":{"size":1016040,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (3026)","md5":"3fdb60f6346588de87bc4b4f1b6e67c5","sha1":"49dcc992761e4fd09d3c092720ecf09fac37210b","sha256":"b47a274f99b70fb8f2dd2314727eb4c48a6ac05e0b5f9f8ea9319683af8c41f7","sha512":"7e1a2c4eb0bc580178bfe7b1658179a1c788cf01760c0ec7a44df33bb63242a3aa2b892ce60c79e0450f6909e6219d2993e4cb65a99a8bc16c2fdf6dd5f12586","ssdeep":"6144:Awp0r2SUPvDRSWtDuXqrMaIXahPQMWWxm7xzkuvipIMm6C:Awp0rPi8WtDuXOHIXahodxzksiM6C","tlshash":"3225e83062f2506742938be2b6273ae5fe9d156bdd500c12f29cbe912f92d12fe63534","dom_hash":"domhash8ad4cd15862d7f4c7039acd16cd60262","first_seen":"2026-08-31T09:13:27.332349Z","last_seen":"2026-08-31T09:13:27.332349Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"casebattle.id/","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":0,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-05T09:13:15Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"casebattle.id","ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":816,"request_count":276,"received_data":4394257,"sent_data":148439,"comment":"","tags":null,"fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-31T08:14:24.763257Z","alert_count":0,"request_count":2,"received_data":42041,"sent_data":948,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":10,"received_data":369513,"sent_data":5742,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":1,"received_data":23860,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"oldddrewq.com","ip":{"addr":"194.87.134.37","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"domain_registered":"2025-12-29","domain_rank":0,"first_seen":"2026-01-21T12:54:58.380748Z","last_seen":"2026-08-25T11:28:46.111152Z","alert_count":2,"request_count":1,"received_data":412,"sent_data":554,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"casebattle.id/build/module/SVG-19e7f4d4.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"0fa1f568daad1008a4fd3e9ad48c1708","sha1":"757d3ed4a1e66c920af51cc11f5060c6116436b5","sha256":"469470f3ee516b88125f2b540f1b605dd980a2abe227e117a01cda008e93650a","sha512":"31a964591009fbebe2a4b6ab9ffab972a01e8093e76f83f003904d013c62c2ae1bd24e0850164f1da3abfcf7c067e814d551337ce5eb20c06364518c60f8d589","ssdeep":"","tlshash":"e921325ee4b773be986960846165b10053034827db709eb181b558b224fc34863bfedd","size":1270,"data":"","first_seen":"2024-12-02T21:43:54.614338Z","last_seen":"2026-08-31T09:13:27.422278Z","times_seen":1867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-31T12:43:49.610892Z","times_seen":24542,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"7d05a3d617843770c2f324ef08339546","sha1":"d7cf53fbed5a833929bda83d9e074e152f37aa7a","sha256":"0bcc51bdead7ec1be6b8e9e48531b02a94610a9b62195bcfa3b61dfb6ee57538","sha512":"770e0d8363be8d90327822752c69437149545396ccfa6dac9f6df2e1ca391984c23bcd32deafee196d9c0796567b8e8508730789a38f68f2a03d69c8f271c6dc","ssdeep":"","tlshash":"7ef041f73c890038c3a322613b7392483039243f740eec53b80c18562f80f6514ab50c","size":639,"data":"","first_seen":"2026-08-31T09:11:43.066177Z","last_seen":"2026-08-31T09:13:27.615127Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e29bce3074a1c2b00cf77d67ba97c2c","sha1":"43733ec7219780b85058456529658301cdde02db","sha256":"9323c9c5c6c855867393b7fb0ea431457aefb46b4ec3f7aacd3127488f0d1dc4","sha512":"9facd7080da9f00f02de83973efcee9ed656cc0e1f66b3749985176e375a1b2fe39317d4222568ad7ea132624483e7a155c6b4675190eae00dfdbd23f05a61be","ssdeep":"","tlshash":"58e0976768b318c02103902e812bbf0d22a8143f0e49ac2639ad0e443f8a96821f32f1","size":292,"data":"","first_seen":"2026-07-12T14:31:00.025121Z","last_seen":"2026-08-31T09:13:27.617427Z","times_seen":1853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/sendRequest.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"efb6341f834fc22edc2f2e0c1584c4ab","sha1":"0d6a14e0fc9e4c090791d7828ffd17e4852dacc4","sha256":"22776cc5cec9ac6f9ed58b4ab5dd1a868db717107ada82a9bea067b07ad3e8e9","sha512":"dd0df4d33e6fa6bd2289a297fe9ab4097f98056484f78b4da6eaf84f2c77389e06f5242f58db3b709c9bc49074d48ae2622102986a4d1c12a0145cd7d75af18f","ssdeep":"","tlshash":"b0f0dc87a8f3120217777108ca2b081ab62b402bad26dc747b2c83142fcc56d82713c8","size":524,"data":"","first_seen":"2025-09-24T06:54:00.307844Z","last_seen":"2026-08-31T09:13:27.465577Z","times_seen":1866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/setUp.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"3eeb2f13263c2d574bc760d0d448c648","sha1":"3a186d9941c6b69b7c654d96034c7c52558a2489","sha256":"f37abee8def67d7e1e0a01de0f37fd062e0a2619867e80f69df471cf6ec01c31","sha512":"67561ae396fe0532f176694e476870681225b171a97663817c6f2b39c2598222b32fddcf1e480c1dcd595f4cca4f8a09f41e84583270b4aa9f997047a34c2917","ssdeep":"192:0ZJWrJh3CgrI+qfpZLkAs8Z81SPpsxPp+0Vjx1kDE:0j+Spshp+03J","tlshash":"ed420e1910f3043642a361ea6beb154977a1a113b004cdd97eacd7850fd3ea0e9f7be8","size":12768,"data":"","first_seen":"2026-08-10T05:37:52.249717Z","last_seen":"2026-08-31T09:13:27.436038Z","times_seen":1853,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/notify-a5ad4bd1.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"b62bbff81a30bc55c8271a6369010211","sha1":"53fff15bdb6b5b33597b4ddfc4cfb9daf5fe04bc","sha256":"27a0e9872f67d626842616be908644b203cee3a0f75e8548e53c3997679ba88f","sha512":"71bdeb88f3d12b103fbacbca52fdc921f63c8312c92a39bc4dca954d3faf8fd9b8e77e0d935ca76f40da285e3c12da8695088beb3842871720b4efe3f383263d","ssdeep":"192:vCKzYY7imkiMNFW/fgHnsdY1OyS7+kWz3DCsankxtFiskZdxioh4D4VQ6bxxKQgq:vtE780/yFXLSnIZFWLL80U","tlshash":"7692420913bb1b2592d3b07a1daf90047934809f0d96bd1c3d6d86d88f4c97992fafb5","size":21238,"data":"","first_seen":"2025-09-24T06:54:00.346735Z","last_seen":"2026-08-31T09:13:27.405908Z","times_seen":1866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/index-ba6f7af1.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"ead5b126d2af3da5885f478bb7af0ba8","sha1":"1132097a1055feac2aef2103dcce5b12de928571","sha256":"1f148469472d047bca7376ad2475606b41d4b524b4b3767cf7bc6b760c40700e","sha512":"9fd6c9db8034bad4040048733f1a013d28ca0515802cf40235fc16166fe4d2d3b771f0a6faa48b27496aea0db3d6804315500447df1f6f79797b01a8a5da8198","ssdeep":"384:4fMK/QCtiXbJJMcP4ss3dwvxzx1j+zFuEMbWCtdbo+OYctS06ECQa:4fMKvQXjMa7s3Wvxz+zFuEUWCtlo+OXW","tlshash":"956285993280b07653ab01b690af455af3347454340b84a0d57cbcdb3e726ae47ebf6c","size":15035,"data":"","first_seen":"2024-12-02T21:43:54.597652Z","last_seen":"2026-08-31T09:13:27.5491Z","times_seen":1867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/js/homepage.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"5de04fb560031c8610cd3886b2f35e0d","sha1":"18a573f18fb61dab33b7a8aca3f8027ef07ed98d","sha256":"7dcda01647ea29c634ca72577c068d5d306d0726fa35c6791586375acd8714d3","sha512":"8c84b9a5fc270d32e20c7663d3d06f853b6d844fe9f85e86886d2311d3af5b556abd5c2435525399499614701b64dc71b5bbd8a2c1d03c5468a57655412eacac","ssdeep":"96:yeslRZ/0GRbj4n2GEg/jg/Igh5p2r1X3QXO008w+/nvgIAI2DO0mJEUUjr:yesGrD/jwPuQXDXw+/nvgIAIemJg","tlshash":"e59121857191f86d29ed9365b2a417e33232b0ac7544852cb43cede69c0ac45b2ff6f1","size":4567,"data":"","first_seen":"2024-12-02T21:43:54.630177Z","last_seen":"2026-08-31T09:13:27.429913Z","times_seen":1867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/live-drops.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b58d40925c7539234a9279c905b90bf","sha1":"8506a2f2c402ff5b106d97ab2bd546c903e42e69","sha256":"756b1ca73214d4aefa166a3bf7047ee17d54c4774b94967e80f3f2ed53741acc","sha512":"24c117a4d4c9f94b4187b217a459e4ff7e5b202daf1b727c495da72ddcb354534121ad633bbfbcc19480fc1eac18967508ecbd6518ec3929c37edec75f4336de","ssdeep":"96:odh5tAv3w01/u0eHa9KTcYe4BSXxN10NEkGc1KtPJ9TGhFx6:ob5tAvX1/peHa9q4hNyE+UtPzE6","tlshash":"e202432462f3013701e760ae1f97921a3ae071037256ce597f7c47819fd6e55e8f2ae8","size":8713,"data":"","first_seen":"2026-03-15T14:19:41.776566Z","last_seen":"2026-08-31T09:13:27.570019Z","times_seen":1861,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/isbot.min.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"936628f48ed2e266a67d09a7ca68b234","sha1":"76f3a2deda0106e8131080fab43679a5beebc4de","sha256":"6faa3faf7c21646a25508cf79521e317246b428433641ad6faeff27c1c8511bb","sha512":"d7822d3955afb58d6e50d8ca669e9ff8559715954279d0891d4bc80d1ca3130d5376a48102b515b110e9fca478f99df887459f78b184d4e33be2fac82d6cce3a","ssdeep":"","tlshash":"e3511b7f25d8e405325e2c4d22b792867b7e9610c046f014fa74c95d70588efc267f47","size":2845,"data":"","first_seen":"2025-09-24T06:54:00.330155Z","last_seen":"2026-08-31T09:13:27.612523Z","times_seen":1866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/funds-form.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3c6779a850fdde67b7cf20730df6a70","sha1":"d73963c84716ff7ce4da55c4459c5c201413d817","sha256":"41f6e7c63eda5710d4ef9dc429eb210d2edaabfdaa3ee09aac0b13ef75338550","sha512":"27d026d1d7c68d76a293701cb41d1b5fff9cfe00b3cd15283062372db95808f7ece191290138f899d414a7a7a399f9e772284eb707ff153db4655717f26dec86","ssdeep":"768:yhV0lS9sZ8ZC4q7YdKC8Mg+Fh5pAS9901W//gHVUtrNr7G7VbFpOa:awMkHUt/B/01Siatp7gVRIa","tlshash":"4443b41622f62435b123b0395f5fd805be26609f2daafe053c5c02986f2c53c97b5f8a","size":58649,"data":"","first_seen":"2025-09-24T06:54:00.220896Z","last_seen":"2026-08-31T09:13:27.475921Z","times_seen":1866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/js/common.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"4bc52296e6d4e5eead9711eff2ccce42","sha1":"e788c13fd41ed1743f76141ba91418daa1089525","sha256":"302f3a1f2c87877874c0ba6378e0ee7291d924528f9acc645451ca986e6123fe","sha512":"e2c56ade3c344fb7c0da370a4e6e50b6223bc434d6a5587b9f74bb62f8e4c52bc27a842614e5265981be8746f94629e9f60a25243658ce361f6eb6c461c55d6d","ssdeep":"1536:+NkeeewAzJ9mEriwnC4lyPc/fqnW19lp2DT:m3kaqnW14v","tlshash":"a2b3604b6ae23434a627b17a8e2fd5093a35500f1e8afd043d4c92954f1c93c66f9fe9","size":112763,"data":"","first_seen":"2025-09-24T06:54:00.354154Z","last_seen":"2026-08-31T09:13:27.494456Z","times_seen":1866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/index-05811f69.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"c12ddc3420ea42df410403e3b4dd4c21","sha1":"da738fb6b27e05a214f4862ed88cbef1dc6a7279","sha256":"ccdecf89e091ca877b5b743a3dc836668a688be7ca6d3e19e53e9bad7253b643","sha512":"00eec998097e20c7c09388595ab9d2aa7d605ff02229bbb2a77f758acc45a3367fb06213f05a7df04d5b804926fc8ccfe16fc99aa5f95b26b0ab512c23f70f60","ssdeep":"","tlshash":"05e05c5aa660a0ef460a1cd1c15f354989755c1a3c4adc909408f117593b7fa51d991f","size":434,"data":"","first_seen":"2024-12-02T21:43:54.429532Z","last_seen":"2026-08-31T09:13:27.533315Z","times_seen":1867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/hystmodal-a1c71d15.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"ab0bfe3916eaed5741fded42a08e6bdf","sha1":"832cab9450c4f225a51d9c9679aaf9cdf42b81c1","sha256":"8b3583123535720a0f4aecea0677e01daba701ff08e1a34c4d69d04e4447d45e","sha512":"4152c9560706b3248564b0e047d44ba4e534bc02904908087bf8ee27a22adb19c743685446588e0548c5dff2c61107491020ee3e93eccc3c900ef8289bfabcc5","ssdeep":"96:G+rjuSlXQBaMHFsHxaINeih7QkEzF6mnEsqsFM:G+rjJUaesRnNeih7QkqF6mEkFM","tlshash":"fcb1542ab23858ba04ff8957a2a54b53f32118947507041d783dddce5a4fd877075bf8","size":5192,"data":"","first_seen":"2024-12-02T21:43:54.626428Z","last_seen":"2026-08-31T09:13:27.463579Z","times_seen":1867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/api-88f676dd.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"6589d07dbd72d0ff535e9687f43b995b","sha1":"04f5b47e3e822cee8a316a67cf232affff9ae40c","sha256":"47fecaa248668cf50dfa9ab19f2e44d364d7e6aca5a491dcd61b27772603fff5","sha512":"e014e166e2935e546f251e51b4f68b3b69594726f720b9bdc130bd0b9b6d140c20bef106e55fe180c5a6a347ea25acee7a0665d7a633ec4a26b6e208ad93ee6a","ssdeep":"768:CqpuEERfGEuqJz+z2AFmxq//DzAWZro0KIWdcVZYeHWVv3hDWyyHo:CsrY5kcqDzzAdclWV/CHo","tlshash":"2a434e8669e320304223b0bc4f4fd91ab224950f6c89ed583e5c52a65f5d53da7f2fe8","size":58588,"data":"","first_seen":"2025-09-24T06:54:00.24023Z","last_seen":"2026-08-31T09:13:27.389202Z","times_seen":1866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc1c536b72957316ae68032687021956","sha1":"5a0db32bdab3e01b94855cb253f382d33e8289e0","sha256":"346b8844618f6f192ad526cf9bea66b26a54961e662c05d224bc47be5146b56e","sha512":"69e0708ee6ef2cdd1b26a84fe872270ef1cc7f3e573b89ef35f91f10e6e174b1c7915952be34118b1601c5ee08951a31780296a4130b0e556611056762b52724","ssdeep":"6144:dUPvDRSWtDuXqrMaIXahPQMWWxm7xzkuvipIMm6L:di8WtDuXOHIXahodxzksiM6L","tlshash":"7994c5713bc1a859539b8fb7b21bb8e5fc2e08af2c540d5bd240fd60759192afae1530","size":418325,"data":"","first_seen":"2026-01-21T12:55:04.521414Z","last_seen":"2026-08-31T09:13:27.601856Z","times_seen":1879,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/js/api-QQNirg0a.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"bcf5a31b14b7c65967b761e945019b98","sha1":"35c1fe0a83672582102e3790e228ee154bc60517","sha256":"1983b1dd55ad52bb975e8ea75027ad7d6f928e32d983a4843d2f0cbed6bdd45c","sha512":"ab43a834abb81110311f41b3968c60eabf6b19e1d4cd3e078eae6ca1e1ac86f03e2816ca024d49d4dd34d7e685cb70620745ed9000fdd94024278db2b3b7f084","ssdeep":"768:ll+l9eGpBj5OfzG74TLVhlVeGK0h/+miKzAQCHk07Isdiy++gH+hdJAHWQcrH:ck4LOdIx0jzWTdid+hTrH","tlshash":"2d434e8669e320355223b0bc4e4fd91ab224960f2d88fd583e8c56965f0d53da7f1fe8","size":58994,"data":"","first_seen":"2025-09-24T06:54:00.254481Z","last_seen":"2026-08-31T09:13:27.43458Z","times_seen":1866,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/utils-baec67c9.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"introduction_type":"importedModule","is_inline":false,"md5":"e4b86f03ee973aace0b726cbe80d0afc","sha1":"6d81fb437f8c556b69486093badf374f480dad2d","sha256":"57284eda86c7eb7762b57ea47a68f5fd3a479bbd0b4cb6de5ae1b1240104d214","sha512":"dda890467c196f48f3d69c4a690d09734d7b6a01094d2b22afe1eb0e7848a76b98ba5fe04b8750f78eb2aeb791c8862d3445f94c253eca511f7e05c8198909bf","ssdeep":"","tlshash":"6b3143be3340b0bb8767206040ff9117f078bac2595b6809d484b0d33e2383496fbda9","size":1771,"data":"","first_seen":"2024-12-02T21:43:54.640187Z","last_seen":"2026-08-31T09:13:27.366968Z","times_seen":1867,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"casebattle.id/img/favicon/favicon-16x16.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.127Z","timestamp":1788167562127,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/favicon/favicon-16x16.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 382\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-17e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":382,"size_decoded":630,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01957326454bd08e9aed0e190e6c151b","sha1":"1b9d6b8d9e63f92236d738cf94335ff079cec41b","sha256":"51fcab1fb8fffe07ed33bfde6d9c536d0bd347412e088620ced3db37cae75f80","sha512":"5b34f81ed7cfb7cddbacf5bacd32054a513fc9981d8626c9c33b2c0a14b47fb1b0c32937782dd1c1ca8fc804553451c139fe6d54251cbaced20b96ff22dafc10","ssdeep":"","tlshash":"93e06a69f3ef61dccd5d7af4ac41f0787402017437f1ce4507c9984149d17411e51431","first_seen":"2025-09-24T06:54:00.317016Z","last_seen":"2026-08-31T09:13:27.342044Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-157-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.185Z","timestamp":1788167562185,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-157-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 16499\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4073\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16499,"size_decoded":16749,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"77dfcb7a9537527e213f41533def6215","sha1":"e6276d2b2fa0c19578c7b67381fbeb5fd079a94c","sha256":"d407b5557301e09c5c3fa1419c2b5666caaba537ced04b2995e1610ab6002219","sha512":"0cfedff351ddb17b15de7ef478e8d8e5bfcea7e2809a6d56c232a9717b770d81b1b0e3b635f95f28c5f952201ef934236941409d7e46ff3c60a364e0dfbde749","ssdeep":"384:FjlgKE/rUDo4fm3h+HSrsD5SLWBzuPF2yIt5CbErvimE0nJsc6b:UKxDo4u3hMSrXmgFtMCwr6mEwecG","tlshash":"ea72ce5cdfe305214ceee11c73466e1d83097df5a242da10b2b56e62bdae33e96920cc","first_seen":"2026-07-12T14:30:59.996018Z","last_seen":"2026-08-31T09:13:27.343661Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":125,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-61543a128ae58.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.137Z","timestamp":1788167570137,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-61543a128ae58.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1492\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5d4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1492,"size_decoded":1741,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8d2ac581cced9da68cf5548bece14387","sha1":"eea8e26d523841ffa4c4c19db79337c2e2c098cc","sha256":"0eb2a91a315b6c9442b98d4a3eeaba1a4673574ef80f1dbcd07fadab6b4d34da","sha512":"0b9581c2b53c0f80e2d33d24715fca28008d4a3f81fe2673684cf2afa529ba490aecc42ef243393483e1419d3c0d6bd2cec4381ec1b6cf2cc60f0d8b6656b55e","ssdeep":"","tlshash":"0b313b15972288f4cbbf292d92b1b05855475e189360fc3d76b0319dc4be95c68e6fcc","first_seen":"2025-12-02T06:53:41.313321Z","last_seen":"2026-08-31T09:13:27.344642Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762deba754a8.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.781Z","timestamp":1788167573781,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762deba754a8.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1824\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-720\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1824,"size_decoded":2073,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"55294c308d4f7ac95e134109e0a9f43c","sha1":"53f4de023a6b8c802c1917f7f0dfe0c08375d630","sha256":"ea4fb27ef66e28fff3b459fd1419695fcaef80923086dd4d1cb90114f0fda4e7","sha512":"fc21c31de2f2a873abebe15d5e199f6bc766df296a0ca7fc762636ef3612546cf2a10c8cccfac60c71bcefd85b6aa2a99e28c7582294ceed867db32851e67c4e","ssdeep":"","tlshash":"4e31fb1535a6cc0eb6c94e7755611937ca350b9600ae38616a0798097d4c30ab8e567d","first_seen":"2026-03-15T17:02:17.286128Z","last_seen":"2026-08-31T09:13:27.345552Z","times_seen":817,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5fd47e99de101.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:05.180Z","timestamp":1788167585180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5fd47e99de101.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1086\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-43e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1086,"size_decoded":1335,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4a592656d87287f1208a5c683005a042","sha1":"5597c4334535204ad605b5ac6715029dfbc89553","sha256":"02e8bca0bc4d38650210de332b47a51be8b168d271ee2635f43fc9e383fd8c68","sha512":"170a263e69318c2e4ef298a9518c231d836ce8dfedd24ab40caec9ff0eb3373d7793dccbc8bcb64bd83ca4d1e9ea2a5f5aa4203ac281ffd54701235163ff9499","ssdeep":"","tlshash":"5811f9a44f402b72fec7f100c8b70542412b595c91e28476a4fe89b4a3447e9000a3cb","first_seen":"2026-08-10T05:37:52.245789Z","last_seen":"2026-08-31T09:13:27.346513Z","times_seen":745,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-657326550de86.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:07.379Z","timestamp":1788167587379,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-657326550de86.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:07 GMT\r\nContent-Type: image/webp\r\nContent-Length: 982\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3d6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":982,"size_decoded":1230,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd4c4ff7d604eb91746a888e73c23bb9","sha1":"f688078e6e49a969e5a7363a5dbe0a3a0184656e","sha256":"5555871ae476757351af9388a3ffac4ddfbacd041892b17bf088fcf3d2ea7555","sha512":"dcc6e5a02304cc903ce8280b69e3d2e1afe49647aacba1c3dd82640b9fe318eb330088fbb491a9e432052c0532e93e63be766f235c897c3025de7a764f32d7c8","ssdeep":"","tlshash":"d311c875c4714bd8f1383f769599a3a902970036298d83473175a11a49ed0f4d90e9f1","first_seen":"2026-08-10T06:26:58.717682Z","last_seen":"2026-08-31T09:13:27.34754Z","times_seen":162,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762dd43184ee.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.397Z","timestamp":1788167561397,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762dd43184ee.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1536\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-600\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1536,"size_decoded":1785,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e2ec6840a6d3b57d480b171a11a6c8de","sha1":"1a8da445b0fb375087e53702fd42c87b2cfa8d4c","sha256":"91df6ba50d599e8b3761d74b530ec664121f733dcdaaf39cf33af2fb5cc5215d","sha512":"3c0a5ba65be141909e7771162cf0a3c949e563634bc5ed8e216c61fa67945ba1269402a7cb480d319e52f27a8d6321d8e1fcef5e74f406a216845cdb5ce2bbe7","ssdeep":"","tlshash":"c831d769c46b8ab2cc24079d23650da1c98286d9c99cc9eba49c9c84066d277f6dcb78","first_seen":"2025-09-24T06:54:00.219739Z","last_seen":"2026-08-31T09:13:27.348351Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793d231b0c0.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:47.324Z","timestamp":1788167567324,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793d231b0c0.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1024\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-400\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1024,"size_decoded":1273,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"32a9f82311287bc8aade0371a5ed382b","sha1":"a52a32c950e744310fcb0620fc749af66924cbae","sha256":"bb2a07e0c985eb10206deda727ed077ce1c3132bab3dc6b50ffbb97f832e2c24","sha512":"56b97a8a83eb2a5cdd9b771255dfef225722ce401decb2715a82d9b66268e02ebf443a711b0ee834a5f78c3d614aac515b6d12ad4cb29441b0f47bec1ba233e6","ssdeep":"","tlshash":"9d11d8485a9f6f33bb440d72257c3b0331589039867e8dac9f74751a5a0426ca030e8c","first_seen":"2025-12-02T06:53:41.634602Z","last_seen":"2026-08-31T09:13:27.349263Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67632d00094b9.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:48.740Z","timestamp":1788167568740,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67632d00094b9.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1336\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-538\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1336,"size_decoded":1585,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"653754e82c86dfbf6a01a162366089a9","sha1":"dfc72705df7d2b300a0cb5534ded30098438fc5a","sha256":"3c2f260149fb831a67f1a1b966b64d932f6fba21cb72e036a4f9aff96450fa08","sha512":"b2d77d079fdcda5402ec28a839da6f34fa9e97c508a7149db3d17067d38e1e646f97e48883cbbc71b1b61e8beaabdc8d44ababb4475472f90459584f0ff0e855","ssdeep":"","tlshash":"942108aee5450301f94a25bd4cc85e2abe86007804378ba49cd6524747fc14aeda2428","first_seen":"2026-05-29T13:09:59.059007Z","last_seen":"2026-08-31T09:13:27.352496Z","times_seen":885,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.346Z","timestamp":1788167561346,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:12:41 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a33aea3a8bee8deb-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 51792\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 31 Aug 2027 09:12:41 GMT\r\nlast-modified: Fri, 21 Aug 2026 16:38:29 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:GqiEX9BuR1rv5zPU5Vs2qS/NSHl1BJyBcjQYJ6ycwD4=:\r\nfly-request-id: 01KZ855JE82FYW2BPXCK5GBT2Z-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26053,"size_decoded":3069,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-31T13:24:04.375794Z","times_seen":45766,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":3,"connect":11,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://casebattle.id/ws","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.047Z","timestamp":1788167570047,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://casebattle.id\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: REx/nSV0E3aA5FEg/UehbQ==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793c9d416ca.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.920Z","timestamp":1788167570920,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793c9d416ca.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 780\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-30c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":780,"size_decoded":1028,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"33311eb0fd3b38d25ac036adc4163741","sha1":"5f681bcd941db272874576a5ba108f957afcba10","sha256":"a0cd195eb7ee99cdd9084d3515cbf2afc35faf748bcded31df8a200605a6185b","sha512":"63d80dcf30cb7bb1f6e149587c2aa14ca99e4bf6236c9f6b22eda9a8cc63ca1bfea8f4708352c6417c7fbeb40eb0c2d628623f8e3537cb5bb9ebad01656c2f8b","ssdeep":"","tlshash":"bd01413722e168429bd9f9301e04c7a11892204c9a157e5ed7a5023285a61af2a4c8fa","first_seen":"2025-12-02T06:53:41.590397Z","last_seen":"2026-08-31T09:13:27.355066Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/items.json","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.907Z","timestamp":1788167561907,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /js/items.json HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casebattle.id/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/json\r\nContent-Length: 50612\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-c5b4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50612,"size_decoded":50869,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"3886a7ea07998c1e5bbfceecab2f51ea","sha1":"c332dc357e097cb8b44bc9df312c0704b0488928","sha256":"47c845a4b369e244b07dd8120204f077049fd6926301655fc41d93e1676ed607","sha512":"faed958737aa835bae5e0ffdaf57c069af8da68fabd2d8f2d1928ce912784145aeb5512eec2d5254d5165e74f8c1ea90c683c4b05f516cf9cb210f9bb0e02e7f","ssdeep":"768:6XoDDC0LQ0IGPbN2JVM4N94Q27PbwDOAQdNCsQ03gnsz0eHMMO8Sg99rjjnzx6CP:cAQZnAeAh","tlshash":"1e330e66d6fa2c1f2639149a7c743540a0e4a0e79c56b522b2ac6eccef9cd0fc47671c","first_seen":"2025-09-24T06:54:00.223753Z","last_seen":"2026-08-31T09:13:27.355842Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793f008b0e6.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:46.881Z","timestamp":1788167566881,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793f008b0e6.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1012\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3f4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1012,"size_decoded":1261,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"dcc7cb523a5bebe98109399e9157efc9","sha1":"9016d5e0438210ca4c82c15b9e4ea01905c103fc","sha256":"3eac1b5f2408fdfe752547b299556fd5d1cf6996f6fad1206c3579792b0fbb34","sha512":"1928b220c56cd31e62051481802b1da6bd6f5446431d41f24afe2419df05f8edba6a174548ad76372820a709c15246050ace0f9fd2a556e6fda9a743f252ab2b","ssdeep":"","tlshash":"781198106c68769dc14c7f052aec9b63d30e05785bae2de5fbde13141190bc24d6b60d","first_seen":"2025-12-02T06:53:41.317715Z","last_seen":"2026-08-31T09:13:27.356551Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793d8f773f4.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:03.620Z","timestamp":1788167583620,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793d8f773f4.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1154\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-482\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1154,"size_decoded":1403,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"412dbf1bff1f4bf081b1ff38f0dbb980","sha1":"8c3056ba9b3aea1968734d3620db653b31ab277e","sha256":"57100450752aa591e92e0d1eeba9f7ab94b47dd0f77f61a4e15e1c0cbf544068","sha512":"aad7245fd5217d095c0a5300f0e66d2c6ff1fdaeb8efc9dde47f745603272ecd90896336323e681e2cc0991beed13c7ae1ec1de07f1a8078e64a2e804af2792e","ssdeep":"","tlshash":"ab21ca97a2b39f2cdce9d7615205145b4e35eab884c29f88153909d6a195c9c10d6cf8","first_seen":"2026-07-12T14:30:59.842677Z","last_seen":"2026-08-31T09:13:27.35866Z","times_seen":1355,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67331b06e19c7.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.404Z","timestamp":1788167561404,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67331b06e19c7.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1794\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-702\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1794,"size_decoded":2043,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"31c23d21c9dccefd435c2b5383576108","sha1":"e3d1b3fce775e0cbb7d4218c1770983ac59586ef","sha256":"b38bbee480b4561775e3cf3f98102861959efb60776cd808f32fca2a234b2043","sha512":"cd75b4c143aeae3b452fdaeb690eb527214050422eab1dcb7db720c5b0045955d8570ad552e58391070f607cfb7e2b75cb8d3fc19c5cce4c86f33eb146d7d32d","ssdeep":"","tlshash":"6f312b8d173adae00b2d47a061252650f65a19dc025cae96a4d13d1af32d82fe4cb2da","first_seen":"2025-09-24T06:54:00.226144Z","last_seen":"2026-08-31T09:13:27.359407Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":195,"timings":{"blocked":162,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/bg-main.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.604Z","timestamp":1788167561604,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/bg-main.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 190096\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-2e690\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":190096,"size_decoded":190349,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0d1508409a7d3b57b47e28fa9b4fb06a","sha1":"34410f58764c031b9716a879297ff1234d405e39","sha256":"6b592082c617f37afddfa1b99f9198b0016b1d40ecacf537a67a3772a24c4748","sha512":"c561b86faf5fcaa0cbd80410adc65756ccb7ebeb26956e3e7f00ca5eed81c17cacf9f94e528789c4e36711040380d2145f57302e67420806ced774ad1d541200","ssdeep":"3072:Zs81PD+YKqkRQDXu4j9Ti67dapeN2YjilUZOPOj8AsZJKaDt3MD:zLBVEQr3TggN2Yjil0Z8B3","tlshash":"000423e38f899920dbd92edc3e9bf31751070cbe67c4eb9856628274331ad75943a062","first_seen":"2025-09-24T06:54:00.245769Z","last_seen":"2026-08-31T09:13:27.360153Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-226-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.150Z","timestamp":1788167562150,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-226-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 18057\r\nLast-Modified: Fri, 07 Aug 2026 20:09:06 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b62-4689\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18057,"size_decoded":18307,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"0f1f4588b36ba3a6a9345776e6d9dd38","sha1":"add49853ae7e28d07f3b8becfbc4522032cf96a7","sha256":"b7e889a1d09171f4919909bd6c403e754a244699a1cd55e8b1122c902614e486","sha512":"058528f94e6198aee0963859f1728233cd5cab0bbec63efec3ed76666f6722e7cbf305741b88ba0b0b478f3dbf6fb805232c5af29926852a51ee99d6736a5165","ssdeep":"384:FuQoC/Yvj+LEv2IEWlXGm2qLNOyhyirwo7BqjaVx2xtiy4:9oC/YbAEjP7doIwo7BQWoxtiy4","tlshash":"6b82cfd012b014881f8153eeb6a4190f9d82ad396e6fbce8fb610d0d8a04f8cec84697","first_seen":"2026-08-10T05:37:52.194505Z","last_seen":"2026-08-31T09:13:27.360992Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c56b0ce85201.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:45.939Z","timestamp":1788167565939,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c56b0ce85201.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1892\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-764\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1892,"size_decoded":2141,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1a7ad1069b4dee7670dd46fb4dcf1578","sha1":"336e529f91cad002cd4d3d0741dab899a47e300d","sha256":"da755b3fea9ca121355f81fd234a4f643468eddefac0bc2aacd77cef595e19f4","sha512":"911b7a63ed4d13087052fd7801a1a0ff9e7c010ec415454bd5070b10a80a46bd191bd269da829a405e75e4155554f4a9bfb0edb68891b1c1d8ee489d30dcc3a9","ssdeep":"","tlshash":"2b411b13d8175b8f7fe424ab639c3ada913c717d04956339863a90f4ec2e7bd9210138","first_seen":"2025-12-02T06:53:41.377251Z","last_seen":"2026-08-31T09:13:27.361802Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c5aa8ef9bd43.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.504Z","timestamp":1788167573504,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c5aa8ef9bd43.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 890\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-37a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":890,"size_decoded":1138,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c7b631eaecb89a475798d33e20fd3942","sha1":"adb721bda14d86ed68bb25538468970c009ac09e","sha256":"5cb29f526891470a170a7109a60e51079c24d8aaa9e6322b887f7cc4935fcbf8","sha512":"159d80eb6ab6bfa209c9f1ffa4051e805d2c7fce83ff7d03a138f2ae3e5f2bfd4f9f91ef0b5ea57bc20b81be55c29515d39dc8bd13a5a602196ba77cbd723f6b","ssdeep":"","tlshash":"4711636ca9f81fe0c9d0e974502d2ad2564308a48c308ea452a2a372b920bf81d7df98","first_seen":"2025-12-02T06:53:41.36879Z","last_seen":"2026-08-31T09:13:27.362641Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67487762afd02.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:59.794Z","timestamp":1788167579794,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67487762afd02.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1720\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-6b8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1720,"size_decoded":1969,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"eb59a7628c784ac1062011b6e4e06b41","sha1":"c245df667ff9867197bcb2e151be03dc7f023029","sha256":"2f1f836cfec52f6aded6cdcbae04a33e5918f1684f3e8e7188e69188f9c5cf4d","sha512":"ec28760e884eed6c115986245fc7f1d9c4669dcf86e20fe8fd24af26c329a14bc768e45513066c41e03bba79596e67fe27a5320a6e95f446264e6e0e8a49cac4","ssdeep":"","tlshash":"b2311a0d51f2a99f876934b2e71a85f78429c8e9cdb468b834448d6858da01ca2e04cd","first_seen":"2026-05-29T14:16:16.615975Z","last_seen":"2026-08-31T09:13:27.364009Z","times_seen":1851,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6184030b115bf.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:05.689Z","timestamp":1788167585689,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6184030b115bf.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1814\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-716\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1814,"size_decoded":2063,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2e235329f72f7da84ad02aa50eda1590","sha1":"4e124efdfd20250538248fdad8b17089c4230218","sha256":"d571b4198e390b928256e47c95d5160408097ada274295bce51cda5402b9d2b7","sha512":"b93cd1c0f8b3b984ffb47f6fb0ac2454f42900f667ec9c6ddb73049999fa8ef8dd29364c556917b38db0d0c5210dc235177b2b9436f528660780d16881ae8a90","ssdeep":"","tlshash":"203109505537c7c8d20b7e18dd8c4383a9627934a6c4da3dbabc44b4cec5aef5272b80","first_seen":"2026-08-10T06:14:35.064561Z","last_seen":"2026-08-31T09:13:27.365142Z","times_seen":492,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-61838c722881b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:07.228Z","timestamp":1788167587228,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-61838c722881b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:07 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1514\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5ea\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1514,"size_decoded":1763,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f031117b42b0aff46f2d952f16986dbe","sha1":"fe17c652ba58e779e0d7b4561641e681f16a63d3","sha256":"418bf47f167e84dc9fe87d0f0b122e2ce4e4877f3d20529e7d028aa9ac389708","sha512":"2e8a8edba61b4dd29447cca41050e76167c24a729f3f4dd52c3b1f957e64cc0a6f06c3cc6d7ddc5195c8393b9311cf872d136ec8e77338c03de20ae343b4e670","ssdeep":"","tlshash":"2c316cd11fb078f245046c0ac0d846c31ebe4d0500cfcc13f683c0eaf06e725a8442b9","first_seen":"2026-08-10T06:26:58.445521Z","last_seen":"2026-08-31T09:13:27.366016Z","times_seen":228,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/utils-baec67c9.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.565Z","timestamp":1788167561565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/module/utils-baec67c9.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1771\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-6eb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1771,"size_decoded":2032,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (1770)","md5":"e4b86f03ee973aace0b726cbe80d0afc","sha1":"6d81fb437f8c556b69486093badf374f480dad2d","sha256":"57284eda86c7eb7762b57ea47a68f5fd3a479bbd0b4cb6de5ae1b1240104d214","sha512":"dda890467c196f48f3d69c4a690d09734d7b6a01094d2b22afe1eb0e7848a76b98ba5fe04b8750f78eb2aeb791c8862d3445f94c253eca511f7e05c8198909bf","ssdeep":"","tlshash":"6b3143be3340b0bb8767206040ff9117f078bac2595b6809d484b0d33e2383496fbda9","first_seen":"2024-12-02T21:43:54.640187Z","last_seen":"2026-08-31T09:13:27.366968Z","times_seen":1867,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-227-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.151Z","timestamp":1788167562151,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-227-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 93241\r\nLast-Modified: Fri, 07 Aug 2026 20:09:06 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b62-16c39\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93241,"size_decoded":93492,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"92b96caa41607539b05ee1fa6919d84e","sha1":"68ede4759bf54ccaea435c271fdaa9bed4d35a8b","sha256":"f1b97d9248ce9753aeb4cfe4e068a702533795fb1811371f85c9ba276d28cf0d","sha512":"90cf2352c2e256c37a858e46ef52f6d745c350acb203611ae0e05ee395d99bf47e87779a0193678532ae78d586b3381cf4f7fd12b5683db0f0b859c069187e50","ssdeep":"1536:+YsUzEPncRJKmcBS8UjUboRLEkOwdJzq8/mO6IDEGYe12IV9mfZbM61W2DjIsNPN:kUzEPncRJMw8UjI4P/mO6IDEGYe0UwZn","tlshash":"3193120452927f6bb90affe63f90adc47aa9743c09614bca19811bc3ee9d544c1c7ee4","first_seen":"2026-08-10T05:37:52.265748Z","last_seen":"2026-08-31T09:13:27.368169Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-675c51991869e.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:48.203Z","timestamp":1788167568203,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-675c51991869e.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2620\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-a3c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2620,"size_decoded":2869,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4f822398d107ae10ff4be69087a2f59e","sha1":"33ea014c149f5a719ce4d143e90b09dc88d23594","sha256":"fddd3528001736698dca50dcc12ce7128464adcbef7625d6a973d8c1c81e9e7e","sha512":"c8f20383e258fafbcb78dc20109e586760ff96ad7101b41c1eefaef673bf5a7770c86677aa1996c015872c5a0915a6d5e604a90b791147584ad23151b3a3470f","ssdeep":"","tlshash":"08514f86f94b0a24d2e524bc414c1f70bdc39123a7249d4755a73f794b4d37d980e17a","first_seen":"2026-03-15T17:02:17.345865Z","last_seen":"2026-08-31T09:13:27.369284Z","times_seen":817,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6763422178c81.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.683Z","timestamp":1788167569683,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6763422178c81.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2650\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-a5a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2650,"size_decoded":2899,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca058fb23330b2f2d57eaadc011df0d7","sha1":"4c0eb297f99e15b4932a21d10563312f7c09e9b3","sha256":"ef1700d5a211f19f09711e7d40773214a2bb30ead7b3133f2692182c8a16d834","sha512":"536b6f5a6b7a7602e9af9f43c1aea415cd72e90e4d579ca02caf426143505fd17d1c4efecf7ffe813af17f6b38bfe744c7b2fc80a84636086e7e8e9cc6c3ea91","ssdeep":"","tlshash":"b8515ca6c97647f747707d6ca9d1b7c0813026df207cd42409aac895473a511a0a7602","first_seen":"2026-03-15T17:02:17.250054Z","last_seen":"2026-08-31T09:13:27.370385Z","times_seen":888,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c79402c6fbd6.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:57.790Z","timestamp":1788167577790,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c79402c6fbd6.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1226\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4ca\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1226,"size_decoded":1475,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9ac21b8f027709e9262b15a1c55deb88","sha1":"97f2dcc8192bc31346a0036d9905591cee7304cf","sha256":"3ac91b433a221825ca307d15c9fb1f423e8eb6206d1a81a925ab78f0f1160dd9","sha512":"27ba17af90817bb10bda5fd6af6085028e151bc38b06989aed6c12208f98eac3560b04ca32dc14f43fd21b44f9f61b039aa9276fedf07066a1bce31aa3770cc3","ssdeep":"","tlshash":"b121b7d8d4b6097fd50874f85feb21d9c4294e9272f06c9e63c18c98d4461e102bf0aa","first_seen":"2025-12-02T06:53:41.385583Z","last_seen":"2026-08-31T09:13:27.371853Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c9499c20d407.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:07.381Z","timestamp":1788167587381,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c9499c20d407.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:07 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1056\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-420\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1056,"size_decoded":1305,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2452a76e1e8e215195ce42d7f05b0fc7","sha1":"b9d8067970174928beb64e709c19386e268abb6e","sha256":"2a9e323bad5cd45b73a81ef160e7c4e43e86f985f27e5d8db4db4c624c5b111f","sha512":"4c7324c2b5c92bda1fd3a6f7efb632dee74771771d15c5d7fa9ac468071ea3c17e1f84f9616f970130ed26a9294c6a7603db74275bb18a4d4919983599b56b81","ssdeep":"","tlshash":"6d11d50792c932a0f88df8215b8b8a85266a179f4fa04fb613c230248a3f118c006cb1","first_seen":"2026-08-10T06:26:58.461505Z","last_seen":"2026-08-31T09:13:27.373146Z","times_seen":161,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-62ca80003d8a1.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:07.702Z","timestamp":1788167587702,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-62ca80003d8a1.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:07 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1048\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-418\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1048,"size_decoded":1297,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"475e4ecf16f5ee10c9bd5386c69f17ad","sha1":"18b2aabdb58111b5ea69baa4477c402cea82586f","sha256":"8704419652201be04fd9a6741e2cc434c10c3ca3382a1d970828b9cbd68c34e8","sha512":"fde9ff72716e39ba78921f6b832c6497c3c2a91a7f6bf731bd70f6f6eb301e5182c49ceded33c75029504b2f86ea30dd43eb59dc5076361c9016772a9732ecc4","ssdeep":"","tlshash":"5311b51ee6f7c2e98ca2b93434ed0344b94f97a49f8446021bb01b0538741a72a3b491","first_seen":"2026-08-10T06:26:58.463459Z","last_seen":"2026-08-31T09:13:27.374261Z","times_seen":124,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/logo-footer.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.424Z","timestamp":1788167561424,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/logo-footer.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1782\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-6f6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1782,"size_decoded":2031,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"47fc218e7fe2b0f6ee44e73193ab6b2d","sha1":"52c7cd3268bdc0c0d641f2409ddc4bccd71542e9","sha256":"2c9c9447809e5ca6595888ff879a737c1c60ff99e1c8a433c815edc811cc6c51","sha512":"600d1def1155627a3ac7a2d22f33b31b13c86530f61b6317dc5ec89c67f8db9290eb90d5f017d307a31c334c2c27b8d977bddf72768cfa022218d1fc4b5d6e1f","ssdeep":"","tlshash":"e93129e8fbdd73b98926bbe22b9ea9008989e585b541b60734014d039d81379ab52c21","first_seen":"2025-09-24T06:54:00.248984Z","last_seen":"2026-08-31T09:13:27.376677Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":371,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-615b0bc924331.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.729Z","timestamp":1788167569729,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-615b0bc924331.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1186\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4a2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1186,"size_decoded":1435,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"efd38d4ffb6913821463c88d8e41f25d","sha1":"1924f5f87c2ba84fa5d1512ee29e798f5c055fa1","sha256":"c0a76e24479a8f9339443562492622121dcc8f1fcf0bfee882d2e2f657bee731","sha512":"ed6b3f7d6a7a15a430a00c41b81390103b8152a2e5d845e55330817d724bb08ee7c972dfbdc9db90bc51c80a3670e1cbc945ceebdfd50b19d30aff6b6f99dc29","ssdeep":"","tlshash":"bf21d7d032450729d8c050b1e34b09a275dbd2ca94ba9b91b73d333cea2e65806d2aa0","first_seen":"2025-12-02T06:53:41.467333Z","last_seen":"2026-08-31T09:13:27.377793Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/payment/bcn.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.022Z","timestamp":1788167562022,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/payment/bcn.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3834\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-efa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3834,"size_decoded":4086,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ccf796a303d08cb705635ac35982202d","sha1":"231ce5a1971e742bfd9b8fc4633fa697021c3d0f","sha256":"d96e3c77513c78deb1f64c6c9bd76df93619ebaa559bd17c131dae8dab1577e0","sha512":"fe68201fcbf60fe3e2da666ea6013e5662b0981fec7ea9323ad0737a949bdd1651b7dd90fd70e4061ee51e1a5eb794ab85041df748b9fbead09cf147110d0cc1","ssdeep":"","tlshash":"91816127d317d6abf5098184eee83016b2a0f9abd4e0d6d0a367792af1cc8d1150c3f8","first_seen":"2025-06-27T04:58:45.860802Z","last_seen":"2026-08-31T09:13:27.378675Z","times_seen":1899,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793bd118fba.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:52.350Z","timestamp":1788167572350,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793bd118fba.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 884\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-374\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":884,"size_decoded":1132,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"adb955dcb8523c8c012b484b68f1c189","sha1":"f882e5af32b23023e28be100c7f6b006e018ce7b","sha256":"22da66a0860b976b7115cb21d000373430dffd9434dc1d8978e79f5b1ec28082","sha512":"cfc217a91b772f2f231e25b25ac4ee51c272cce4d32e8582596d6a02cd5fec6e6542e2ae98789118f1c0cdb744324dbb9ba278186e73edc19644880e570023ed","ssdeep":"","tlshash":"c111e6f86261a839c34a3e31123588b2a2c824705200bfb5bd6bdf524b929e21d3ad47","first_seen":"2025-12-02T06:53:41.324835Z","last_seen":"2026-08-31T09:13:27.379961Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762cfd9ef3e1.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:54.382Z","timestamp":1788167574382,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762cfd9ef3e1.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1830\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-726\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1830,"size_decoded":2079,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6febd7adc77f23eb69c694c8f038b4f3","sha1":"6f905ba7a2ab47878184ad691bd47fd4dc3c1fee","sha256":"9b1aa81f4fa8cbdb9d4083b71b0c5c8fffa3e0bac254afc1ba48afbd62921fef","sha512":"3d178d870b3bf50afba4021581ace8be93bf77a0a497cf583a4b07c64149b4ac56027f4573e19390855a9793ec4a80b9c288a50320f600c1603b17ef2b2558de","ssdeep":"","tlshash":"6c310bcce6b0f78054883bd80c390523276847f9c90d57f2258b09ded3d84039df9a25","first_seen":"2025-12-02T06:53:41.606733Z","last_seen":"2026-08-31T09:13:27.381439Z","times_seen":848,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6761789759a0a.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:55.235Z","timestamp":1788167575235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6761789759a0a.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:55 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3106\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-c22\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3106,"size_decoded":3355,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ccd8efb71d66f16a39ec61361bc36eb4","sha1":"4a709d15ff3fda2f64899c9a1d363ea267776cd3","sha256":"c87336dbcbcf11f7d9131425073620d54c7c8aa741c3da14281eaa2fefdb8fc9","sha512":"0d5b37bd5b258089e07138d571ca25d1cb463c266520ee3b7a1e7e2d909f5b5446b85c91b53beb82c0e746d0ff8dcebe754bcb672f3177f16863a7d8e1ac4e9a","ssdeep":"","tlshash":"0f516ec9d656a7d64d9adc803edd14804641b9431456d27fa6cf5d404ec13eaa3f9037","first_seen":"2025-12-02T06:53:41.502692Z","last_seen":"2026-08-31T09:13:27.38249Z","times_seen":819,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-675308f969887.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.651Z","timestamp":1788167561651,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-675308f969887.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3420\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-d5c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3420,"size_decoded":3669,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e0c3d87f5a919bea77d7076011861e9","sha1":"9aecc9b2f5b03f319e60f4ac2e6ab7fc5cb694ba","sha256":"0e4f23375aa3974a7c53b2e76d856a8d9ead756fd2dbc4e542b3391402032fa2","sha512":"73c5ace32e35a886c77243a722e70981339f53efbbe8e18799d55a5babbe99478fb70e207afa25f810febcb2592b3915b5b564ac7be283ddeb77831c8c97af52","ssdeep":"","tlshash":"19616d7843c9c7f4d6d1b0b470e4abadf128a203d24b76382dc46d8321842c24e19edf","first_seen":"2025-09-24T06:54:00.22976Z","last_seen":"2026-08-31T09:13:27.383279Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":223,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793da046081.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:04.962Z","timestamp":1788167584962,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793da046081.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 840\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-348\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":840,"size_decoded":1088,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd09a43bb15fe574f837d3422de311f0","sha1":"2dba93e2f0701cd39c9e55e481f0a7159777ecfb","sha256":"a650b5d95758f47f23032cd4194c0d27beecda46aa44668fd5485cbbdc584722","sha512":"8162ea98512359402d2cbabe2bbbaadcc31410ed0dc64fbc30076bc1b0a56ec8b5d6d0c6439d0170755e691b0d9bd07c88b89cd8a940e0e34874ce7240bc53e2","ssdeep":"","tlshash":"e101860462b13991ea491d70fc787964c6e5aa9c05163ba56c34998012fc2d8793f66b","first_seen":"2026-08-10T05:37:52.163444Z","last_seen":"2026-08-31T09:13:27.384098Z","times_seen":900,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-63e3b057c81b2.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:05.181Z","timestamp":1788167585181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-63e3b057c81b2.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2392\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-958\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2392,"size_decoded":2641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e72eaac148d01a39dbf46c0aff421ce0","sha1":"f708c24bb9481b4ee579bed53cc3a6415bccedfe","sha256":"8418af5d5496c124b9ca7a4331f327a364f687691a1c97c86b381d003cc8aa40","sha512":"971958d8f9ea9511353d05cf6475a090b559ef980119f29931f42359c0a73826e8575910f52c909c32bc43f98bfa6733c7b4df4711768346d1cfb68287662f1c","ssdeep":"","tlshash":"0a413b420b1cbc108d84dd56ad5bdd49af498bb661177de48940d6a33c28cfbcd26632","first_seen":"2026-08-10T05:37:52.200259Z","last_seen":"2026-08-31T09:13:27.385593Z","times_seen":742,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762bf86ce01b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:07.700Z","timestamp":1788167587700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762bf86ce01b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:07 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1140\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-474\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1140,"size_decoded":1389,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca7d8f7653a4fe068aa0d1e983fcc881","sha1":"f227b13abddd844659e79c097ab6db150a96efd9","sha256":"d0d9c1972389e446f395df1f4e14496ff90f5aec3c0135a4586a37f8af986bdd","sha512":"d5f588194271ab5d30ec444590afb8f697f2b589f9588b98b10c0e7a155438ac52debcf3bf6c0d23fe1c24720e86fcb19dbe4b12a67bf406f88e9fb2b39b610a","ssdeep":"","tlshash":"4721f93d67b985c4cda1307e7fd5059539ce038e022096711580d9dac3caa42913313d","first_seen":"2026-03-15T14:19:41.960208Z","last_seen":"2026-08-31T09:13:27.387512Z","times_seen":1310,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67616f6d5f2e9.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.395Z","timestamp":1788167561395,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67616f6d5f2e9.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1626\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-65a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1626,"size_decoded":1875,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cb5e00093dc5030a7b9c06df41236a47","sha1":"410503896eab40ddb8afc5eba588d9a86a5c17b1","sha256":"95feb7b1caeabdb2e61e114f238b4f0b9cc36e8a0f51ed0e88280f32e9eafb3b","sha512":"5763696d830821556e5e8b3e5d9b95399bec622106e73f2dbb2b77b46718bc4976cde6a78d64b3d3f7fa938c90684bf7e139056b5817b30790a6f13013b12880","ssdeep":"","tlshash":"4431eac18142570414fb1adba74bafc16356155499234bc0e21ba4acfbbf96a454006d","first_seen":"2025-09-24T06:54:00.34975Z","last_seen":"2026-08-31T09:13:27.388379Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":215,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/api-88f676dd.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.556Z","timestamp":1788167561556,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/module/api-88f676dd.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 58588\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-e4dc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":58588,"size_decoded":58851,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6589d07dbd72d0ff535e9687f43b995b","sha1":"04f5b47e3e822cee8a316a67cf232affff9ae40c","sha256":"47fecaa248668cf50dfa9ab19f2e44d364d7e6aca5a491dcd61b27772603fff5","sha512":"e014e166e2935e546f251e51b4f68b3b69594726f720b9bdc130bd0b9b6d140c20bef106e55fe180c5a6a347ea25acee7a0665d7a633ec4a26b6e208ad93ee6a","ssdeep":"768:CqpuEERfGEuqJz+z2AFmxq//DzAWZro0KIWdcVZYeHWVv3hDWyyHo:CsrY5kcqDzzAdclWV/CHo","tlshash":"2a434e8669e320304223b0bc4f4fd91ab224950f6c89ed583e5c52a65f5d53da7f2fe8","first_seen":"2025-09-24T06:54:00.24023Z","last_seen":"2026-08-31T09:13:27.389202Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762d08a42de3.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.402Z","timestamp":1788167561402,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762d08a42de3.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1558\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-616\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1558,"size_decoded":1807,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f817917157cf2f1951a56a56dfd803f9","sha1":"e2b1e1ce0eed4248cbdd8e42245ffd6b2a8f29e5","sha256":"893ecdf10e19d361aa10c22290e8cfbbc7486a222037aff77e45e74b1c729182","sha512":"cfaf8ad2ab483bea08b2373b7dd6a74bba60a632f0189ba8e72c6e18e69129eb13f0f69a502309baab5ef5f1b69f744452a0b5cd9a89f6b4e55d1d133adc38d9","ssdeep":"","tlshash":"48310ca7f47c14b1d54dff5c29c487d15d20984ed607179d9c29e2ca70e471b69c6323","first_seen":"2025-09-24T06:54:00.290971Z","last_seen":"2026-08-31T09:13:27.390014Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":129,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/svg/funds-form.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.637Z","timestamp":1788167561637,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/svg/funds-form.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 14531\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-38c3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":14531,"size_decoded":14785,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1bb42a82847526b11dadb94771cbba25","sha1":"a03193208b8fc447b3d0b5c9d648c967fc7b0fae","sha256":"a676b438b775a8101ef2bf29afd5ec688367f7e78c5e996bf97dbd7a89e24e7b","sha512":"9b731bfcebc4c9ab2bc328afcdeecb8e4af84cfae045d36091fb8b8ebb993356a0c3d79f6973ce907ed40277f99840bde0f0dcc76e19305516153e6b1d635992","ssdeep":"384:IRBD41UdF05VajbztEoV+xDMf2NHU8enbODMnkS:InD4eF0TaZEE+xQFbhnkS","tlshash":"6362565e9b732af49c4587d19d2106b03f1f907f2eab8378c294d770ba164fcc8919a6","first_seen":"2024-12-02T21:43:54.602171Z","last_seen":"2026-08-31T09:13:27.39084Z","times_seen":1911,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/users.json","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.908Z","timestamp":1788167561908,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /js/users.json HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casebattle.id/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/json\r\nContent-Length: 17774\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-456e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":17774,"size_decoded":18031,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"27dee94ff0aa97faef277b95d942fe10","sha1":"eec3ee2b7f16223f07a35777f01a59d02ece83d0","sha256":"fe9d5986a799e6a3a1ddb20a173e1983612e5d9efb3a610487d6e01ba537c996","sha512":"e07427c725ac5a94f6a49b76db1605f3fc59a246af138a4380f1f8b0a784690e88463b13d8de85fa6d50afb72aaf066c380b1311a0a5df15b76a4f30640d8dd6","ssdeep":"384:d5qBOcqqREq/qHbwiZqBXvOWeSntUq+PC+qixjqCJiSQWibU95iqoJFrqYgypY5u:d5qBOcqqREq/qHbwiZqBXvOWeSntUq+8","tlshash":"9582e8e6e4f22c5b587e20157d5e6b49e094016b4ca97e20762e6548ffdec0f1c3ab2c","first_seen":"2025-09-24T06:54:00.309268Z","last_seen":"2026-08-31T09:13:27.391657Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-218-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.165Z","timestamp":1788167562165,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-218-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 96754\r\nLast-Modified: Fri, 17 Jul 2026 11:39:31 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1473-179f2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96754,"size_decoded":97005,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"ba149784355135fa3efca882900a75a9","sha1":"99321c2e900fbc861e424d621fb8f1d7f026b05f","sha256":"a205cd849bf91fb971f4898a4c2149eca4c9f44c38ded703348f60a53d69034b","sha512":"676fedc0a4ab0fb25ff838828ce0797c86f52ccaf8421f86728555efeb61a080d2d725fbce654e3f968664eff41f6089086e4812de30448011141fb51a454fa7","ssdeep":"1536:NIstyBL1ZRyJUl1vQTMC6OaXL7BebcfjympRyf88h4Nlkjg3Do5amF3HWWhJjxvZ:emmL1uynvQTgXkb2p8t4/kjeos0WevnR","tlshash":"2b93020774740b5521bce9d926206f2df5da9fe16e34a038e8e45ed78fe890036b2d4b","first_seen":"2026-08-10T05:37:52.119418Z","last_seen":"2026-08-31T09:13:27.396375Z","times_seen":1852,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-219-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.169Z","timestamp":1788167562169,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-219-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 18508\r\nLast-Modified: Fri, 17 Jul 2026 11:39:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1474-484c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18508,"size_decoded":18758,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"69ed7f51398583684ac0ab2e1b9f2330","sha1":"72ffa59fb8b32faf6aa4cbf4191176f361656fea","sha256":"e58d87ea92b629daebbf17ca9710843b8e402bc245d3dc5661ccef06ffe810f3","sha512":"c77af591063d4d45a90af7f386e22bdb636d08faf9f9ae6b8143590df28a7c8d876d942b87d467914a43200ee28ba189acb0d5ba4edba27dbb43bb85bcf2dc6a","ssdeep":"384:FU+NTl2YvQ1Is4g1mtCQgwpB2E0F/2kLaSyBs1khxggcKQBM7A6TXbIg6R4/xrnL:qyxvWuT2BFyB4J/BMgvR4tndl3","tlshash":"1e82aecfd6f785a2a6d4197f67604482733a554f53ab080e2a043ed76d24a3eabd1c0f","first_seen":"2026-08-10T05:37:52.120489Z","last_seen":"2026-08-31T09:13:27.39834Z","times_seen":1851,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":48,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-159-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.195Z","timestamp":1788167562195,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-159-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 18321\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4791\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18321,"size_decoded":18571,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"b8a0858d7f6e73bf95b6182d54f32f56","sha1":"223eafb021cb6e1e18e43122f65031823b645e19","sha256":"2f7156a34c4f0fc43983c5294e0207797c63c9ee1b5dfa835d13ca8e30cfd7ad","sha512":"6c91eee01a8fdd88d86b123872079358c18e693ab128e316f02e226ca654e2615f83ad0a8b3d74959e04868cd070e7ef145f6d4c7cadeeb1b2328579825edd64","ssdeep":"384:FmEIP3EfvYcTEJOha/lC/tcC4kyDE8j7K+s+d7KqHLmfLPI5g66f5:evATEkhXcCME8juY/LmYL6f5","tlshash":"ab82d1f5205bc7175f89496cd87458e8e34bd131e2de8fc82ab2c0b28c5b52c16157db","first_seen":"2026-07-12T14:30:59.686527Z","last_seen":"2026-08-31T09:13:27.401564Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/no-module.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.373Z","timestamp":1788167561373,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /js/no-module.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/svg/contract-icon.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.391Z","timestamp":1788167561391,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/svg/contract-icon.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3538\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-dd2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3538,"size_decoded":3790,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d40d0b5c58b0b24e442e4946d03625a","sha1":"06c41982bf5e035e0e1e187555b3c842a8641837","sha256":"2fd79066153d6bebe78aab3a6581d3fbea594699dee06cf9d2301dadd2aa6518","sha512":"d79d470c52ac6c6de1212f3202d421e245cb68b981ab99d80e2958ded7cc11cedca83ff0260c2df82894bc14e10a244ad3a706ce1a7e36e1e2e8882327ba678d","ssdeep":"","tlshash":"4471df560344dffbaed8853c9690249670e4dd6fe1b0f1d8abab642bc50c8c0a49c7de","first_seen":"2025-06-16T19:50:55.594134Z","last_seen":"2026-08-31T09:13:27.40443Z","times_seen":1920,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/notify-a5ad4bd1.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.563Z","timestamp":1788167561563,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/module/notify-a5ad4bd1.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 21238\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-52f6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21238,"size_decoded":21501,"mime_type":"application/javascript","magic":"C++ source, Unicode text, UTF-8 text","md5":"b62bbff81a30bc55c8271a6369010211","sha1":"53fff15bdb6b5b33597b4ddfc4cfb9daf5fe04bc","sha256":"27a0e9872f67d626842616be908644b203cee3a0f75e8548e53c3997679ba88f","sha512":"71bdeb88f3d12b103fbacbca52fdc921f63c8312c92a39bc4dca954d3faf8fd9b8e77e0d935ca76f40da285e3c12da8695088beb3842871720b4efe3f383263d","ssdeep":"192:vCKzYY7imkiMNFW/fgHnsdY1OyS7+kWz3DCsankxtFiskZdxioh4D4VQ6bxxKQgq:vtE780/yFXLSnIZFWLL80U","tlshash":"7692420913bb1b2592d3b07a1daf90047934809f0d96bd1c3d6d86d88f4c97992fafb5","first_seen":"2025-09-24T06:54:00.346735Z","last_seen":"2026-08-31T09:13:27.405908Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67626e699f9a3.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.500Z","timestamp":1788167569500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67626e699f9a3.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2766\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-ace\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2766,"size_decoded":3015,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4081751ab1aa3a2e93caff43ed11acaf","sha1":"782a912c0c19121ce3eee7dcfa98559c914c5cf8","sha256":"5cea20164b7fbbb481df82a9b19f11ffa7caa376e911f7737df9e197be00b2f8","sha512":"651dd800aaf58796e695a15a9fbe2927a0d63b27800a26800776439f2c9bae363ac6c50c7ba23f55a09813ed06248a806a2297d05bec2e817281e42726c74f9e","ssdeep":"","tlshash":"56515b9e004071eb91f9fff3282e613b6cb508b09aca82c133475572521af68f7b0901","first_seen":"2026-03-15T14:19:42.915679Z","last_seen":"2026-08-31T09:13:27.406999Z","times_seen":835,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5fd5a5ea589a4.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:02.320Z","timestamp":1788167582320,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5fd5a5ea589a4.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1090\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-442\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1090,"size_decoded":1339,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ca22dd7960cf38a4f5b1391201419fd1","sha1":"edade5a0b5e088888c9e75bf60795a59fa1125f3","sha256":"7e3b6d435e859720368ffb91bfd19eb4f7146e5b9648379b47db8f4c11ffca5b","sha512":"1b598bb076882ac577b4740712d24023bc1b87cfd704f9f32a9eec70622ffd14c5141a46d786ec4529cd1ec56ad2ddce0e9617a0457c27690c8ffb1a4ff73fc3","ssdeep":"","tlshash":"9e11b9534a9f215ee8a76635c45f0f418d8b15d132954635ce02776d0cd8fd238fec55","first_seen":"2026-07-12T14:30:59.989118Z","last_seen":"2026-08-31T09:13:27.408207Z","times_seen":1660,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-63e3afecc83e7.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:05.175Z","timestamp":1788167585175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-63e3afecc83e7.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 990\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3de\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":990,"size_decoded":1238,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ce1f578a33be28d6a8541494f18a042d","sha1":"a27a0b3b2cbe4f592962d14640f33683f30e07e9","sha256":"626ed4351606c98cc0a61c8cd8a32600c7127632e55606202a5be0ed87ceeee3","sha512":"60f2e9a97e9c9ca760222a94cc765b3bc197d207d178404c8caa6ec06fe64db84ffaa55ab9162969cd97ccfb3c272bdbe84e39095b4d4275938f453a5714c5b2","ssdeep":"","tlshash":"8011c8093a9b7a2cd888e319a98ad3444cf24a8ce52c72390850712f486c276341ccd7","first_seen":"2026-08-10T05:37:52.04667Z","last_seen":"2026-08-31T09:13:27.409344Z","times_seen":749,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793b19bc6af.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.401Z","timestamp":1788167561401,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793b19bc6af.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 932\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3a4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":932,"size_decoded":1180,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7ff7f0c3418201a803b4fdae84fc5cf1","sha1":"f6dfa4b0118ae857ab055a30dd9f551c6eb0488d","sha256":"2fc309ffd0f04a0f12f990c1e00a8008c642e72172a89d543218d9edc476255d","sha512":"1fb7aeefe0325254083fab212297496614794dc6265a2123f4b9fcadae60058a0f5af5a6f73da5a661f863ea311b28a3c5fd71216c23517204486ee400068e2f","ssdeep":"","tlshash":"0b11844149d35501dca496e8e2b3ee84a0be282af718cab8602e01eca5bb40a8470f75","first_seen":"2025-09-24T06:54:00.311394Z","last_seen":"2026-08-31T09:13:27.410756Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":259,"timings":{"blocked":226,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-158-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.186Z","timestamp":1788167562186,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-158-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 91057\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-163b1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91057,"size_decoded":91308,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"92685fcc3a42a59ee79b2a53af4aae7b","sha1":"433de7046beca2bb73841030f2117ba5ece5dfa7","sha256":"aa3d49f6e37313c786e6a46c8e45c68ff59ce173f7a79a3ff07cabc2ce7897f7","sha512":"c799d37fbcdcf5f750bdd0b1ed9709923089563395de029379f9cf8911a52d87ca95e50f592a2c7c2cd9f254abe4f4e5b28356ce92a85fece6ebe7752467c90a","ssdeep":"1536:q80B7KL8Mv/0Kug+ckZrqSQwl0yPgQj+/32ifiiqe+104+Smc55IZUOTB:q80B7ZMvLH/kZOSQwPpj+/G8ihTgS9yz","tlshash":"3c930248dfa85dd3c7d3d580225ccc03d80a7a1b60ba41e658bf7feca4e324ee565895","first_seen":"2026-07-12T14:30:59.906207Z","last_seen":"2026-08-31T09:13:27.411693Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":138,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67629847c2a80.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.136Z","timestamp":1788167570136,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67629847c2a80.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2424\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-978\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2424,"size_decoded":2673,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"463bce99c5014ce0b5a384b87738297d","sha1":"bed7ad74e6dd7b56fff254b6bcbff796854333a9","sha256":"25cc69b9d4dfd90959f2df007da802c7aa3836271138f7d5a024fb682afa57d3","sha512":"d89cf957c87d737118ab82ce873db090e988ec99884e29fcd9a0b87df6621d4acf5a7994740b8980eee37691e4c6a14e077808df00735ba0909a6aeb5a5ef686","ssdeep":"","tlshash":"75410a28e09a106dc025dbedacd8b43b67ae77bb4268d50944fa30682c8e16ad1bc153","first_seen":"2026-08-10T05:37:52.096108Z","last_seen":"2026-08-31T09:13:27.412672Z","times_seen":820,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-671b9feb7b0af.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:56.926Z","timestamp":1788167576926,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-671b9feb7b0af.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3186\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-c72\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3186,"size_decoded":3435,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2c75a9559c4f52b5309161238d360021","sha1":"375b94873854e993128147f8e14335def617a8a4","sha256":"7c67d375af7951c7cb302c8b4b7638d2347dfd79aebd5d10c87a96d3a14e4d71","sha512":"2a277286b95640615f050381030fe09f87ea75ff7eb6ee6bba7b4631dccf82a39698387e836387efbbc8a34ba5c6b958cb8eeb943125dda51742c8d26532f0e8","ssdeep":"","tlshash":"79615e0acb98438cd11f777d30ed765fe039b6524498e13e6600438632f42c75595abf","first_seen":"2025-12-02T06:53:41.465618Z","last_seen":"2026-08-31T09:13:27.413587Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793f00da8d3.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:57.982Z","timestamp":1788167577982,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793f00da8d3.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1222\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4c6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1222,"size_decoded":1471,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08133f48f4e26ca2d1399f6e0df040fe","sha1":"9f290dc355f38823cef8e0caf0ad3a9348f023fc","sha256":"e8d28e4b38230ff3812ef4511d69df47bfcd39301d3b93cd1b4fdcdad7bd2291","sha512":"47d87df2bfc06b9c2cb8015fa9bc1c2ebbb602f7fe182bbbab8369737b2f624cae264e43bdcbe7bcf387374a6456ac2ed3460ef738243eac073de942b88078b7","ssdeep":"","tlshash":"c121b7c6ca865db4fe8c946a103c4649ad4a24d827e78fd48a8359a08e900b255b9d68","first_seen":"2026-03-15T14:19:43.055463Z","last_seen":"2026-08-31T09:13:27.414367Z","times_seen":1856,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-671ba1e9b64c1.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.650Z","timestamp":1788167561650,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba1e9b64c1.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2964\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-b94\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2964,"size_decoded":3213,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d267e386f3b714c0f223f6b11e3eadef","sha1":"9e360a9078ccc1aa4de25a1fcf21fd8aaebcfdc8","sha256":"e17e1370e138410d0d27ad49e48748a49b7738d88cd1af97320de07a45636595","sha512":"c4d8d495b13f92a8dd2e2dfccc74b3e348b95867b7c190b96657602c43fdb23a635061015aa59d0c977870817775cc733e7e94d9efd4808bd6531b35f012a758","ssdeep":"","tlshash":"e0514bb11b084aa9c104ed7d24988f46f2383e336816def68159ebd365c44c5042e212","first_seen":"2025-09-24T06:54:00.268385Z","last_seen":"2026-08-31T09:13:27.41511Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":222,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762d9f7d5151.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:58.233Z","timestamp":1788167578233,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762d9f7d5151.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1434\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-59a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1434,"size_decoded":1683,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ac07b663a12cb1aabde90e6f716275c4","sha1":"90b922002f7459c939a5f581159cab46851a4bb2","sha256":"f8aff2216e49e08423e9613900033891b8c00ad64d2c487a591d3c5cfd71b486","sha512":"1f15ded0018c37642db777de194566bfbc4a80b6a11bfb949f6ecee919ef135bb8150a80b809de976c768fc60bf861ca2896bbf07632138db20fa766a807c788","ssdeep":"","tlshash":"56211bd04850620dffef607f3d114966f0a45987094fe7cb5a0c167ec5e5c8b2766196","first_seen":"2025-12-02T06:53:41.527312Z","last_seen":"2026-08-31T09:13:27.415782Z","times_seen":1288,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67619db2ed5ba.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:04.609Z","timestamp":1788167584609,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67619db2ed5ba.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1960\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-7a8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1960,"size_decoded":2209,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d6e5fbf008efed7e8061c00ddddd37f9","sha1":"3dc7d6a53a606036da9e93a639d6e870d0236ae6","sha256":"1737d3b3437083d9b848bacc88ee3875822b16991909abd5365247bf29c847bb","sha512":"7ec0075b9872b42ed589953e1ec67b24fed4e72b6a5789d0504ec27e570f32d1791b4f18baa1ab4338061192f76c257fea8cff78093aa7afc886d756054eb1f2","ssdeep":"","tlshash":"5f414ce8cb32e597c6040856353f4c08916eac855e5bd08b7a2a417370b517cfad1d4c","first_seen":"2026-03-15T14:19:42.946112Z","last_seen":"2026-08-31T09:13:27.416484Z","times_seen":822,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-182-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.174Z","timestamp":1788167562174,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-182-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 20680\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-50c8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":20680,"size_decoded":20930,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"c22b5081746c72d4452a50282f0059f1","sha1":"97cba0ff3e3e728ff87f97c291a9a2e6cdb42912","sha256":"d544a8de6796bcb51cd4713742d8714e139c8cf64477d160925559c3b037621e","sha512":"06d79ad84b455960e346ed174e286ce2cfdadd040b32e92a7fd77aaee96232d9892525037d7733e805ff68fa1e66e6a432b07ff42247dde1e90d4a57a87fa140","ssdeep":"384:FMfSbC/P+YamJMlERFoPPHPsywzE/fFfd+CtPlpyl5mYIga:Wj3+TWHoPPHPZ/phlpyl5mKa","tlshash":"f792d0fe93ec6366530a773892b84e0f5ac5b28f6bff7081c015a5e984bc94ad172950","first_seen":"2026-07-12T14:30:59.800294Z","last_seen":"2026-08-31T09:13:27.417147Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":71,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793d3c2de55.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:46.134Z","timestamp":1788167566134,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793d3c2de55.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1178\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-49a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1178,"size_decoded":1427,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"804c9c2feae71c285f88cf26b31c59c9","sha1":"ccdb32e1ec5735bed83a213ee059eded68dd4647","sha256":"1efa685df3840dd2fda7ed6cc81eafed06264b0fda7ce24a79d2eb63a395850a","sha512":"b75076357d66ce9fe37c4d6113713536e8aaebbe7f49b770bdb9df8e4ccb89c91a8b3ea29305846d3bcb6853daa06df6fc42cbd53b3eb55085e11f05f4a1e745","ssdeep":"","tlshash":"cf2177993110ce80ec356b3050fe5f42c46709da9b748dd6af114b67665d331952b499","first_seen":"2025-12-02T06:53:41.330361Z","last_seen":"2026-08-31T09:13:27.417839Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793fb9c3962.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:51.529Z","timestamp":1788167571529,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793fb9c3962.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 980\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3d4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":980,"size_decoded":1228,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9a0a9659eab00f4bafa6b72599c686ad","sha1":"0508acf1c443ddaae45242ead7b1584011d9f183","sha256":"a0c44b44bd8153360853e89e07df9b375495cc917ac95ffeed5ecf30004f032a","sha512":"92a3168186de8378a4d126f3e0affe4cf6fe6498b9f76a23aedf97be19919b0f22712b701a085b2251364ab8854ebe46ef715acdd69edcc147525c5a9694dc0d","ssdeep":"","tlshash":"7611c8bfc6e916c3c8e7fa523cf53b13d03743a20c612d2c2a2c1a806d1e2b10099dd6","first_seen":"2025-12-02T06:53:41.497911Z","last_seen":"2026-08-31T09:13:27.418579Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67628291c87a7.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:04.961Z","timestamp":1788167584961,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67628291c87a7.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1820\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-71c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1820,"size_decoded":2069,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1a0a852c275417ea39cbdb79527b51e8","sha1":"b91810a7f9cc4cad88a746fa476a5bea8f8e7048","sha256":"34d3808f181f5a0e2aa131babc0e32e3916437cf7c2261580cee3c65da1bc9e2","sha512":"70587aac30c3a6d8681f8284bb4e5db4fc6cbab8adf396d664342f7125b4c05f2d0ae1faf8d8dc4e129d15016fff944d284dab48c568637bc079ad8249b8c73d","ssdeep":"","tlshash":"4931e9769004051dc88d2081ae27fa4d4a19bea52dc4928bf2b71cab74c9c3483a668d","first_seen":"2026-05-09T15:05:47.247466Z","last_seen":"2026-08-31T09:13:27.419233Z","times_seen":872,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793c1dd5a25.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.415Z","timestamp":1788167561415,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793c1dd5a25.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 782\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-30e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":782,"size_decoded":1030,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9b6ea60e532f83b84ea06e249fc92d9","sha1":"9860ce879ba067996250406eca7cecfe1b57793c","sha256":"54310d22d580583a04c4e6cc960f06d09d60a549f6fed3da2d96d5b0d66711fa","sha512":"c74a82b6b4b7667491e83a9e0e08ffd9f125af46a0f05fa6708c16cd93dfd05e9f19a2d5638ae0cf2420f628dba454b3eee24231acfc81770c5da4f8d0ff73e3","ssdeep":"","tlshash":"2101705a8da11381c64cae1da6b32a0fb38908bc55d0eb122be417456367122226a1cc","first_seen":"2025-09-24T06:54:00.328823Z","last_seen":"2026-08-31T09:13:27.419824Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":312,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-181-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.170Z","timestamp":1788167562170,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-181-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 85908\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-14f94\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":85908,"size_decoded":86159,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"490ad7be6607285187981c94e3288559","sha1":"4997fd770faf09bbfa0ef8ad29d08a4f326ca276","sha256":"f14b398f179e4a2af5f0e6fd8381f881dbed2b8d659fbb19cf970d4906474b39","sha512":"bbaf886a3d6276c4e45f04b91a9eddd6d1db6b5931a7b0d631930171735282f66c71bb4f2fad5ca6e5c2c8c34bc95f09bd03f4a1ccd0966eb3c56021d8d802e4","ssdeep":"1536:y/Pxyym4nqz3jjENUL5NR3LdvSSaG1mqDy4RNbbqeSRg/Hnr/VFxVXD5dUm+ViHm:py1nqz3jjB5XbdSjQhhbqeUgfr/VFxlS","tlshash":"5183128e15a963dd6fe48aad89211b815c2ddc4f90e7a20c38cec4be1d39d8f7b21d54","first_seen":"2026-07-12T14:31:00.010994Z","last_seen":"2026-08-31T09:13:27.420472Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-160-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.197Z","timestamp":1788167562197,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-160-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 89628\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-15e1c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":89628,"size_decoded":89879,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"1d573b23a32210625ca958ec7e5a6533","sha1":"dd78770e2d10f26f5adacfc5f0223e3dace1e94c","sha256":"d68c4ded82bb69767cd5015f262734ed03c6271beee62ebc79447b3d898c8d5d","sha512":"dca80e2148cfd8ffc67da57787364e038efe530f23091adb4b478f4906e72d2e24dc5e1eb31b9236d5f5619499ac65c66488e17ebd02c051eb4a849f85ea0211","ssdeep":"1536:Q/8qrKx5axVxlAO8rvZ6WQqs6Uovt3qQJWxw6esBZNw6pclXifT3BI3mkC:uLsrv0Tqs6UUJWxYQGyLRj","tlshash":"e09302f9c577f638948a4c9ffacc599f442de9e78012ad3900a24019e592bec635ecd3","first_seen":"2026-07-12T14:30:59.831542Z","last_seen":"2026-08-31T09:13:27.421046Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-65732f4c52b29.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:01.007Z","timestamp":1788167581007,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-65732f4c52b29.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3392\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-d40\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3392,"size_decoded":3641,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c4e76f7f76eac0bc789d20b84860750","sha1":"86a07afa8860c8a9398868dc9ae9e6c072adfebd","sha256":"335ea97b3e2cbcc97ea005173bc0ec5ec1ce345528f5efc0ec2a6385568e4d58","sha512":"db1b5a4138717c2cbdf681e0e428184c2a6efd20286c473ecc28c5b56ffdce1e4b932b1834322781c9fab17f27df0989c0e6ee2ece9e6628b66b36ef57342efc","ssdeep":"","tlshash":"ad615c829bae3739d263673440c1db41841a7b3187cea736c069d3c7e7249d2441275a","first_seen":"2026-05-29T14:16:16.794579Z","last_seen":"2026-08-31T09:13:27.421617Z","times_seen":1843,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/SVG-19e7f4d4.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.553Z","timestamp":1788167561553,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/module/SVG-19e7f4d4.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 1270\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4f6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1270,"size_decoded":1531,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (1269)","md5":"0fa1f568daad1008a4fd3e9ad48c1708","sha1":"757d3ed4a1e66c920af51cc11f5060c6116436b5","sha256":"469470f3ee516b88125f2b540f1b605dd980a2abe227e117a01cda008e93650a","sha512":"31a964591009fbebe2a4b6ab9ffab972a01e8093e76f83f003904d013c62c2ae1bd24e0850164f1da3abfcf7c067e814d551337ce5eb20c06364518c60f8d589","ssdeep":"","tlshash":"e921325ee4b773be986960846165b10053034827db709eb181b558b224fc34863bfedd","first_seen":"2024-12-02T21:43:54.614338Z","last_seen":"2026-08-31T09:13:27.422278Z","times_seen":1867,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-224-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.141Z","timestamp":1788167562141,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-224-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 93420\r\nLast-Modified: Fri, 07 Aug 2026 20:09:41 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b85-16cec\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":93420,"size_decoded":93671,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"aa5f7557c49917cf60c8e312fedaa921","sha1":"c97ad61066a1878c8558c887fba77b51688a8fa5","sha256":"f9665a8b28faeed82aab1cbac9b7e32757528a86ad9caa44ba9d9f04ce3d0e89","sha512":"988f5aa746b57d836b3ef478e47b7ede9cd3a8b4c58276b86ff7cdac232cc6c72f12c8426015e64f518687e84a11f03b163e0b6f3da86953c046cd639904e65d","ssdeep":"1536:/0O2OlJNv3K22xAAfW/xQHc72xW01o6W+NUID5ceqUazUb3a5ly8DggG0Snvb:/zTK221DxBDUID+ZzUbMl1DggG0Svb","tlshash":"8d93125fd92219647283779ec98828abc801976ff3f808a7165e27147f6225c8f36b16","first_seen":"2026-08-10T05:37:52.107451Z","last_seen":"2026-08-31T09:13:27.422829Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-219-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.167Z","timestamp":1788167562167,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-219-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 95574\r\nLast-Modified: Fri, 17 Jul 2026 11:39:32 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1474-17556\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95574,"size_decoded":95825,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"39167023eac413f7c8c23413f2ae86bd","sha1":"86da200dcec8872aafde04b93510d2dbd04bbbbe","sha256":"ce2d4d07ce8898b2773e1398513b467b08914bb2e1442f9111390dc51cb5a87d","sha512":"032248eec5d524eb90e4b481d9914c2c031052f48528be5e8e6ccea9a441c6ac5c5885d616967454b48450959b1da827cd59ec927187273fe6d60e86623727ef","ssdeep":"1536:0sxQlQrUTg/XKIQgG1tV8XSF9W4g91rh2ig3zWAX+y5GgjSLSX0+w7gs7xCJ:LkfTg/bGTVFF9W4gbt2ig3zWAV5GgWLs","tlshash":"ac93120f0a47638b0dc749deab35ab1a3bd9441ea74f6532f50a3550638c783d4e697c","first_seen":"2026-08-10T05:37:52.216345Z","last_seen":"2026-08-31T09:13:27.423463Z","times_seen":1851,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":43,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-61559b0aa0577.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:52.767Z","timestamp":1788167572767,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-61559b0aa0577.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1494\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5d6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1494,"size_decoded":1743,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c97f2d6534d26bf5f154b7cef7e11db8","sha1":"33b6514ea67d036600fe103220200e404e9805fa","sha256":"fb78c8fac2c5d00abbf5fe81af72b8805c144be469c01d97009d3343444c0e94","sha512":"25ca9521a0236e49d4331b81b869a5fe4a91411c2f8a5fc45282e569882668ab83d3c92ede92610d6bd1bc39c11ce131fadc122539921b526350844eb824196d","ssdeep":"","tlshash":"5e311909cebf01586290cd3375159a43e987839ad6a3ccd38ddd63e5c218121f8e7660","first_seen":"2025-12-02T06:53:41.325654Z","last_seen":"2026-08-31T09:13:27.424049Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793fe70eac8.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:59.473Z","timestamp":1788167579473,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793fe70eac8.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1022\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3fe\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1022,"size_decoded":1271,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7e4954491adbd9d9ea56248942930cb2","sha1":"2c6f45d45ec214c44d2770bfeb6e567d771abce2","sha256":"3b9fb7233bda61fc5ab4c5dfdef5a9cd14fca59d18f9111c8cd6790c95fe4db1","sha512":"9d9fa32c34534b463cd416207c6b59f655d0b239b9d603e3ed478f23512603532c3606f83c782c89dacd30e88fa2ca362d0cc59232817ac26dca23392743ef11","ssdeep":"","tlshash":"4c11c822e7b379e05e45922e933db75369bce36e8dca8e79d05b01200834674521f96e","first_seen":"2026-05-29T14:16:16.624535Z","last_seen":"2026-08-31T09:13:27.42456Z","times_seen":1851,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793c6624905.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:59.903Z","timestamp":1788167579903,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793c6624905.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1296\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-510\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1296,"size_decoded":1545,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"74a7e550fa0f463b1c44f33d328d6d66","sha1":"4e1b4fe84756c797da341ec14a08e8e54d6d1092","sha256":"dafb174ed6f317763446d5ba393379a2d2f8c310040052a46b5c1006c4fff7f8","sha512":"68817c221f1c8fbdb6184df89ef11e56c9279c6a792359e34e380c4e66ab7948b3fdbae8abd95ba46fea84a94b0bf4a677888086b146067b29bf6cbb561c89db","ssdeep":"","tlshash":"4a21f89211fa8816cb70ee793cbcfb5096c38c9d22470b2c3214149492a4e9b79751c2","first_seen":"2026-05-29T14:16:16.813963Z","last_seen":"2026-08-31T09:13:27.425098Z","times_seen":1850,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676077e3b2851.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:06.681Z","timestamp":1788167586681,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676077e3b2851.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:06 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1976\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-7b8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1976,"size_decoded":2225,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d685ef971626adf5a3263223b4600239","sha1":"9149638d1f152840061b674bab14407dc174343b","sha256":"cb0e759a5b9a9f7de8f48e49523225bad80af46ac36c9d85b7a3a8c5224d3fb9","sha512":"89b4c5d8587aa12f00958d6d54f8c616c73063ff01e151480508c48cf37cf3c2b9364226151a81a198dd155ef1461226d27997d7c75aab73955295a6e67fbc69","ssdeep":"","tlshash":"a1412a031df60472db8e8618491d76be0de91a5ccc8022b4a08b45919ddd7fe8b414e6","first_seen":"2025-12-02T06:53:41.36158Z","last_seen":"2026-08-31T09:13:27.425602Z","times_seen":880,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-673720529f89b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:06.682Z","timestamp":1788167586682,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-673720529f89b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:06 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1130\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-46a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1130,"size_decoded":1379,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"689aeb2a44d53c755779cb7f10f3b8c4","sha1":"182e1cf99b024c2f44bf156e8935471529d4c27f","sha256":"d9803e97177a033fbfeb0afca0a868522be373c666c84919740a76e5e0ef8c3f","sha512":"d002c53e6257bf6b338d871c52bca19e15134f0056937a406c46c69db8db25cea78ecd4477a356f2a23d080cf7d110293ef41e528a7f8a30e1f0534ff53b1505","ssdeep":"","tlshash":"0621c68a832ad74cce533c10c37c78dd685435b5b960fbe2c6ca8211b03331aad22dd9","first_seen":"2026-08-10T06:14:34.994285Z","last_seen":"2026-08-31T09:13:27.426205Z","times_seen":306,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762df266dc33.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:45.026Z","timestamp":1788167565026,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762df266dc33.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1586\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-632\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1586,"size_decoded":1835,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4a28dbef07448be85bb8e830df66a2a9","sha1":"732aeec719bbe760dc1458074f965f9541660cfa","sha256":"95ecee12185969a709c0deb55fd5f2894b85330a1ad8a68bcee470cbf646b2ec","sha512":"8a85462a1c10d5a155fe4cfdd6794bdb19cff9bb80af572d069d8331ffe28f2609652ff0b412dbf77a50a9b231c4e645458aa9dc827402ace9034ebd35baff4c","ssdeep":"","tlshash":"d231ecd0d19455377849f88420dec71f547d503e3d1fc7842aa115d3c6c3a1e94abe6e","first_seen":"2025-12-02T06:53:41.417035Z","last_seen":"2026-08-31T09:13:27.426756Z","times_seen":836,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762cd9e30ba2.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:45.712Z","timestamp":1788167565712,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762cd9e30ba2.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 610\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-262\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":610,"size_decoded":858,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2c98dde544068a226e882f3f0ce982b8","sha1":"af47758dc08fcc0857a09a7eee330cb1ee4876e7","sha256":"0d5147c1207e870a9e7baaaddf9119880c198a690df4c860ac97ddf2a9abdc31","sha512":"5ab65a075f51bf014297c2c5da71fbac2ededff2255fca4453cdb0323f9e8e6adfdfeabb13c78e2e65f05855b5f510e596de6426fe4e137f643e56c49739e87c","ssdeep":"","tlshash":"0bf002715cc292d97750f0647c5f17aa680f60484d7c4910516d229e34649683cd89a8","first_seen":"2025-12-02T06:53:41.580673Z","last_seen":"2026-08-31T09:13:27.427369Z","times_seen":844,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5d8503831a67b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:46.749Z","timestamp":1788167566749,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5d8503831a67b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1156\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-484\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1156,"size_decoded":1405,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c809460c82dc3ad63c549a05d6d42ba9","sha1":"7322716c6687061ec4276ac66024cf9b177dc643","sha256":"4c2c18d77a2a9d9677b183c8c43ef00ba3e41c1221e1d91cd253139a8e090f80","sha512":"91eaf0f641392fd836e411d3c2c59592a53fbe6af9677364b02f2bbd0a8bbc34378fc694dc0c178ab78f9149b7e5907b362ac963a3798f0e3e207e623d89ba28","ssdeep":"","tlshash":"f721c600d6ef1e59ecaa7cbe8340576800ec6c181916c3a2bfb5c1a7b10cd9b04b2d72","first_seen":"2025-12-02T06:53:41.355526Z","last_seen":"2026-08-31T09:13:27.428101Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-62e542c24c03a.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.501Z","timestamp":1788167569501,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-62e542c24c03a.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1282\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-502\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1282,"size_decoded":1531,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09718f7d504f58589a541c40809397b3","sha1":"151a13d3f8ff5bd4d033ed12f03bfcf80e102bbd","sha256":"c7b418b6714c29627fe637e22338bb44af11d5ce399f5fa4bb65f05902efcfc1","sha512":"58e718dfdc64067eba84da3829f430a47206689ed7050c3628c1cda6186eafabeea2e7933805a8c1b36e3940d43d816ee700b279082483fa57d827c1efff3d31","ssdeep":"","tlshash":"1721ea83dfd386b9d994499f4411be8f18c3a532144cd1021a1390853bdc3cc51b7bc0","first_seen":"2025-12-02T06:53:41.617568Z","last_seen":"2026-08-31T09:13:27.428654Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.681Z","timestamp":1788167561681,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:22 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 427279\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-31T13:29:45.200702Z","times_seen":335992,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":3,"connect":31,"send":0,"wait":20,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/js/homepage.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.374Z","timestamp":1788167561374,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/js/homepage.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 4567\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-11d7\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4567,"size_decoded":4829,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4541)","md5":"5de04fb560031c8610cd3886b2f35e0d","sha1":"18a573f18fb61dab33b7a8aca3f8027ef07ed98d","sha256":"7dcda01647ea29c634ca72577c068d5d306d0726fa35c6791586375acd8714d3","sha512":"8c84b9a5fc270d32e20c7663d3d06f853b6d844fe9f85e86886d2311d3af5b556abd5c2435525399499614701b64dc71b5bbd8a2c1d03c5468a57655412eacac","ssdeep":"96:yeslRZ/0GRbj4n2GEg/jg/Igh5p2r1X3QXO008w+/nvgIAI2DO0mJEUUjr:yesGrD/jwPuQXDXw+/nvgIAIemJg","tlshash":"e59121857191f86d29ed9365b2a417e33232b0ac7544852cb43cede69c0ac45b2ff6f1","first_seen":"2024-12-02T21:43:54.630177Z","last_seen":"2026-08-31T09:13:27.429913Z","times_seen":1867,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/svg/upgrade-icon.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.389Z","timestamp":1788167561389,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/svg/upgrade-icon.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 430\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-1ae\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":430,"size_decoded":681,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c83697cd6f5c5df0e167de9aa6e5c201","sha1":"cba1e47d9aeec688ef69890d438f8510e9c1a8c5","sha256":"2621f9b9b413d62762d3c1fa000c408afeced9957a34071c63dfa56c47c731d7","sha512":"5320face84c4568f8ee603c533ddd84960a18ca971e81b987659458b74921147624baa4cb138eb0049207c096c44f5d69c6b2bf13b490b6988d524c4a7aefea3","ssdeep":"","tlshash":"43e0e5fc93f8d158a1124b13ca783d80aa39b1ff034a11ea704dd9a08b546a7fc97594","first_seen":"2025-06-16T19:50:55.599752Z","last_seen":"2026-08-31T09:13:27.430549Z","times_seen":1920,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67271f82c2c8b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.421Z","timestamp":1788167561421,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67271f82c2c8b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1190\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4a6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1190,"size_decoded":1439,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a369a9e4d93b37f2e291e7d57f12bc13","sha1":"f97dfbb1e32de20d9c920d68f0e52f8716b3e835","sha256":"0be633951a947af938f9f8e2581d924dab4943243069b57aafd5a719e136c09d","sha512":"287a69cf3a7c9288fe43950bddcdc13c19e032374050f58fb7780a2c911168f53fa8ab21804d6a680dac544f57eb408a942507177c92a98d6337cb1121253050","ssdeep":"","tlshash":"6d21a3cbeb532153058a2ae2067a15d7c0179dee22b11ca5fad85ebc4d32ca1794fa84","first_seen":"2025-09-24T06:54:00.22722Z","last_seen":"2026-08-31T09:13:27.43123Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":345,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-157-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.184Z","timestamp":1788167562184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-157-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 87582\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-1561e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87582,"size_decoded":87833,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"34ac2f9e97c3c0e1cd1d14e5eec15ade","sha1":"6df0abc79f0ce2327655149019f8cc1df0909cf3","sha256":"08848374a6d67ddd95e6bb1bc7590619692afe5085ab58ac813a4e5c2cd64111","sha512":"ef669c896936bb7c1cf4cdbd47f4193f6a438d4f47b5b7dd0108cba7227d446c742fcec348eb79b8acb514ec615ac4d6063e54179eda6022372c00d2ea24f079","ssdeep":"1536:FfGyRajtoXvpg+0IdSlHzqVSSx+IwXTxFeda9R3rhgC8gVyTXHrnUoB:RGe7RShK+Hyi7h7m7U+","tlshash":"f88312ce809cb46b95a7e71661ac69ab0332c1ef75d8c7c594a84782dedfd33ad32410","first_seen":"2026-07-12T14:30:59.968145Z","last_seen":"2026-08-31T09:13:27.431948Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":158,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-671ba30cba21e.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.410Z","timestamp":1788167561410,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba30cba21e.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 634\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-27a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":634,"size_decoded":882,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a194dd2e93c8be1576db25026f4a706","sha1":"66d4a76bf122ec653f3b93c3dd6c2af4c010746b","sha256":"e325d068ba1446293ad824f7267a6a33679e19b577454e842f8880a8405a534e","sha512":"847cbc190e93c7ec0f88ea3c15c292c3b90a682dcf3f4c06a28674e380be075dc9d92ecefdc96b1cfd3edfde52e39a22580fb7202cecf32e0e90e564201495d9","ssdeep":"","tlshash":"bff068b703e7e12ffcf0517d43f031b45a04712b1195966d2df44920dc458043e9c8b8","first_seen":"2025-09-24T06:54:00.351266Z","last_seen":"2026-08-31T09:13:27.43255Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":279,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/svg/case_updated.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.020Z","timestamp":1788167562020,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/svg/case_updated.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 3534\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-dce\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3534,"size_decoded":3786,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2c8d52a7da1b57688dbe8ef09de9ea48","sha1":"73b89962bc64c2291504bf286646c390752d0be8","sha256":"5cf60cf79e672aa841d3ee156659d487a6258e07b577bca71ffd12a674e3a6c8","sha512":"fe91206f1b6066ec391c954148e02d69908bf00f8e946df04ebce17cd08bc80bdc4a236dc6bd8f67c95080aea81335aa5a496dc7d557e8baeda6e2aff7d44bdd","ssdeep":"","tlshash":"487175b2e3b858bdd84843d8867414693a10559ff2a283f8fe8d599c2f059e3c05c560","first_seen":"2025-06-27T04:58:45.863773Z","last_seen":"2026-08-31T09:13:27.433243Z","times_seen":1904,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5fc8e607c21fc.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:57.787Z","timestamp":1788167577787,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5fc8e607c21fc.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1110\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-456\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1110,"size_decoded":1359,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f41e57cdd5b7280275d011b3a8575a98","sha1":"37cfc71d1ea3f8ca9fe8604f78a8ba35628abfef","sha256":"86e9728143d5976645e3f8b33deec67873ad1dd6976f2a1206a6eaaaccc1ad86","sha512":"efb97e79baec6f457cb8feb6a05cd0751066035c9bde226000d507581834eae50d3207cb9fb38c09e09de6b3b17d14ea7bdebfe4508ce79982ad6152f920d13b","ssdeep":"","tlshash":"f61196b9c952e9c2c303716f4db4158042148036c68e2525ee75494c0fb5a1909fa9b9","first_seen":"2025-12-02T06:53:41.340898Z","last_seen":"2026-08-31T09:13:27.433928Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/js/api-QQNirg0a.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.503Z","timestamp":1788167561503,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/js/api-QQNirg0a.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/build/js/homepage.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 58994\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-e672\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58994,"size_decoded":59257,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"bcf5a31b14b7c65967b761e945019b98","sha1":"35c1fe0a83672582102e3790e228ee154bc60517","sha256":"1983b1dd55ad52bb975e8ea75027ad7d6f928e32d983a4843d2f0cbed6bdd45c","sha512":"ab43a834abb81110311f41b3968c60eabf6b19e1d4cd3e078eae6ca1e1ac86f03e2816ca024d49d4dd34d7e685cb70620745ed9000fdd94024278db2b3b7f084","ssdeep":"768:ll+l9eGpBj5OfzG74TLVhlVeGK0h/+miKzAQCHk07Isdiy++gH+hdJAHWQcrH:ck4LOdIx0jzWTdid+hTrH","tlshash":"2d434e8669e320355223b0bc4e4fd91ab224960f2d88fd583e8c56965f0d53da7f1fe8","first_seen":"2025-09-24T06:54:00.254481Z","last_seen":"2026-08-31T09:13:27.43458Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762dafa072a3.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:58.854Z","timestamp":1788167578854,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762dafa072a3.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2468\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-9a4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2468,"size_decoded":2717,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c572e1848ec3377f6ac8b4391c239162","sha1":"85edd03ac72df65aa6cf2b64859e46a0fcf34d06","sha256":"fb3d11f9b9a9b88673a3614fdba209e221b2d139e1a939c75471689bc75bc61d","sha512":"c48e3d860b9636cbaaef070b3a763c057fb69ede18b5af4a33e22c3bb8ba92397f150910e9eee2b4eaed22fe799294d163048af6317dc611f25c4ed1c67cd053","ssdeep":"","tlshash":"fc513a310607e2bfbe3a6998014687a5146cbf5dc0c56d9f38df84f969549c44c0232f","first_seen":"2025-12-02T06:53:41.343418Z","last_seen":"2026-08-31T09:13:27.435306Z","times_seen":1316,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/setUp.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.367Z","timestamp":1788167561367,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /js/setUp.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 12768\r\nLast-Modified: Fri, 31 Jul 2026 22:37:19 GMT\r\nConnection: keep-alive\r\nETag: \"6a6d239f-31e0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12768,"size_decoded":13031,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"3eeb2f13263c2d574bc760d0d448c648","sha1":"3a186d9941c6b69b7c654d96034c7c52558a2489","sha256":"f37abee8def67d7e1e0a01de0f37fd062e0a2619867e80f69df471cf6ec01c31","sha512":"67561ae396fe0532f176694e476870681225b171a97663817c6f2b39c2598222b32fddcf1e480c1dcd595f4cca4f8a09f41e84583270b4aa9f997047a34c2917","ssdeep":"192:0ZJWrJh3CgrI+qfpZLkAs8Z81SPpsxPp+0Vjx1kDE:0j+Spshp+03J","tlshash":"ed420e1910f3043642a361ea6beb154977a1a113b004cdd97eacd7850fd3ea0e9f7be8","first_seen":"2026-08-10T05:37:52.249717Z","last_seen":"2026-08-31T09:13:27.436038Z","times_seen":1853,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/payment/footer/visa.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.425Z","timestamp":1788167561425,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/payment/footer/visa.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 778\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-30a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":778,"size_decoded":1026,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"992ed9f41271d9da30e6f85d3d7b7921","sha1":"a0aa0ba35487e6a3a14dc8fc0e6859addd2e0252","sha256":"5c559331d97140f750748485d283b7998ca496ddd2c6c86a7882bac51d8d3f5a","sha512":"54b6dfe53c71f4e7e6072b98105a24a271dc3c3c178851d3d8268b0ba71707b64a22e34d2efb564e7818a00e4548c93a9d23e74249c9bf23f3a976d5c623d8a8","ssdeep":"","tlshash":"9801c51703909f2cf7e03aea32194b402902044021b8dc76f6a33c79628558e202fdd0","first_seen":"2025-09-24T06:54:00.231999Z","last_seen":"2026-08-31T09:13:27.436751Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":374,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.693Z","timestamp":1788167561693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:22 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 427279\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-31T13:29:45.200702Z","times_seen":335992,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":49,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/themes/summer2026/img/case-box/overlay-static.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.013Z","timestamp":1788167562013,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /themes/summer2026/img/case-box/overlay-static.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 23782\r\nLast-Modified: Fri, 31 Jul 2026 22:31:27 GMT\r\nConnection: keep-alive\r\nETag: \"6a6d223f-5ce6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23782,"size_decoded":24032,"mime_type":"image/png","magic":"PNG image data, 251 x 292, 8-bit/color RGBA, non-interlaced","md5":"0d71d96d447256c0f7800022a0a97863","sha1":"8350b815004fb20fdba3dbfb0cb23ba97965945b","sha256":"49c4e5ec5c5e42110c3b7542591a22e62c201ddddc40b477f2114c79ffd7095e","sha512":"756f40cb37a545cab30ba2c82f12738bb3e3473b172e4205e453d58c56528928b9f79cf11f3a24602f0bdff4ff4d4ac5b3b5a4505d887325d3afbf0ad68633bd","ssdeep":"384:dvo4bH37+97/x9KSCI505GB7NTz+LL2gsV2dkwv/3YlhogzkepQpcD:p1H3uxgG05GB7Nu/D42hc5POa","tlshash":"c5b2c0238969f92943fb21ea1847bc5dd7a04314b5549b0e248f03ebbbcc62bf225e55","first_seen":"2026-08-10T05:37:52.12915Z","last_seen":"2026-08-31T09:13:27.437516Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6262b66aa921d.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.140Z","timestamp":1788167570140,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6262b66aa921d.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1982\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-7be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1982,"size_decoded":2231,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"34d18261baccd0ebd485059fea34a16e","sha1":"616aa70440f22adce2a89745393276e3e534af3d","sha256":"82bef42d6d99ffda133111eca67096853fa9c3141da73df4efbe7bd805e2139f","sha512":"84b8b1d7600fbca622b6aa46f35beddca6786b2e1776afbd0fcf3c2e0ab19c90632d048cf44d40afb6b1b2a85febcb274460b80cfd4c4aa10b08799ee22fd528","ssdeep":"","tlshash":"c3412e7a2e17b4e0c7b60a1b387535215799242b1f146ff143801d740d93a65a19dc39","first_seen":"2025-12-02T06:53:41.321231Z","last_seen":"2026-08-31T09:13:27.438273Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-225-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.145Z","timestamp":1788167562145,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-225-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 89986\r\nLast-Modified: Fri, 07 Aug 2026 20:09:04 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b60-15f82\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":89986,"size_decoded":90237,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"725398e5de31f3433c1b972793bc0045","sha1":"ec31520049b0c2fcf4c973d94942bf0e29646a80","sha256":"581ff1eab2e9dce46e4b1122459e20072a4743b1ea456840a46f326af59513a0","sha512":"9d1b1da67e08359ee96e1ce1e1a3eded937daff507d26f7b1f559a7497c1e7896d38b4ee8c79c9aff4d56ad73f56504121f017917cc33f44bd9b82a8eb02595c","ssdeep":"1536:X1NfZvV6ANvmzRwp5hAKJ/k3rt8prKI3OxYIjMd1lYFDJAKzFor/ziW/HkA+8DW:FNftV6g+NonAKdA5hxYIMMbAMQbiW/Ho","tlshash":"2d9302d6f2f5ad581d434ab16631cc4e7925198773a3a7a0f8ecad20fe5dc02b89ca44","first_seen":"2026-08-10T05:37:52.286396Z","last_seen":"2026-08-31T09:13:27.439017Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-674e09bb15a3d.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.730Z","timestamp":1788167569730,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-674e09bb15a3d.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 914\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-392\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":914,"size_decoded":1162,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4e3fc5b295720a200405905417297a91","sha1":"1bcae500de6f025fa46807321c98f06cb29c5632","sha256":"ccf06a2071040fb0260a7f27bd88e6dff0f4f7b8edbe4161cfe1ceef111bb19f","sha512":"57b491ae349a86fab1b992c8351dc29c11e7fefa28b0c5523d2ea1a431ed17c7de5448effd52642904ac3ffa99fee13e3077cd8af2238bc492db2e53fad9eed7","ssdeep":"","tlshash":"f811b735d9add283edc084447b748ced7b964691b87818121269ce158eb450d93a7c34","first_seen":"2026-03-15T14:19:41.924411Z","last_seen":"2026-08-31T09:13:27.439839Z","times_seen":832,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-609b7de34f0dd.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:51.701Z","timestamp":1788167571701,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-609b7de34f0dd.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1600\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-640\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1600,"size_decoded":1849,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4e977275cf475aa3b255d405b84326dc","sha1":"cc9d22c441f46a736a184e85d34550e14f316986","sha256":"0affc32678e7e9cd975c976fe9a027022cf2aca28edec7cd3e1c4a9c70b62a5c","sha512":"64d63abed687663540f26b56cdd5ae9498baf96064481d8c3ae944735ebb1a31b9ba6074019d07c33ec999d4739a803d7fdf32357cf2e90986f2ea32af97c954","ssdeep":"","tlshash":"f3310c51e3db9e929b08024e75e875106f15f04d92182bb6490871e6eabfa082c67e0d","first_seen":"2025-12-02T06:53:41.412296Z","last_seen":"2026-08-31T09:13:27.440692Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-673a1a0a12243.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:58.235Z","timestamp":1788167578235,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-673a1a0a12243.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1488\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5d0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1488,"size_decoded":1737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b81a64f0de0fc3ce07154abd6ac99a33","sha1":"f9cd8ac19a08961a46c74191c55578ce61a119f9","sha256":"9a5b2221572d56271b3bf8752b6e481634e4b1c67bdd6a959d770b7e464bbb88","sha512":"a0cfd8f7e470c52bd4d22467acb74cc485e384ab5d0d4c16332b86708f413ba3c9e277d7521b33d470526a261754a5561a5c3b57a39082c2a076980dddbca930","ssdeep":"","tlshash":"ba3119d18305c341c31630b7fbe04d4046a7a9250145ee732f437302823f85d255b24b","first_seen":"2025-12-02T06:53:41.468118Z","last_seen":"2026-08-31T09:13:27.441546Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793c640b879.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:05.422Z","timestamp":1788167585422,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793c640b879.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 714\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-2ca\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":714,"size_decoded":962,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"20ae11415f2bffdf3c65f0a005a7cb0c","sha1":"e0f651b135c533623a12ccced4fa7fa439ff6a53","sha256":"0dd85f871a88700ac812a7fdd621f1c89043d3415394d582e51bd83c1750b045","sha512":"95c5e6c04d3eac5cad158ef2caf9e1bd84e6f9df0039879f30160f6c5980dd8c9cb53a24dfa940c171a80e8b8cad33a4d118e304036f2683b62b2408bef85de5","ssdeep":"","tlshash":"16016028a3584655b413b9c3e1b831381b8fc318f4b65a673b88bd430ae00560efba42","first_seen":"2026-08-10T05:37:52.122491Z","last_seen":"2026-08-31T09:13:27.442381Z","times_seen":605,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-671ba1acbc31c.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.648Z","timestamp":1788167561648,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba1acbc31c.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3226\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-c9a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3226,"size_decoded":3475,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1ecde46699fa4fdf832b24e365e5307a","sha1":"697c51b1aecfe6477f038750c5054fce24680b47","sha256":"0623b2d84ca5af270a0ffdd691f83e3c02658f4772a668412aa3f0f170b70088","sha512":"16c890e4900548355950ccd39794625ae8e23a90a02a78066c4073faee00347591e3abda2e397876b22458f6da15ddf210e8172d43e2d239c6fa8e27b79e7930","ssdeep":"","tlshash":"5c616db5e28c33bec8009eb4f1f47bc9bb7531b349259d3e45d48825365c2c89998a8f","first_seen":"2025-09-24T06:54:00.222129Z","last_seen":"2026-08-31T09:13:27.44318Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-61556523d00e9.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:01.514Z","timestamp":1788167581514,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-61556523d00e9.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1712\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-6b0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1712,"size_decoded":1961,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"44caa767f916c269719b44a56eba94bc","sha1":"313de1683f6dfa8b75d8e8b675166acea5f4eebc","sha256":"c3232018a42e248e66b0cf1826476511aa50dbe8bc2751786752a47a1ea9beb8","sha512":"942f579fa3fae711bd1897093e079910b0b449cb68cf64bfb2dce9e0db393185950063f268db8685748ab89c2c6c48d96bf0bb0a104465c57dc6b5a49682a3f2","ssdeep":"","tlshash":"cc311af4ab53b8f28bcef52b16d71ca64747be2c85f52f47983401c94302076a549ed4","first_seen":"2026-07-12T14:30:59.674254Z","last_seen":"2026-08-31T09:13:27.444014Z","times_seen":1826,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676344a87b3bb.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:03.004Z","timestamp":1788167583004,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676344a87b3bb.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:03 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1956\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-7a4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1956,"size_decoded":2205,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c6cb5059f1a1abfdaa99b49061002e1","sha1":"198d22e718df2d180df9507109fb42b51903cebb","sha256":"9f1faa274788de8ab46e3b6071dd774252167c6e1edf32831ac8e07a7260f1a0","sha512":"1015022efb445ec50f112ea05c5095d6353ad9e0c89c00ff11027ea564b8422851efe3757199e05be142ca7aa0744763eddb5b8deef524e6ad81a899cb7f75e3","ssdeep":"","tlshash":"b2412aa5aeca0f722c917db96b0836955da0789312c05ae2b5267789432d9ca16c3b30","first_seen":"2026-03-15T17:02:17.32277Z","last_seen":"2026-08-31T09:13:27.444825Z","times_seen":850,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-181-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.172Z","timestamp":1788167562172,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-181-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 14713\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3979\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14713,"size_decoded":14963,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"4a92d2818d20f7675e3bbc12145253cb","sha1":"05ba913468194edc134ec05200b4b6bf04da1a3f","sha256":"428a31503c8eada638f61aa0efe9aac97e8cbad9766e3b344ec894fabddc5089","sha512":"a0480a8b38fdb2cf1a08a79d3367415e09128852704a9f9a11438bb802e0280a82e2f0d6c390664f0c97a825ca9b7f96a73774ab40f217df53269644b33d0fb5","ssdeep":"384:FRnAUrBugjFA0dySfCbk2FWy/WW2HrqMRQ:jAUrBuZuySfC4q/WW2Hw","tlshash":"1a62b04625ebf1ba4e0a90efd17a47e1255e4737f96f0ceaaf60614c009594c96092c3","first_seen":"2026-07-12T14:30:59.793871Z","last_seen":"2026-08-31T09:13:27.445668Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":64,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67617d68b3676.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.753Z","timestamp":1788167562753,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67617d68b3676.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1640\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-668\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1640,"size_decoded":1889,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"480a0117944e499cd2115e22b0607cd0","sha1":"d9e97062c412e794aa670c7e1e1a0182a5066b3d","sha256":"4de10bb5003b6b452704e51f525b13821e0964c487ff58475911a246837b3093","sha512":"1dc294ed73eca436ebb577d64fa06464af44ed6c86065c9261857fa981b1fb5e8c44b6b476e80f4911e13d46a4457569bca54da324917936d1ef729c72d30686","ssdeep":"","tlshash":"6931f6ae86060d92a79d98e00db3b70e5ca3500192a8b5086ad64f8153fd4851fb7122","first_seen":"2025-12-02T06:53:41.541575Z","last_seen":"2026-08-31T09:13:27.446518Z","times_seen":845,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67607bf363abf.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:46.132Z","timestamp":1788167566132,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67607bf363abf.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 478\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-1de\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":478,"size_decoded":726,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a5b58acac806b583e0d327a07d4756b5","sha1":"a23441b0b0fae9a9042f1411237382b59808e689","sha256":"be7b4460d4e2c1e912358cc7221a08c58f6bd66816becf347106396993eff758","sha512":"2f603e16a05ba188c7433f8178199b3c71c5d0a3fac9525fa7b88ebdb97b21538730b4fd44729d8df32063fc1a3191835d8e765834e824a67853e98cb0289927","ssdeep":"","tlshash":"1cf054f31a0b34c425685345dc25060e091f420a4c1dcc5044df9ce47eac4ec31928a3","first_seen":"2026-03-15T14:19:41.76231Z","last_seen":"2026-08-31T09:13:27.461052Z","times_seen":1319,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-63241aef23558.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.917Z","timestamp":1788167570917,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-63241aef23558.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 884\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-374\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":884,"size_decoded":1132,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"061ef0487c526273e76571a4866d9dd9","sha1":"6ee6a13c5c00ed754baaccbab194c1fe6bb0b6d9","sha256":"2d0e30c39cfa9d5cb7c7376f1ce7ba475e00c8986f9d190be1caa1bd81b4586a","sha512":"5d9598b81187dc1ed495d4edb99f4a1d1abbc3d61b8b841411c9707f9065e725458e5954538eff763b3fced5698f4a7bc5ad0dde17050a5ce685009bb75c06c7","ssdeep":"","tlshash":"3b11b3c22314008cd198e63bd58e13c25d0ba344a29267674f4ccc90fc062de507ffc8","first_seen":"2025-12-02T06:53:41.331091Z","last_seen":"2026-08-31T09:13:27.461982Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-675fd10fb9c3b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.411Z","timestamp":1788167561411,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-675fd10fb9c3b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1272\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4f8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1272,"size_decoded":1521,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6219d5ab565dbfd0199ba94d1b180784","sha1":"e95694dcad9803eac12330edce4a8362c4891b33","sha256":"875b90967063185062dba2206dac1b8dd546c0bfe07966afb569d61b3373c0cf","sha512":"6cc03d6fe1bd840091aee13e9b3b12c31ca31d73f2de23f2883c630089f3482f70a64796824c6655785f1c20faee5fb6723c3474af26a31e76f07fecc70b1193","ssdeep":"","tlshash":"7a21eabc3188816959944e1097512c407c531126cec44e90cbbb8a9cbb229db828bfaf","first_seen":"2025-09-24T06:54:00.313548Z","last_seen":"2026-08-31T09:13:27.462805Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":318,"timings":{"blocked":287,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/hystmodal-a1c71d15.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.557Z","timestamp":1788167561557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/module/hystmodal-a1c71d15.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 5192\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-1448\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5192,"size_decoded":5454,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5191)","md5":"ab0bfe3916eaed5741fded42a08e6bdf","sha1":"832cab9450c4f225a51d9c9679aaf9cdf42b81c1","sha256":"8b3583123535720a0f4aecea0677e01daba701ff08e1a34c4d69d04e4447d45e","sha512":"4152c9560706b3248564b0e047d44ba4e534bc02904908087bf8ee27a22adb19c743685446588e0548c5dff2c61107491020ee3e93eccc3c900ef8289bfabcc5","ssdeep":"96:G+rjuSlXQBaMHFsHxaINeih7QkEzF6mnEsqsFM:G+rjJUaesRnNeih7QkqF6mEkFM","tlshash":"fcb1542ab23858ba04ff8957a2a54b53f32118947507041d783dddce5a4fd877075bf8","first_seen":"2024-12-02T21:43:54.626428Z","last_seen":"2026-08-31T09:13:27.463579Z","times_seen":1867,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-225-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.147Z","timestamp":1788167562147,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-225-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 22786\r\nLast-Modified: Fri, 07 Aug 2026 20:09:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b61-5902\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22786,"size_decoded":23036,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"acab92156869055b0171c29bea8387d6","sha1":"bfb0b61f60544a13a1182be4429b0d0e31bcab1c","sha256":"1208659c81c2ca5ea70f5570b1bd897054f2d08dca4a086aa66886a771351ae2","sha512":"5370bff5512c6ab5bcea287ff530b1ecf617382f0f5caad9ee18fa3ef824eef04a914206bc4dd231107c6b3bc3126778de295612598a6ae29ec584d6149c911a","ssdeep":"384:FpudjCDzH56G7cxOsga/K3kzZMpCbvXxo2Im5jEylhBQj1MlUcy6FK9z:7udm3TAiUZMsbvBo2jN/h6+UfJ","tlshash":"2fa2d0839a7a0ef6a5cfa8dc9fd02c671ca912cc5dc786cb3b6bc1199002bcb47556d1","first_seen":"2026-08-10T05:37:52.275531Z","last_seen":"2026-08-31T09:13:27.464457Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/sendRequest.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.362Z","timestamp":1788167561362,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /js/sendRequest.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 524\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-20c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":524,"size_decoded":784,"mime_type":"application/javascript","magic":"ASCII text","md5":"efb6341f834fc22edc2f2e0c1584c4ab","sha1":"0d6a14e0fc9e4c090791d7828ffd17e4852dacc4","sha256":"22776cc5cec9ac6f9ed58b4ab5dd1a868db717107ada82a9bea067b07ad3e8e9","sha512":"dd0df4d33e6fa6bd2289a297fe9ab4097f98056484f78b4da6eaf84f2c77389e06f5242f58db3b709c9bc49074d48ae2622102986a4d1c12a0145cd7d75af18f","ssdeep":"","tlshash":"b0f0dc87a8f3120217777108ca2b081ab62b402bad26dc747b2c83142fcc56d82713c8","first_seen":"2025-09-24T06:54:00.307844Z","last_seen":"2026-08-31T09:13:27.465577Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762d44535654.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:45.434Z","timestamp":1788167565434,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762d44535654.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1430\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-596\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1430,"size_decoded":1679,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"79a8299b59b6b34a038afcae99b3d730","sha1":"1b41ce2e5c674c71a814d41bcd17becc8ce424fb","sha256":"5a6b91838a82e8d7b5b6980fd0b65adbc43a688b6e44a7f74d43679c01a6ce42","sha512":"445e81c844f795d6389d57195a65d80ac4028e877a159038ff5b7e4eb8b54e1ab4f56c1cb39ed6a6de1913cd7da4fc899cebf6b758a350cd4b777b29703ada5b","ssdeep":"","tlshash":"c5211bf94b02ac6c9f0360c2586c8bdb609d5bf34882799202133821e28b5f44539130","first_seen":"2025-12-02T06:53:41.31683Z","last_seen":"2026-08-31T09:13:27.466727Z","times_seen":842,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793adf45443.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.500Z","timestamp":1788167570500,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793adf45443.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1660\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-67c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1660,"size_decoded":1909,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57338bc33da0ec2d9a575a2668082493","sha1":"caccd42143d348c9ebfabec0b9565c26eb641f9e","sha256":"7b54631c5af01029d2bce749ee8659f66cffe6ef6014fd7b0897a0012431d806","sha512":"5711069b3d66d2cdf00e41306981bdf91e4baaf8d68c2c5ec960cb344889ee1f96d9e52e18739f71e1148f06d25e124abe96fa054d3a7ac394e0ab5fae0202e1","ssdeep":"","tlshash":"0631fa9dc3659266c56c0d1f399c3e60536362f24115aea2ad9f0c7aba3c6e174a2107","first_seen":"2025-12-02T06:53:41.52585Z","last_seen":"2026-08-31T09:13:27.467758Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67472326a4d8d.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.918Z","timestamp":1788167570918,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67472326a4d8d.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2164\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-874\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2164,"size_decoded":2413,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa3e0c75b410bb51f36e3cddde54d3e7","sha1":"ec7feb4f84ab885013f14c0d3d0da159c90a3526","sha256":"2ac02a5e484b3df40b500b45cf64fe44ecfb7b629dfbc75e04ab872676c20ab0","sha512":"fd51763b56cf55e15e65d155b77061f26077b8ca896ff453eadac57a47704385eb9de54651c720a90bc99a51f33806b23ac57da9a1cb120351a26a65d2d51a68","ssdeep":"","tlshash":"30412942496a338da80527acdcb7365ee3b3cd1d0709ac25ca17a2c5256f6903403e6b","first_seen":"2025-12-02T06:53:41.553916Z","last_seen":"2026-08-31T09:13:27.468665Z","times_seen":843,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5ddd23b2a00ef.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:01.000Z","timestamp":1788167581000,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5ddd23b2a00ef.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 958\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":958,"size_decoded":1206,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"372b200588788b74afaf6fe2a891b65d","sha1":"7b26ffd275f34fc34884b92a107e0a47769e0bd7","sha256":"91f6b5e03b7a8cd60bfd6b0b666c20de4edfc2061405e76c412b9bd545d183bf","sha512":"34747c37daf23e13bee3ec70eccf63394bf3f665eb4e8e958b05ba16555b9afc4533cac5ec6cde2c4c21029ca65d29aeb8e5889324dd0401a982db6e12595f0e","ssdeep":"","tlshash":"b11154a088350e6fc50cb4ea4bab1382c9248621f3e9ac9e6bc598c5e451861867ede4","first_seen":"2026-05-29T14:16:16.73657Z","last_seen":"2026-08-31T09:13:27.469839Z","times_seen":1843,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762d0587888c.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.419Z","timestamp":1788167561419,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762d0587888c.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2312\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-908\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2312,"size_decoded":2561,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"516c7d9d9f13fa52e0cf3de923cd4b4f","sha1":"b2cb974ce9196460c9bf8fcd8884ba3fd45f07a4","sha256":"f7efe3074148d82c7d551ecc46f99e03ad31fb56292e86090873bf26873dede3","sha512":"13afe56dc4372685539daccf290ee99346a8af16a41de391ac83de3d8fda9c996167850fdcd470ba776f85aefea8690a1aef318994a3acfb025d2052560e6a35","ssdeep":"","tlshash":"b241292113759d94e835fe2d68530ab512250428f14b6cf305feef7a80902e94bf26e8","first_seen":"2025-09-24T06:54:00.217428Z","last_seen":"2026-08-31T09:13:27.470678Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":343,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/undefined","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.017Z","timestamp":1788167562017,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /undefined HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":318,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-08-31T11:35:46.896733Z","times_seen":47204,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c56b20c88a22.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:45.935Z","timestamp":1788167565935,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c56b20c88a22.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1140\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-474\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1140,"size_decoded":1389,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bd7811a3734cdd5904e4d99eebd25e99","sha1":"2570c44247f99841064eff1f7a58473e27873121","sha256":"dfc433da44ecbdca56a74df2359b63cf16df8fe5173da2b78a1b4a78fc625a0c","sha512":"cd3e7fdc7b6f24c4685d8ddf9b2db01bf007ad1e2d3e563a5f96597afe3322f8ac2795793c6b4d8ccdc875e9c7c3c46e2e70cf06eafdff83f1d44d8ca2aed636","ssdeep":"","tlshash":"3321a7d2f9e7a485c78a6b6ec6147285f01204dc071a684b53214566bca90fcb41ba19","first_seen":"2025-12-02T06:53:41.5846Z","last_seen":"2026-08-31T09:13:27.472594Z","times_seen":1861,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762dfe838b27.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:46.751Z","timestamp":1788167566751,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762dfe838b27.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2186\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-88a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2186,"size_decoded":2435,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"25e06e85b356a54b49af0cd905e3dd37","sha1":"41bd74aa53efc89e9ac28a6eba6b7347d1b0363d","sha256":"b803c70ea8987c2623c6aaf73666509056770b7c75cf1e6e2e202bd90ff52009","sha512":"cecaee0ab2d4cefdbd3b99fc42448db3b4ba6fc63545a211659c5c627de5a06f394a6827d898f3bc65c2211f5d6a44a25ee6d069261167186569257d83c958c6","ssdeep":"","tlshash":"e64129e5cc325204ee15a652ed30807c10ce04592dc318fa6cd67349a426ea1299193f","first_seen":"2026-03-15T14:19:41.961797Z","last_seen":"2026-08-31T09:13:27.473935Z","times_seen":835,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67371354c1654.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:48.208Z","timestamp":1788167568208,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67371354c1654.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3262\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-cbe\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3262,"size_decoded":3511,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bfb582670a81d0c571dc662e2a20b910","sha1":"358b6621b8e0e94b353eeb1925002fcf1146748f","sha256":"c7fd78c8e05a30e585b40a8110b05b25c8ffa04a856aacd4197e1f864f0710e4","sha512":"ff6b0e79b5df9d77a99e9d69345b4fbc00914818e3c679705583bbadcc73d7d1fc2f2e19916e1973f32a0aa276d68928b3db11270fe269a77b396fd06e72e51a","ssdeep":"","tlshash":"d3614c4397047f29ce1b03b168a09cacf13c3b10161e9293d142a3edbbed9d08628822","first_seen":"2025-12-02T06:53:41.623242Z","last_seen":"2026-08-31T09:13:27.474974Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/funds-form.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.371Z","timestamp":1788167561371,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/module/funds-form.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 58649\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-e519\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":58649,"size_decoded":58912,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"f3c6779a850fdde67b7cf20730df6a70","sha1":"d73963c84716ff7ce4da55c4459c5c201413d817","sha256":"41f6e7c63eda5710d4ef9dc429eb210d2edaabfdaa3ee09aac0b13ef75338550","sha512":"27d026d1d7c68d76a293701cb41d1b5fff9cfe00b3cd15283062372db95808f7ece191290138f899d414a7a7a399f9e772284eb707ff153db4655717f26dec86","ssdeep":"768:yhV0lS9sZ8ZC4q7YdKC8Mg+Fh5pAS9901W//gHVUtrNr7G7VbFpOa:awMkHUt/B/01Siatp7gVRIa","tlshash":"4443b41622f62435b123b0395f5fd805be26609f2daafe053c5c02986f2c53c97b5f8a","first_seen":"2025-09-24T06:54:00.220896Z","last_seen":"2026-08-31T09:13:27.475921Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":108,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":67,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676161a4eb27f.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:05.688Z","timestamp":1788167585688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676161a4eb27f.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1878\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-756\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1878,"size_decoded":2127,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b13d5389620d72091aa43ae6dc9c0de5","sha1":"174e26cd861e71b1dca67ecc46d667fd87a16f6e","sha256":"39f927873eb2cd6aa0306afd2b1421b4e0ffdaea4e11a4c7037033e555be8550","sha512":"86f1ae7bc976b45400e81223ff2f564cd80b6a3f3edc294241c7ce718ec9532ae293c857361b8384af674675606aa1e28a11e037a156fc0a3e88d8de3b708250","ssdeep":"","tlshash":"e6413b3ae85ba1a14133a90f39247c88882892f791307ad65fe5aad5333403369232e6","first_seen":"2026-03-15T14:19:41.849675Z","last_seen":"2026-08-31T09:13:27.476796Z","times_seen":852,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793efd65aa8.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.403Z","timestamp":1788167561403,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793efd65aa8.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 830\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-33e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":830,"size_decoded":1078,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"18d423a2f8f1cc8ffa104dad47ba4e80","sha1":"38ac6dac6d27f8c4231c1f5b138fcb8697c05087","sha256":"8e0ca3cae4b30ab921b34f0811d7b5fe1a557ee0c1691ce98414c4b984edcfad","sha512":"7fa77b762669e5bfaba43526385feae06c0a41d835fba7f6a2e2456760ed08932b73e1cab563b272d4dc90986a767ad4020c93526d504658a2822ed7113fb930","ssdeep":"","tlshash":"f6018628db50d0778054bcaca77951c4d01260ed688ccb41450dbc4b35797e759a5be8","first_seen":"2025-09-24T06:54:00.338755Z","last_seen":"2026-08-31T09:13:27.477669Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":158,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-675310dda99d1.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.414Z","timestamp":1788167561414,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-675310dda99d1.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1110\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-456\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1110,"size_decoded":1359,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ae9e8be98a7e959a206662b5297c50ea","sha1":"32ac6f693372fc58942cd2e3c6dcbfa00f2d9071","sha256":"4125c2e2e13f30df491f56ef7e4209e477cc6618265724f3d375019071848c9c","sha512":"5781f8ba92bea47faf33eeb43cc3b226e415b9256faaf9eef6c001a264e07217b50b1777069d3103ab161d05168f7c81e799b61566dfb8953d3001273d3e7712","ssdeep":"","tlshash":"2111f9c7156b4194ee97b818b83313c5ced8203ab33cf34fcf0401a419943891368a4c","first_seen":"2025-09-24T06:54:00.345108Z","last_seen":"2026-08-31T09:13:27.478542Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":340,"timings":{"blocked":307,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6761fac83a933.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:44.072Z","timestamp":1788167564072,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6761fac83a933.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:44 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1908\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-774\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1908,"size_decoded":2157,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ba27d2e2395e3b80114fddf37b780587","sha1":"4cfe7988de306ab8292d3d7fda584968b3f0b713","sha256":"a065db35cee848a6001445bf0d75de163b4a2c8f59560d2869e642cdd311c04e","sha512":"9ef433b4d02ba4337558657cb467725b7a54c7b9750b7856b69ea43c9883972e5560e03111dcfb99069d78754bc8de5c608eb0940f343364785d4912e35349e6","ssdeep":"","tlshash":"f3413b3ba2ce839cdc080952cdf38f25abdf7e88695491c39182390d9464478654f976","first_seen":"2025-12-02T06:53:41.500958Z","last_seen":"2026-08-31T09:13:27.479422Z","times_seen":840,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-61f65842bbb6a.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:57.266Z","timestamp":1788167577266,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-61f65842bbb6a.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1074\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-432\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1074,"size_decoded":1323,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4ff631e3a8620d4bf0716f8df2b170b0","sha1":"9824e4058d827044c7fc4f7416ddc2947df77b07","sha256":"bb8c4319d1873c158b0046e94fd7bd2849b1511c090e792df442f24216a88a6e","sha512":"52a46503af9399beda1dd20d3348d08a7205c07817d4a85a05606a0122499b341fdbf3687c497e7493d3807b06245f926338214921f7c8abbf3274b64877e1c3","ssdeep":"","tlshash":"8d11e9a700ee9aa1ddcc70582b982bc1c2105d324f32e524cedd5091e8e1fd974229d6","first_seen":"2025-12-02T06:53:41.340068Z","last_seen":"2026-08-31T09:13:27.480267Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-615427cef0dfb.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:04.003Z","timestamp":1788167584003,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-615427cef0dfb.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1586\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-632\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1586,"size_decoded":1835,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5cfdee0956a904faad31aa16d7d370fd","sha1":"b46765c7c5877035d35096227cea4d78741a94e8","sha256":"5291aa35c71a02d845cbb44db015883e5fa1873180b611ad0a21ec7d051c3cfd","sha512":"6c1295ce95c27dfabd8e41c118514176ae2b431ee5a36feaced04b7f31bfd2289456c230e38e5fa2386c0c760ebf73a2786fa64e40b6233142da5ed42a1ee6b7","ssdeep":"","tlshash":"2731c81ef3b5697487654e1526bb7a733548da9be075c34e2c6e1816c33a4103266221","first_seen":"2026-07-12T14:30:59.828586Z","last_seen":"2026-08-31T09:13:27.481154Z","times_seen":1204,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-63f0913e668ba.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.393Z","timestamp":1788167561393,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-63f0913e668ba.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1468\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5bc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1468,"size_decoded":1717,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"64256d1387ee0de9b274b26ef94ab2f1","sha1":"1018f8754c80da6e4d837ac98d7c4d17045c0b9b","sha256":"1c47b41fbfeabc6c32bfbfe9e382f5b381878991367f6438ae62d0ab5e7b6f45","sha512":"d18ca62005162989f6ed691ecfa1bd26fc895ef262940f1057045d8fcaf7b885e4623808fdf0792a189f40343b54c96259e8d5c21ca13a44dc4d45f8f65a50c4","ssdeep":"","tlshash":"bb31c79693fe8a14e5d0a0eb24c8fb48a4ff8aba20a0bf1c521b205a57c1895fd51895","first_seen":"2025-09-24T06:54:00.343536Z","last_seen":"2026-08-31T09:13:27.482193Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-671ba24107c45.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.394Z","timestamp":1788167561394,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba24107c45.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 852\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-354\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":852,"size_decoded":1100,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbc6d24a3f69a591f0f39ed125c672fa","sha1":"708a5bb6e0e0edcfd8eacf388edcd9c9a1b03222","sha256":"bd0e1f76bf0c5a7e64e88c3871a54510f36ddfdf87bbfae676ffcba6e10b2384","sha512":"62f3803b1f5b77003f39d9b0df0305ab5bc91ec9ca1ef1b317753129c28a78f86151d9330ef3d3216a3efefad68f7a46bc697514680170dfe175fb411657be1b","ssdeep":"","tlshash":"4901d600f3aa60b4c8bc2a730bcf1e3ba45b6199940ad303493def0c16768771732e29","first_seen":"2025-09-24T06:54:00.276567Z","last_seen":"2026-08-31T09:13:27.483148Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":211,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793b9ddd9ad.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.396Z","timestamp":1788167561396,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793b9ddd9ad.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 968\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3c8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":968,"size_decoded":1216,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8c4c9d55b36c37b1bfa10c01e3dd2efb","sha1":"71eb814276369f49029b18e52270e1fa618bb829","sha256":"477a17804822b8b4416b4c0b3715c1fda460bf1e70d45a216619c10fd623576e","sha512":"67c9b48e08f6791bf60282f420a4690fa0d82102e8a511754064d0390bdb9eb121a629b461a0e9b403b66d4697ad9c1707156b5faf036b741aac64727d9e7de9","ssdeep":"","tlshash":"8d11c86493d2e43eeec6355007624d77ab0929413518ef28fd2ab15b81d26f53d3e60b","first_seen":"2025-09-24T06:54:00.27404Z","last_seen":"2026-08-31T09:13:27.483992Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":126,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762c2c7c724a.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.400Z","timestamp":1788167561400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762c2c7c724a.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1390\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-56e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1390,"size_decoded":1639,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"aa773bb18fec160c1e28379b63bb9c5c","sha1":"65d0249a112cdc0af082fab52f3aba86ba11f244","sha256":"a704a94782edcda8d592ae664e7e42fb07b1eb2c0dba1ff5e94710d6f4ce18ae","sha512":"8ddd772661c460e352494a9673028929088fb094a375d607364663982e536ebc4ea88d2b3788b66fcc6c698603f014eddc24d0a1a5097beec89fd5d5139cbfec","ssdeep":"","tlshash":"9f21b6061cb9ebb57dea695be7c5c66d1863307060184fa10ee0b4fe9ba2399d08df05","first_seen":"2025-09-24T06:54:00.263791Z","last_seen":"2026-08-31T09:13:27.484804Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-217-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.164Z","timestamp":1788167562164,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-217-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 19308\r\nLast-Modified: Fri, 17 Jul 2026 11:39:30 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1472-4b6c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":19308,"size_decoded":19558,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"f79a2833dd9cb5d09562bf8fa5758814","sha1":"1533da753e40dbd42c952d8fd40836c0518335fd","sha256":"35cb5e10d0c3ff2596057efda396cbf662362d14a0cd45149e11f13a3324a9c1","sha512":"75a1cf995a2782fb43df2fcc4eaeb9b5f7c7d10aa2727bf0b20f9abc6eb0c0dcb46952180c075f6a191c22a962c44e3bf33cea3123affb1a57ce883c6b60cc45","ssdeep":"384:Fb3BrOnuOLGW5WSChM5dFQtfSjVlpBOqreDSnLGwB5:5wnXLBShUWtfSVwqaDSF5","tlshash":"4282aec39aa1ae91304c0eed5fdb08c3995055d55f6d6cd8f367dc40e8adae1008b4ee","first_seen":"2026-08-10T05:37:52.07483Z","last_seen":"2026-08-31T09:13:27.48564Z","times_seen":1852,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-182-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.173Z","timestamp":1788167562173,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-182-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 85825\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-14f41\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85825,"size_decoded":86076,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"7c2f34c176c39c6d5062c6185c7d0c1f","sha1":"dff34481e4ddde730d26e8ba893962b8ad8b1cdc","sha256":"d3e619f37168975deed6cd65698bc10f43278cae5a1ecc767bed226a7b2d49a5","sha512":"7d3a7d5e2acb9ef1c63d24c469c56c67781d4b721262a70faa8ce25970b91af4429558f6b208d34cbcceae4764aa18e53ce5f63f1ff68da8b0c8f86cce5caf84","ssdeep":"1536:+I6YFBvGMPsVCi5g/MkpLI2Tr1qgSsFNeWY+IRe8OIqsD+IDBP9p/rO:JpBvcCikRN1XprCjRCsDvp/rO","tlshash":"d68302e1bea42aff8dd949827c9744421327d9d5ac060f58da7c017f23a33e5194f2ae","first_seen":"2026-07-12T14:30:59.789924Z","last_seen":"2026-08-31T09:13:27.486451Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":62,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5db54432efcf9.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:47.557Z","timestamp":1788167567557,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5db54432efcf9.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1438\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-59e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1438,"size_decoded":1687,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"96249e3d28341ef9a87a0a5fda663fb6","sha1":"a4550cf82e78f824478ff60f0444dbe17a2fdaf0","sha256":"f80334c54c910f5577fc863a9b4ba51d347e2ec8a3e422747e766bf112bd00d3","sha512":"e44f3ec9ecf8f325071dd6230196c0730c4ef8682769d3b21ef4fcdcf05341320f6a69cd982f8410a59c3ee506075946002a402845aa362eca3284dc9fffa11a","ssdeep":"","tlshash":"f02119eacbad26d8ff84dd6a905c7b10094614c56763cfd48e155df04b410b2142ee2c","first_seen":"2025-12-02T06:53:41.558712Z","last_seen":"2026-08-31T09:13:27.487249Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/logo.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.386Z","timestamp":1788167561386,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 4076\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-fec\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4076,"size_decoded":4328,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"22f9412632bb953686722c2a01b88c15","sha1":"3cb25412d277edcdc9d395110322f1ba3adae624","sha256":"8def07276eb151a09123b873de4c35382387b68e90c77b6698f9b7d0dd42fcca","sha512":"cf3c89b8ba39477dee3254f8bd9dbbd0514736104c0f0ef69305bff5c7ab6532248818787db038c4a28d035704a138260b60de0ff5e1da56b1ec99db9551efd3","ssdeep":"","tlshash":"3381227e73a4875a94d1d7088e68349933a895d771a881ecfb0fde97af084f380b5d60","first_seen":"2026-01-26T15:47:31.325031Z","last_seen":"2026-08-31T09:13:27.488084Z","times_seen":1865,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/svg/coinflip.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.635Z","timestamp":1788167561635,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/svg/coinflip.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 14592\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-3900\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14592,"size_decoded":14846,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6fb6d28851795c5e72759f13f79673b7","sha1":"ef606112c2f9c47b47ea2d39f34702ee968dd567","sha256":"b227530d34f7dba664801377020aecd8e88137db73989bebd0bf6ea1afd22e49","sha512":"c878f6f6286c5bcec0db273af95345220fc1df4e7c234ed1dbf55b63b04a4f3fb54aa518babdadcfad503b21492c733afc122f892b0d9d8e1b5e42e24a8801d1","ssdeep":"384:ubkp7TRYPSZUpPGaMqYYuka2g8BoTh4kQlb:usdwSZAsqY97CGF4H","tlshash":"8d62717213a4d7fda6c18b088974204b37b5948a76f4e1ecfb2ba686af064f34034d75","first_seen":"2024-12-02T21:43:54.586815Z","last_seen":"2026-08-31T09:13:27.488893Z","times_seen":1911,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":9,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.104Z","timestamp":1788167562104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35156\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 30 Aug 2026 10:12:16 GMT\r\nexpires: Mon, 30 Aug 2027 10:12:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 82826\r\nlast-modified: Mon, 15 Sep 2025 16:30:01 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35156,"size_decoded":35968,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35156, version 1.0","md5":"062c1f2aaf2d4de07ad2a2f21c17ffc0","sha1":"3fd1f07343bd33a53cd374f7f107dbdf9effae03","sha256":"d5bab8e28732fe3d10dcef4f77b9c248605bbb2a87d289a2539251ceafab536a","sha512":"7ab522d8bc41128be5a15f2cb91f851f6dc5e437afbb90e6191bbe63d9b94a35911f04701fb2b291362b2ae0f0cc639dec2d15e53928afc5769590a2937e81cf","ssdeep":"768:is48okTArkNSgZJAf5jkRcaUNt8wrNPCbJktQV+n+NUB/wo8IEH:5hNTtNSgZJMjkRBUMwrNPC9NV+n+o81H","tlshash":"22f2e172c3787192ae0985760d60cec8986bb2098f7658b0143fdd38ee45345a3f6e6c","first_seen":"2025-05-29T19:30:52.507782Z","last_seen":"2026-08-31T11:36:02.884491Z","times_seen":25469,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6763407998a67.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.254Z","timestamp":1788167562254,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6763407998a67.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2388\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-954\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2388,"size_decoded":2637,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"965254fb7225bf730d7c008f68bde408","sha1":"5a922a2eaa265b5f4e853b358ade3af91a7d9078","sha256":"1ecdb87b347c5dc9146530831e8e9ef09444c1dd6c3016cb62de3217a5f26ae8","sha512":"652d30b2fe9860a18cb1548db71a700c9b1600bbc4579bc801a9a315726e4625c37332be4e4a6aed041b5e2c727cee1702a8bc961be93a942033f94f3409f2af","ssdeep":"","tlshash":"8b411ab464934f7ec7c25603ad6b0236a08d186a5091cc78a932fd3ace0e632fd33c94","first_seen":"2025-12-02T06:53:41.367985Z","last_seen":"2026-08-31T09:13:27.49076Z","times_seen":817,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-63241a5aa89bb.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.924Z","timestamp":1788167570924,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-63241a5aa89bb.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3300\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-ce4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3300,"size_decoded":3549,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9e7efafd4789ff452e7a74cd478f2e8c","sha1":"463ccea2c575438027f21076701ef0e5ab5aad95","sha256":"a59b9e3fc40d83f5fd6a9cbfae7048be35d4552509c63dad6bf043d486ac4ccc","sha512":"ffe9449c0fb06085d2582d63f7d34f404312203014848c495a6472928950bb8dee810eb8af364c5c298127de08ae1ba3d8f4812e0c4a5d6349d3fba04c05e921","ssdeep":"","tlshash":"1b615da4ca5ddf60e4d9573050f0c7c2e538b7160e876ca406608187fb576f1359ed0a","first_seen":"2025-12-02T06:53:41.576327Z","last_seen":"2026-08-31T09:13:27.491755Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-618e512aa95f0.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.368Z","timestamp":1788167573368,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-618e512aa95f0.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1526\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5f6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1526,"size_decoded":1775,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50b32f83ec054a4ac21c8e5fdf1832cd","sha1":"6cba2f1f99519616907fd4e2db70ba96597d598d","sha256":"b5974d3fb254902894b7a93e2476947c2333e6d8dda84144e45f9ee4317ae00d","sha512":"6eaf2236fa4b550b4cc894d8deea2458fc8924e1f540dcb60d929419591d97dfdae92058e86d1a1b0ef92abc0d6ec2f267eb61ee0f48f9e5de06e9a788ec5c7a","ssdeep":"","tlshash":"8f310c2667ce86f0d0055973fdca69bd2832b53b29110f0590023bc9b8f59c341f50e3","first_seen":"2025-12-02T06:53:41.630036Z","last_seen":"2026-08-31T09:13:27.492622Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c5aa756edb33.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.509Z","timestamp":1788167573509,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c5aa756edb33.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1748\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-6d4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1748,"size_decoded":1997,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"919f3d8f8d87147151f3f059dd80e0fb","sha1":"ecb9caabd9eb885c5d3de1d76dce7fb431154367","sha256":"781fc87e601309d0f5bda6f287178dbdeb322d82b5497fd4141a6259f20a15ad","sha512":"1b5e0566b2a3721b35eaba753d42d3c773ac8594367e75292dfa9bb0c1908738203772e56a95210283a63de1d4fcba98d08e3b308d9044c530be3dc4ffbc99b2","ssdeep":"","tlshash":"d3316dad11583214940fbc5d237fc927b8c01b569ac14c924202b651cdc3c0a8fcf1f3","first_seen":"2025-12-02T06:53:41.420707Z","last_seen":"2026-08-31T09:13:27.493548Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-673a1a0a45d31.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:54.383Z","timestamp":1788167574383,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-673a1a0a45d31.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1488\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5d0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1488,"size_decoded":1737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b81a64f0de0fc3ce07154abd6ac99a33","sha1":"f9cd8ac19a08961a46c74191c55578ce61a119f9","sha256":"9a5b2221572d56271b3bf8752b6e481634e4b1c67bdd6a959d770b7e464bbb88","sha512":"a0cfd8f7e470c52bd4d22467acb74cc485e384ab5d0d4c16332b86708f413ba3c9e277d7521b33d470526a261754a5561a5c3b57a39082c2a076980dddbca930","ssdeep":"","tlshash":"ba3119d18305c341c31630b7fbe04d4046a7a9250145ee732f437302823f85d255b24b","first_seen":"2025-12-02T06:53:41.468118Z","last_seen":"2026-08-31T09:13:27.441546Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/js/common.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.368Z","timestamp":1788167561368,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/js/common.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 112763\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-1b87b\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112763,"size_decoded":113028,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"4bc52296e6d4e5eead9711eff2ccce42","sha1":"e788c13fd41ed1743f76141ba91418daa1089525","sha256":"302f3a1f2c87877874c0ba6378e0ee7291d924528f9acc645451ca986e6123fe","sha512":"e2c56ade3c344fb7c0da370a4e6e50b6223bc434d6a5587b9f74bb62f8e4c52bc27a842614e5265981be8746f94629e9f60a25243658ce361f6eb6c461c55d6d","ssdeep":"1536:+NkeeewAzJ9mEriwnC4lyPc/fqnW19lp2DT:m3kaqnW14v","tlshash":"a2b3604b6ae23434a627b17a8e2fd5093a35500f1e8afd043d4c92954f1c93c66f9fe9","first_seen":"2025-09-24T06:54:00.354154Z","last_seen":"2026-08-31T09:13:27.494456Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":67,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-217-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.163Z","timestamp":1788167562163,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-217-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 90508\r\nLast-Modified: Fri, 17 Jul 2026 11:39:30 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1472-1618c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":90508,"size_decoded":90759,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"db7e215ef8e4c06955473fd383bcda64","sha1":"2ee927fcfd7d001d5071422d9befcea0cc971d59","sha256":"4299e403a4bac51c0bb856a50ca3003ace2b7125b557771e44c98877265a98ff","sha512":"d820c51846fb469f0d803681577a6c77828aefaf86c490811ffce71028ea0db1cd42b17adaad40510ce7192f71f84c157a98ec6a29e51cb4f51ac5231d9f3012","ssdeep":"1536:FrWKpJiphTL9Ziu6u9bHz3jj81VIJp5x8F9385AjYw32b++7wouxPPcRD5uYkZ:FFJghTL9Zv6u9bYqp5x8H385YYkoE26Z","tlshash":"819312f3e984cc23ca9bf295355b5a5eac332b56441835e0fe49c5ec350943e5a62cac","first_seen":"2026-08-10T05:37:52.195319Z","last_seen":"2026-08-31T09:13:27.495345Z","times_seen":1852,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-65732c6ee85ca.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:51.698Z","timestamp":1788167571698,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-65732c6ee85ca.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 902\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-386\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":902,"size_decoded":1150,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0728670bb68b22024040eef65328842b","sha1":"ae9bc091613f75e2a7d8c42b9c1911b1d432efe8","sha256":"ba503618ecf41f89f025d747ef6a7adca8f44ad8f42842ef0f0628c3ee4e9bef","sha512":"7b857c7ae7bce2937f4f0d93f7a246377029d2ad0092779689f33bc4e754545cb69caf2230fc62ace3faf8c6b64ea1a85b26506025eddf1f0cc7f8c41a6f3ca2","ssdeep":"","tlshash":"a511eb0147cb7935c90f040610d1b60817c91228c3b805d73dc8db7d17dc4676bf264a","first_seen":"2025-12-02T06:53:41.547081Z","last_seen":"2026-08-31T09:13:27.496241Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c794008b8e2d.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.782Z","timestamp":1788167573782,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c794008b8e2d.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 802\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-322\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":802,"size_decoded":1050,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0c9e9713ab205c4120254b674965c736","sha1":"7f138b25a6002a390f05456b5c921dd7e93df5d2","sha256":"9925c11536e756e44672ba681ac574109fc902b7ac56e74bea4adfd1f12febe0","sha512":"c3c69db3c632f9c2647db5a1a6c75a42ec36e6395f824bc7293ab14688a94624519eb6c74615dcd9309699f26383a166522753ff2982564823c8c2fb289dd1d2","ssdeep":"","tlshash":"a1017a7ca781c43b4026789d577f8385f41292ffd9ac9f910b093d4f26582171a44ef5","first_seen":"2025-12-02T06:53:41.592303Z","last_seen":"2026-08-31T09:13:27.497144Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793fb55ad73.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:58.817Z","timestamp":1788167578817,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793fb55ad73.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1196\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4ac\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1196,"size_decoded":1445,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e3882dca53b3faa025721ddaa1d7b10e","sha1":"280e9df88282e8a1e75fcdf904a0594358cd9a9a","sha256":"ecb2fcc1d2ace463d9928e9340046877ff6ce5ee33e130797c3a96966120c2bd","sha512":"5bf1f26e6ba1967cf6899571b52c459f594aab962eb64fac767d8d231109ba6599b4ab93087466a9898c44fa9fd18552d3f7a6d013db84b10bec0b2890280249","ssdeep":"","tlshash":"0c210ae4d7559cd0fe9c4e141008b2c55cc620821b774f58cb630de00af84f2547df68","first_seen":"2026-03-15T14:19:42.989084Z","last_seen":"2026-08-31T09:13:27.498022Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67531005581c2.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:01.568Z","timestamp":1788167581568,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67531005581c2.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 706\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-2c2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":706,"size_decoded":954,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"08f164ed958c6f75e319d723f6645b72","sha1":"8171f94b591b5438181c5f9e7e9bbb24fff62acb","sha256":"d5f9ddba4ed5f8cfb8fdfc03477738302d5a7446613b5098640268906a3bb93f","sha512":"33f7f857df75c95e9bf93ea1c4ab3f25afdacb45decb99afab85d44c2b509932cb0ca8c45db5c9e92e0eec49a268cc67a01b7468ea75695002a9a1f0f0e38a59","ssdeep":"","tlshash":"9f0144dbd3927a86cd3ca370d05d34e989ca98b1983e97703cb889713d11c5492628dd","first_seen":"2026-07-12T14:30:59.965698Z","last_seen":"2026-08-31T09:13:27.499056Z","times_seen":1780,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/clock.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.423Z","timestamp":1788167561423,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/clock.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 21745\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-54f1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21745,"size_decoded":21995,"mime_type":"image/png","magic":"PNG image data, 147 x 147, 8-bit/color RGBA, non-interlaced","md5":"ce66f683be12abff5693b6eaec9debcb","sha1":"44f180e4a3c9d279531cdac75b8e17bc1119b2df","sha256":"6d1ad21f0ee64fad7701271f35b4f478babe105e1a6ec9697dd7949c8fbc1b90","sha512":"cc572a7e35f581700f96ab2a9d62023ca577adaf60097aed412cf0a40c8d125bdf64f829d68317e1bca42eba0951513c8b1d4646544aed9750b2711515e23f1e","ssdeep":"384:l7PAS2jVWqEhzNXNGW4oc0LCp8HHVi0jxi1j09u5BLDNK2UiEG7777Qz:l7Pr2xWqElBNGWQ0LCpMPi1jN5Sk7776","tlshash":"d2a2d0085af85cb7e3d849612c266aac231f61e278cef099ec91c041ed975edc70b8cc","first_seen":"2026-04-14T00:03:43.745259Z","last_seen":"2026-08-31T09:13:27.499971Z","times_seen":1857,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":354,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6763343d9f190.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.421Z","timestamp":1788167569421,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6763343d9f190.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2062\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-80e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2062,"size_decoded":2311,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0728b164f01953b0984a9af539f9e35c","sha1":"e8f1849332274796f8dc566a7601da3471a7d5cc","sha256":"2b1f46c7b8b5c7096d9128d074bcd1de7cf2591522ec60ba396e3cef8890a788","sha512":"21ffd7bd4a68aa3315d287b43c156b6c7ee131395d8813af4be5524c4cdf9084cbc24f12a56428bb09cddf19acc0ec2428ad1e85a7c2324ebe02679808055c10","ssdeep":"","tlshash":"de413cfcc542383b3722285aa73dc787460a7691d7a11b54c47f16728c10b541f36b2d","first_seen":"2026-03-15T14:19:43.112733Z","last_seen":"2026-08-31T09:13:27.500851Z","times_seen":847,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/svg/icons.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.636Z","timestamp":1788167561636,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/svg/icons.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 49298\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-c092\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49298,"size_decoded":49552,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f8c8144b2fd9a91185df142416f293e7","sha1":"160ea7842193844549054801ccef2bf1f0b493f1","sha256":"0a3e7be624c97a49bd076a6b91c3bfcab17d16eb91fe2979b03ff59ee66d8c9c","sha512":"addca60d370779f136e4c5dbef9986f47429a942e4e7cddf6feb5bd9a01a18516a090d7a67d99533a162b36ba30b1bdffd836b9027453c3c8ca105c90c7136cc","ssdeep":"1536:eTRVIfVGNVpIgI1nRLYWpLBjceHD7gP1wq:TL05","tlshash":"60232b7653f043f89ac447184bb8186439bd10ab79b1d1d87f5f8b849f4b9f6a02cea1","first_seen":"2024-12-02T21:43:54.592761Z","last_seen":"2026-08-31T09:13:27.501742Z","times_seen":1867,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":31,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://casebattle.id/ws","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:59.146Z","timestamp":1788167579146,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://casebattle.id\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: H3Of3dBnBgTrWar8QAJPRA==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:59 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793de720dbd.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:01.555Z","timestamp":1788167581555,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793de720dbd.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1250\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4e2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1250,"size_decoded":1499,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c106cc5438739160b51606fb96e143e","sha1":"9296ccd587f06cb0836b0410491ef76a79278171","sha256":"6a34459c9c9d1d94bff609f3d60ba81d448e2a78d6214675869e9a13580a5f36","sha512":"a26e8980e3e4e5e00e679654b4ff1ce8152479995313f3fcf4043a1bde957c3d878b947b01cfdf4922d0f8be59b2b89118ca3cdb40dae2da5c96f23bac133dc3","ssdeep":"","tlshash":"6821eada61799d39ed44e320d489154d7924e818c1c3960e392d14b5324ec5873ca988","first_seen":"2026-07-12T14:31:00.013819Z","last_seen":"2026-08-31T09:13:27.502618Z","times_seen":1813,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793acc91a74.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.418Z","timestamp":1788167561418,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793acc91a74.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1170\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-492\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1170,"size_decoded":1419,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e1be75b80eebf03b5f7227ff399b1dcc","sha1":"fcfa0bb49f82c3e9b51c0254bc9669231dd22890","sha256":"95a58a88b4f58eb2aa19ace539d1cc33cff8928b92840cf6362c08364ff7f19b","sha512":"5901582d2744a388b72eb28d04f5c7a5ae8c741667a42dc1b9f6703d0a7821a231edbebf29f7b55fee86cbe55d68efa32f462e88eecce718c3730d72c65e746c","ssdeep":"","tlshash":"aa21d7a753f04d81f135b08a52ef5932a047c3796095ce92c44a897af0687795093828","first_seen":"2025-09-24T06:54:00.352722Z","last_seen":"2026-08-31T09:13:27.503566Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":340,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.682Z","timestamp":1788167561682,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Aug 2026 23:02:32 GMT\r\nexpires: Wed, 25 Aug 2027 23:02:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468609\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-08-31T13:20:21.230658Z","times_seen":15274,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":34,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/themes/summer2026/img/case-box/overlay-hovered.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.014Z","timestamp":1788167562014,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /themes/summer2026/img/case-box/overlay-hovered.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 17697\r\nLast-Modified: Fri, 31 Jul 2026 22:30:49 GMT\r\nConnection: keep-alive\r\nETag: \"6a6d2219-4521\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":17697,"size_decoded":17947,"mime_type":"image/png","magic":"PNG image data, 251 x 292, 8-bit/color RGBA, non-interlaced","md5":"6cb6fd63c45cb9bc0f8936cd1c6a2960","sha1":"fc62961455100d354be1b661ff3a53a36e44d61a","sha256":"834cd2d62ba68ee56368965b5abed3ed845bb05997824a64a13c55611da6c758","sha512":"9c7bea0ae574e713ffaec5f825a4b3760aaf9e5623aa7883ea514938b8bec5f3a72fb462b5e7d08ebd10e554f4118082ca27220dc11a77de8fd2aec1afc65c22","ssdeep":"384:dvULLY8qgtWP3VSEN1Deu3Zo7FPaiJC8CaGwmxfTkFV:SLjtWvxN3Zo7BaiJGPfTeV","tlshash":"ba82bfd9a5c509a920d3e426056daf20ec914ff066df25d24691bd6b32effe20c791f0","first_seen":"2026-08-10T05:37:52.081014Z","last_seen":"2026-08-31T09:13:27.505374Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67531148c650e.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.780Z","timestamp":1788167573780,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67531148c650e.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1130\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-46a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1130,"size_decoded":1379,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7e9fbe5f205b9fdd53c947ea41d5549","sha1":"fdbab268c187b2eef5394cd78cdbff925257c342","sha256":"9822d590d61bf38884867cb2957049f7eb7935e5fdcc9a9625b953e8441c4d6c","sha512":"2f615de65031c1e42f38303000ad5ed1135359318c2452eb863b05e146f28b5919c23dedacccb0e4f4aa2f6365047ac3372ddbc929f7237d7a79c85ca448bcb4","ssdeep":"","tlshash":"ca21c6068b8a94e2cdcfc234c428e3eba8135a529152b8146e4e785a31712061f9c2aa","first_seen":"2025-12-02T06:53:41.449584Z","last_seen":"2026-08-31T09:13:27.506255Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-63f0913f827e5.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:54.472Z","timestamp":1788167574472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-63f0913f827e5.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1502\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5de\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1502,"size_decoded":1751,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0652c4b02d60adaaf3f4ecd1fe68e809","sha1":"3170bcc01cd75a999e0d9878d4d29a2881ceef2d","sha256":"40ef0c23fdca042451a63df90c0ea4dc97d3e56cf83008d802af99b507dfd836","sha512":"e59eebd0e82cfc68fb466f922dbdbd7f87c0f95dc6014f7e6df1817be104d685ec75d43239adabd33b66e168b2fcd75ddee82001607d5125f60477cd4119e86b","ssdeep":"","tlshash":"0731b74a87ee9432c19675fca60dabe064db999f0c2129120a73b271c266b151534975","first_seen":"2025-12-02T06:53:41.32653Z","last_seen":"2026-08-31T09:13:27.507134Z","times_seen":1859,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5fc8cc320162f.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:57.792Z","timestamp":1788167577792,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5fc8cc320162f.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2166\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-876\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2166,"size_decoded":2415,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3b82e230fda6d7ff94ceb0c3769ab9e","sha1":"ef7e9bc459051cdcffb7a86ab905f27d6cf0c9e8","sha256":"8fa868d8aaf4cce73cf417d08677f645ae074af86a7fcf340984cf5bd396a4c3","sha512":"910a84bc257cbe9f7391ca2bb150294de3148c91eff376aa85940ec1b733d88d2bb16fc14252605bfaeaec7440c8406763c129a83a26ebbd769f78222954b11a","ssdeep":"","tlshash":"4b413c5ad9c6a0bdc3d848b7bd28f350a0a915a2366c06f661df07771552458902d132","first_seen":"2025-12-02T06:53:41.323067Z","last_seen":"2026-08-31T09:13:27.508037Z","times_seen":1857,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-60a0c98223b02.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:01.573Z","timestamp":1788167581573,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-60a0c98223b02.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1250\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4e2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1250,"size_decoded":1499,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8140636c408b78896d3aa5400b763f00","sha1":"b3e072172a93d00cd51ea16ee8914488276bc3de","sha256":"7fb12347e56ff96fe42fb314216033b3ffc4b715b22c6d06536c074e151e2296","sha512":"6c5861dfb50df3c3523ffcf4ffcff2c0c1aad7fd8e1d8665586cd1a2f52b0f453a7e7ff2ea89587787b3074fa55f56af9914892371420f077be7bdbba22c9383","ssdeep":"","tlshash":"e021ea79074544e848a98993f5b8e7b7df9661c0bd12f6c03427d510c24327e7123747","first_seen":"2026-07-12T14:30:59.91813Z","last_seen":"2026-08-31T09:13:27.509069Z","times_seen":1780,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/payment/footer/mir.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.427Z","timestamp":1788167561427,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/payment/footer/mir.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 752\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-2f0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":752,"size_decoded":1000,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"386d361d67eee9bb95f88fc2d15ab524","sha1":"297c956b751e279da7fb82cccfd4461ae25b0847","sha256":"d2c8506e6d8e4eecf4f8a0e4b75ec996d1991d4e9369a815959950cec4b23903","sha512":"6f9d3d979116b57140703f53e7892dc76253e7fca92f3ee16694f8996db190783bb52232592b15290efd14ce32c0b7c540220d24124d760e59595175a18026ff","ssdeep":"","tlshash":"6c01b568fd73bcf2d9642467920a96320e4508b9a7c4c30e1a221cf1cad520f2bc8a2c","first_seen":"2025-09-24T06:54:00.292376Z","last_seen":"2026-08-31T09:13:27.51015Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":408,"timings":{"blocked":375,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-185-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.181Z","timestamp":1788167562181,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-185-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 18842\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-499a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18842,"size_decoded":19092,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"99d522e2f77c678bbd4a6f425fc84a7d","sha1":"a8701fae7336910607daaf4bb95543e863328150","sha256":"aa57e518d9d802b5908cf95a6aaac8745bd6bbaff20cc16ae6fa75d500731746","sha512":"ca0493a36342c9591165ecfc10f7564b5a06c8e6444b56532a946a6b98a5f257505819ce75297eb907863655c7a3dcba158e9930601ac4fd121641da6eb5739b","ssdeep":"384:F7kImgj2QvjUXN8xBQTVL2flvXBbCkL4tIHE2uIBBriC+mc0UCMjb:CImgj2QAWxBQTV+lvXB3Lkv2uKi8ctf","tlshash":"9782be912cb1f5b4db8029966b089d253b60fa5d301ada9db9fd901b514c7bc8f90c90","first_seen":"2026-07-12T14:30:59.897946Z","last_seen":"2026-08-31T09:13:27.511099Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":104,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762de60a7122.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:44.732Z","timestamp":1788167564732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762de60a7122.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:44 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1962\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-7aa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1962,"size_decoded":2211,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6d02da1daf36304a8ee426ec4dbf9de3","sha1":"d1e16622b3b1bd9660ddf54515ac03e2f1fc5b80","sha256":"baa08d245c37bd2d1fd9bd8d575726e7e361504b69044c4111134f14582a58d2","sha512":"0498bc0fe89b859dc341a1a6845413ca095a47f8852568a85646a2af2983e8462d97c3c18db40892ff5a625ae9c22b4e5b6a1e62d70289fcd52a9415c0baea16","ssdeep":"","tlshash":"2e414c41e029c5b957e98fbea07208d2e10d707d21ce05e2d1ee24622ce43c277d3327","first_seen":"2025-12-02T06:53:41.508527Z","last_seen":"2026-08-31T09:13:27.511931Z","times_seen":1546,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5d84fd097ebee.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:46.756Z","timestamp":1788167566756,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5d84fd097ebee.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1896\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-768\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1896,"size_decoded":2145,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"185631ced2317ef0bde183e2531d62a0","sha1":"63cd370ee8e7a344d2fc9f4dcf7061d0a727ce30","sha256":"778a4a4cc195c12ce71d894fd314de5ddb17a4ac46fc73a3e491d43a5a9798ea","sha512":"e475fe88404f3e9e91a3495ec9b47c174fbc2c1e054b9710441445f67a484ff80e23d0980f3992b5b1e82f54d8cfa1a86396f31e0aa38f297bdae03ccac5d71e","ssdeep":"","tlshash":"964119b62b5ccbd1cdccf954c794a3d378184e15e8be192e61ca2a966c1c04322070b1","first_seen":"2025-12-02T06:53:41.534621Z","last_seen":"2026-08-31T09:13:27.512906Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c7948e55d822.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:48.741Z","timestamp":1788167568741,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c7948e55d822.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 940\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3ac\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":940,"size_decoded":1188,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"46c4d28601b78b4fa0540f436ce3ca1e","sha1":"ea4b413e6deb050bfdfeaf805f77e6716f192db3","sha256":"7844ccc83d4258311abe83fb117a05535b4dce3e2d1126ffc012de6b54ebcdfb","sha512":"ebf6ebc9c3620a418e081d2f016f5aa847f0a69566689edfd808ac140bf58e278815bac95d99ebc58c8906f699fadd4468359cc55dc34897afbb718bfb6fef27","ssdeep":"","tlshash":"9a11883dc7d802dac959d46964f13f2295bf43e5adb25d5827244a6c0c152b901a60e6","first_seen":"2025-12-02T06:53:41.310403Z","last_seen":"2026-08-31T09:13:27.513819Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6761c611350b1.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:51.464Z","timestamp":1788167571464,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6761c611350b1.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1720\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-6b8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1720,"size_decoded":1969,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e831e43bca1e2457360c72743596c164","sha1":"bb88475f005cc4a2a1a920e23fcdb8e42a7832c9","sha256":"a95911fc048fd10ffb98133a945f6ebdb73b07a2e87fc9ad9b19e1e4419f4cd4","sha512":"6db4cb7bccf34b0334df7ba64e0c6613f7b53f093c47865a6a0808479767e76b25d890518f3fd51aca4c3f96fadcb92a393c714a9d54579ed8a543269b99fdc4","ssdeep":"","tlshash":"633118a9524935058a72990c5159f888ef0fb8661cbe8ea50c7d2052437ed09e8633ee","first_seen":"2025-12-02T06:53:41.56549Z","last_seen":"2026-08-31T09:13:27.514646Z","times_seen":855,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793b034fb2b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:52.001Z","timestamp":1788167572001,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793b034fb2b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 982\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3d6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":982,"size_decoded":1230,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e9b1f1da43090bfc7df1fae6300e8738","sha1":"8dc484c18ec458679803e1b88d95d95de66267f8","sha256":"60c53b5dd7d197ff43f82b2048574afab526a2c96bd5ebdc6c28911bd0ca9012","sha512":"ae26cfd522010e3a6c475d77ca28d9c53c4a3d319285536cd072cdcc55af9461ea98ef039afea6244d6a1b908de20665ec3f747a5657305d0149caeb73c63713","ssdeep":"","tlshash":"2111c46ac3be06c0bc05ecd5547a2310471b0259a8b8ceebb791bed30bb1219087aa13","first_seen":"2025-12-02T06:53:41.359559Z","last_seen":"2026-08-31T09:13:27.515752Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/css/style35.css","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.136Z","timestamp":1788167561136,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /css/style35.css HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: text/css\r\nContent-Length: 379649\r\nLast-Modified: Fri, 31 Jul 2026 22:35:29 GMT\r\nConnection: keep-alive\r\nETag: \"6a6d2331-5cb01\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":379649,"size_decoded":379900,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a6851b7bd06e6db74c9b4ed8775a8da6","sha1":"1a522112f7d539a1a778dd3255443bc91652fdce","sha256":"516498cb45b6512b7822bb2c6cee536b94e343be64559bd2e784e58a2456f5a5","sha512":"9b1c2877108d9626b605932fcc5d3c2dcf5620291b5c8fffe5e96f1b70532099d091491e17d5a46253f259e85796a32fddd79d074b0f467fea8e2d6eced29c8c","ssdeep":"6144:OSezxZuPmQE2T0OZ2A3IbSSZG22SozM2CQl8pM5AfOh5lJXHfHRGz52LvPeFHt+h:OSezxZuPmQE2T0OZ2A3IbSSZG22SozMK","tlshash":"5784529b5ab306546a1b852cabee5f14222cd053c50bfced37cd914d8fca6e442d278b","first_seen":"2026-08-10T05:37:52.202128Z","last_seen":"2026-08-31T09:13:27.51676Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-156-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.183Z","timestamp":1788167562183,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-156-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 17289\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4389\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17289,"size_decoded":17539,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"450b8c59308be1e112b4a1fa166255ac","sha1":"cd0fe5adcb481996d2b6f9431365cd2d698754d5","sha256":"50ba5e740884086d3bf7b06acaaee019df726f28f7f709418479f2b1ce4dbb8b","sha512":"7432c62d83766809a78e8ad59b3a3ac655e5c77f698e89d1a4995668062808519c71f3d26d0f07096984fde2f68e05ec51e62ea4fb823f2a463bd88bb48aaebc","ssdeep":"384:FewyCGR7V7NBzPpFr67vOPv9bQLsgRebVUhMgtzAzjB+9r:RMbBzPpFmj2FkoiebVwFm+h","tlshash":"0072bf759a7a08e91d8012cebd6ce2ae4b9b200d863e4470d3e25e94309fd5fbdc5c27","first_seen":"2026-07-12T14:30:59.862714Z","last_seen":"2026-08-31T09:13:27.51765Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":123,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-671ba18424bbc.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:56.921Z","timestamp":1788167576921,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba18424bbc.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1040\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-410\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1040,"size_decoded":1289,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"baf8ed9eea5c94d36927fc786b25abeb","sha1":"d5e34f1866d1257e5987093585cb303bab94ef4c","sha256":"ea1b773d6ed894550d93d40a8df3ecfac2c8cf0b416f153c8be4dc716d89a670","sha512":"e2e0076a60a5948cb44bfb76d53f1d0f9c16f8f8dc8bb48f880ad11d78e18cfea334810aef7989dda2b5477ccfcb1ad8b51d45a0ec2da79919dab9809feb6be1","ssdeep":"","tlshash":"2811d89a0ade8ef2f444d9c8e072be0cd34142b74484ece44b0b422479c82276a9257d","first_seen":"2025-12-02T06:53:41.555585Z","last_seen":"2026-08-31T09:13:27.518746Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-671ba14329135.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:58.864Z","timestamp":1788167578864,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba14329135.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3082\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-c0a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3082,"size_decoded":3331,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"066ecb22c2967a74e52dc0a556f935fd","sha1":"09b3533cc712ce004565181c991aef4327a611e9","sha256":"44eacfba87248e8635b5263f9486a2785258b4ea5a45442d642f97da8788c332","sha512":"17494886b6279b02620538b22911f79cc78420ca83ad3fd60a4809b414f08826c3ba6a9d41ef5731a2c4eb800ace992ed15fe270ce96d9e79f2c0542c0ba30a3","ssdeep":"","tlshash":"82514d831b302f7ecf9d26f954e08d2eda3d7d71c953efa68242919d770a8c15254623","first_seen":"2026-03-15T14:19:42.991925Z","last_seen":"2026-08-31T09:13:27.519592Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/logo-bg.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.646Z","timestamp":1788167561646,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/logo-bg.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2630\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-a46\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2630,"size_decoded":2879,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"30843874f24f22b0f362bb05d37c79e8","sha1":"5c2e7950d0316cc50b2c1becdb491d6f7d6c8c98","sha256":"e7496cdb9c9d2b2277adae588c35f955a50e2dd6d93c943c8df0a567bf65e38c","sha512":"55e62d7746ed2d2d9a368fd6003b463b531838e6489cd646e79ca7dac8bdc414ebea59010a1a61bc1b4e78422d16d2c30f5dcd60b558c7200fdf05913805cec8","ssdeep":"","tlshash":"87515b8784899ad0b07d5af34a6f7e0e43c8c03a8b513be0064eb7b061e00930a06348","first_seen":"2025-09-24T06:54:00.348191Z","last_seen":"2026-08-31T09:13:27.520489Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":57,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793c413d593.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.507Z","timestamp":1788167573507,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793c413d593.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1538\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-602\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1538,"size_decoded":1787,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8846a3642520df7d2fd7873ea2f7a9a2","sha1":"20fd19cf2593f5ac826af930e92e744152dd4521","sha256":"22a1f6d51213c508f47084d40ec60049afcab596e8862df3b126517e89181269","sha512":"04e3a1fefcd06cfbec7c9a510fec3028bf1489f47b84ab58371a96c900ca47a1f0931d28d3a6865e6efeb26e2309636446978bfa36878f97de2fe067762c1945","ssdeep":"","tlshash":"bc31e81a2030e6905c367e2160fda786ea7340d0d1f69e9b6a466be0cd8a371a922459","first_seen":"2025-12-02T06:53:41.520634Z","last_seen":"2026-08-31T09:13:27.521426Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793df3c3ba0.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:56.924Z","timestamp":1788167576924,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793df3c3ba0.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 942\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3ae\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":942,"size_decoded":1190,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8f81df5a8b73f4009d8e48b55133f4dd","sha1":"948479ae6e336fd6132b4cfa4cf90c1f044ed8fb","sha256":"e6f68fd72fdc46a0ca0f038f4d8d0de9fe00d48bbd177a2d9a8abd4e9d759c98","sha512":"1e0437e2c85af3c071bfa839ea6415c84d46a30baaadbdde7bd527ecb5274c7f038a283f98f0bb41b478c943ea83e85c0162763e7fd4257d5a979eebff9e81df","ssdeep":"","tlshash":"7511883ddbb459878801b545046cb2512ab1093a5439aa47f13c27f09198b289336559","first_seen":"2025-12-02T06:53:41.38407Z","last_seen":"2026-08-31T09:13:27.522338Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793fbc62a1f.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.405Z","timestamp":1788167561405,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793fbc62a1f.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1316\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-524\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1316,"size_decoded":1565,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b1b8ec334cd43cc9ff532fe33522a1eb","sha1":"d6a8ba3c8d580662fdd4177455de93f4c256100f","sha256":"ddfb36e9d849939cbdb814bec2997b2501f1d15a88e996a86c17dc8e7c101a4d","sha512":"5abe52d393ceffcdf5990a2a495986f1207641f6dc3ed441d1eeaf4477fe557dacf9c0638e8a6465b0b2a28e97627b4f5dd3c26211944dfe715bcca5246a0916","ssdeep":"","tlshash":"5b212b12e200d4aff80ceac8104611934f82fd314492c8d8e27d9411ced2c5987613b0","first_seen":"2025-09-24T06:54:00.360997Z","last_seen":"2026-08-31T09:13:27.523192Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":229,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-159-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.193Z","timestamp":1788167562193,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-159-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 88168\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-15868\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88168,"size_decoded":88419,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"9b6d373bc3e9c550c675dd5e074d521a","sha1":"24aa42ca75d06cc66608d67d97c319873ccfcfd9","sha256":"1dcbbb8fd3783117ea6cb5b5c047631e8aa41dacc142985c385de1ecb2d5d8b6","sha512":"fec6de7b68604701165b84c2b492101a5e8cc8dfb792b1aa4968d21b66e4a42af4a8b5f1a24ea68e25585fc022d86c1a795ab4eb844a719fe9145dbb81e11ea6","ssdeep":"1536:mDOSTI/rlYS+iMLgRcVXWaJJjSQaOIOkfO4Hpp/ZkoG9wR:mZLS+gqVzrjSQaOIOwhNY2","tlshash":"05830235cb2255dccd098b28d88b374c9a513e9726f92a7ecf9063d6945cdb1743da30","first_seen":"2026-07-12T14:30:59.81Z","last_seen":"2026-08-31T09:13:27.52403Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67611b7c4654d.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:51.700Z","timestamp":1788167571700,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67611b7c4654d.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1712\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-6b0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1712,"size_decoded":1961,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"befc701489a5c1f7212f8893f172f7d3","sha1":"49f4ea05cd8a6b49a84f5c81e8dbd70beaad512c","sha256":"1c2866e170c090ba795ae7604e33e845afb65b9704a7e165fb988e61d03b62e1","sha512":"25fd11e3ef7343bc80052687cc50848339456b446585f07ecec6f8de34bd7a715222be3fd40cf30870efff593b4af7758a742052fe9768d958f14efe80358390","ssdeep":"","tlshash":"5b313d561404164792014af35204fe4934e4cf3795976c1cfba96cf29d1f4b9d351e52","first_seen":"2026-03-15T14:19:43.169099Z","last_seen":"2026-08-31T09:13:27.524824Z","times_seen":872,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-671ba1df374ae.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:58.851Z","timestamp":1788167578851,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-671ba1df374ae.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1148\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-47c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1148,"size_decoded":1397,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d8a485c8189467e387f1c55849b6cd44","sha1":"21d88b4f769ac170d89200b08ff2bb9f0d94b7be","sha256":"813061ceddde2389a8e7e3e2357439ca9fa164df8288ac805bae1a882673db17","sha512":"ea9c6d54608a3c44081a3a1e63e397343fbda2a7e2f7e2636961caa1f930a5bda0307546cd456cc72367685b8ba1e3f24ffc199f62b5fbe19604f0d22040da38","ssdeep":"","tlshash":"4521caf61bb3a8fde74a081a466c9508099549288144bf00f6f98ca53f947c1758b2f5","first_seen":"2026-03-15T14:19:42.862176Z","last_seen":"2026-08-31T09:13:27.525653Z","times_seen":1855,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Open+Sans:300,400,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.483Z","timestamp":1788167561483,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Open+Sans:300,400,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 31 Aug 2026 09:12:41 GMT\r\ndate: Mon, 31 Aug 2026 09:12:41 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23176,"size_decoded":2503,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49148aa6aa83030c8107b048340b6d45","sha1":"0120fa4085b32b021b14aeae199e5dfade9bbf78","sha256":"c9232eb823d220300177aba31f7efd6e78e0ccdef46558336f8ede5a6efbfdc4","sha512":"2e5514ec03270ebe0019fbafead0722e2ab5e87b3ddc3e2c6a2beab2ab4ca36d6fa22835e6a88827eaba8f0fc9f0819a94e69fe3049539a389076b6baa8521fd","ssdeep":"192:NCddw24WrqKnbqGIwV4Mrz7xCAAN21/rqbnbqGIwV4RazqbCuuH2PlrqxnbqGIw3:0AYqY4tjXqY4ahhqY4tU8qY4Z","tlshash":"3ba22ba00027185063431de623de7e34ee0fa2657048d0766bfd8b9beedad6963b435d","first_seen":"2025-09-17T06:09:26.673739Z","last_seen":"2026-08-31T13:14:17.018578Z","times_seen":19193,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":16,"send":0,"wait":37,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.688Z","timestamp":1788167561688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:22 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 427279\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-31T13:29:45.200702Z","times_seen":335992,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":22,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/cases.json","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.911Z","timestamp":1788167561911,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /js/cases.json HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casebattle.id/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/json\r\nContent-Length: 74189\r\nLast-Modified: Fri, 07 Aug 2026 20:10:34 GMT\r\nConnection: keep-alive\r\nETag: \"6a763bba-121cd\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":74189,"size_decoded":74447,"mime_type":"application/json","magic":"JSON text data","md5":"a39341016df30db3ff05b115ee8cc6c3","sha1":"c9dfc7dcb8a3e3f4debc9fc08d306007ef90d9b7","sha256":"4c8e56cab914cdf699cd655d1128b72e74a67b613b92da1a5124c94601029cc6","sha512":"f5d78f3b3c2751fadcbc65105741078a0774e0a7544818a9232b1e900cfc9e23c7cf156377b766e12c3199f314ac84f5b1bbf333c4546b3d0c5d311e87a65865","ssdeep":"384:lg1kRsROH+pi02FuZnepzCil1Rg6uizPXUvKp4O:lg1ysRC+pi02FuZep3l1Rg6BzPkvKp4O","tlshash":"f7738c60e6720c5b1286a4482ed01f5a614c173b8f513e347edcf64d6faea6e98333d9","first_seen":"2026-08-10T05:37:52.165241Z","last_seen":"2026-08-31T09:13:27.527303Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-226-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.148Z","timestamp":1788167562148,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-226-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 88660\r\nLast-Modified: Fri, 07 Aug 2026 20:09:05 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b61-15a54\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":88660,"size_decoded":88911,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"971f7b3dd00b287d8c6906771e2b4c87","sha1":"7feabd6d145cf4f36c75461bf9d9cc733c370e79","sha256":"b7f393a89e022277613c14a67fcbb1daea1c6aebeef7755736a95562fa69965b","sha512":"b4619bfa9347c533a55be6f5d2d96c6f018e6e36ef8241033934b34fd640c3f4ad0377321993918e208298fb4ab930eb60bdebd809690ab4de2efaac51014d39","ssdeep":"1536:aRrIgHhyasKtekaWtCNIG7BKer8ycQOmVEXlL9uMrMrOUTeAeco2CUMJ9Tfc4h:aR34apanX7BBAbNqMrMrpTAc1CxTfci","tlshash":"f683127e5651ec2160e648bb40de23ef90bc905887a3fc4a2e0d43dbcf51b655c7888a","first_seen":"2026-08-10T05:37:52.073906Z","last_seen":"2026-08-31T09:13:27.528162Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793ce99db25.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:45.936Z","timestamp":1788167565936,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793ce99db25.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 910\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-38e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":910,"size_decoded":1158,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"40504ea425a6610242284196377b83df","sha1":"41023d49d4bd729615584173876d3268a5f39068","sha256":"9e4aa797d6a756f7e63736a79eb14ed0d235578ac598e21f69d7ae1fdeab2694","sha512":"bd13823a9b34f5254649ef2f43c5ae52f468aa998e026abd4845696d10c258d498e302da9d67909feee53b25bb5385dbc6cce4e4e7ac25a8a3c966c50c34df01","ssdeep":"","tlshash":"5811b77c12bf04d8b9c98ab03bfbb64140400fc8a82549d377309956f2b2482370599b","first_seen":"2025-12-02T06:53:41.512239Z","last_seen":"2026-08-31T09:13:27.528998Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-65f2bc9787028.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:48.338Z","timestamp":1788167568338,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-65f2bc9787028.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1172\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-494\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1172,"size_decoded":1421,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7eaf31200d86cfe0ede22e8ac1dffd5d","sha1":"34c1a610e9d2c45577a0fbb080054eb80b4747e3","sha256":"bea1c44a3085dc9b7365ff049161a1dd580f6e18f03afb528860a0ca22fb495f","sha512":"13274be68621aba9b0905a3097e9fb24731979f816e601959f088248ce97badabf6adcf503781a517c5ab414fa91a81fb89e57dc7b75cf334c6d70d4b72378f2","ssdeep":"","tlshash":"b9210d024e9d907df708d2f760a87317423f0f8c112c3d18bd6555f8093b5ac285be14","first_seen":"2025-12-02T06:53:41.536427Z","last_seen":"2026-08-31T09:13:27.529806Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-675e6efee1e98.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.393Z","timestamp":1788167561393,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-675e6efee1e98.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1976\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-7b8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1976,"size_decoded":2225,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"38f92cf73a9f1f005a7cb9f777d846e8","sha1":"f189750777ed1a302cda9100208c5bd12c609dd2","sha256":"340e42e0145d4434da650a6c4c613d2da67cdd2dd5b5053275335ae31ba016ea","sha512":"e95984cf513b8a8e13ef1188be95e98aeae821fe7970eac1283aaaa39d8e1d51c3b3a8fc3d4b65f4ea9aa449eed6ae851ab3892acb6bf916666e5e2822de0102","ssdeep":"","tlshash":"d3412ccf66034daedd1702436ba7e1c110421d4d3a4c7b74c3a780a490f6416add2939","first_seen":"2025-09-24T06:54:00.262585Z","last_seen":"2026-08-31T09:13:27.530755Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":195,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-609e9efa559db.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.409Z","timestamp":1788167561409,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-609e9efa559db.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1670\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-686\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1670,"size_decoded":1919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"82c4adcd0f924ad8ceec8c4015968c35","sha1":"7b9c852f7742f8d787ee7241fe69c39091ae1665","sha256":"fd457488ae9c61ad64f2be347b5b860967253e743ff5607643d07f3161904675","sha512":"787c85abfaab718b48dceccc986013d2da8a1d63ef4eb1fdb7e32b19b5ae7b092cffb150023fba7a4eff23b2b9edeb23c7176a53de366659c2c959aee4ca1e8a","ssdeep":"","tlshash":"a331f8a072cb6f21bb9c054d25caf2261b65f0a0f54815b3604cbab749ae84d1c9bb0f","first_seen":"2025-09-24T06:54:00.278846Z","last_seen":"2026-08-31T09:13:27.531677Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":276,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/payment/footer/mc.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.426Z","timestamp":1788167561426,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/payment/footer/mc.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 658\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-292\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":658,"size_decoded":906,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"57142f2c1ae64e9aeb455f8138065777","sha1":"e9aaa1ccd4be7faa38434cb143f21eb78ac72da0","sha256":"ee8682b167f24bcf5ceba8f604a96c7ac221c7afde07f3b99772dccad917f9cb","sha512":"3f81aab08698e62409021f2f554a5c23f78643770ab66d3d6d13d3e58018cfbfffbc9c41b9740e3a45f1adef6d032d1c30920ee41492b955d2cc490a4e87ed88","ssdeep":"","tlshash":"fc01683ea7543c1da0d0447023931c4074c950bd939ba4cd1b6f61bc999b2725653b0d","first_seen":"2025-09-24T06:54:00.274997Z","last_seen":"2026-08-31T09:13:27.532501Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":377,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/index-05811f69.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.559Z","timestamp":1788167561559,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/module/index-05811f69.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 434\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-1b2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":434,"size_decoded":694,"mime_type":"application/javascript","magic":"Java source, ASCII text, with very long lines (433)","md5":"c12ddc3420ea42df410403e3b4dd4c21","sha1":"da738fb6b27e05a214f4862ed88cbef1dc6a7279","sha256":"ccdecf89e091ca877b5b743a3dc836668a688be7ca6d3e19e53e9bad7253b643","sha512":"00eec998097e20c7c09388595ab9d2aa7d605ff02229bbb2a77f758acc45a3367fb06213f05a7df04d5b804926fc8ccfe16fc99aa5f95b26b0ab512c23f70f60","ssdeep":"","tlshash":"05e05c5aa660a0ef460a1cd1c15f354989755c1a3c4adc909408f117593b7fa51d991f","first_seen":"2024-12-02T21:43:54.429532Z","last_seen":"2026-08-31T09:13:27.533315Z","times_seen":1867,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://casebattle.id/ws","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.714Z","timestamp":1788167561714,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://casebattle.id\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: sNf63TOjOyDuVjKzyO8gfw==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-183-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.175Z","timestamp":1788167562175,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-183-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 91881\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-166e9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":91881,"size_decoded":92132,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"083a99a2f4a972022a667d545d6c4212","sha1":"45d94e07899018c1faaa7541dadd97dbfa8c2f08","sha256":"594a696b831b72972de98b28720113f135536414599da4157ea9e59a669e1614","sha512":"a2e456d54f5b0884841f41f765032958102c32342c1ecb47ad4fc69b00ac0c2938af2cd1ccacc15a521d0f4c1f50d5eab0975f1a1ccc9e2a186965e7f26be6e0","ssdeep":"1536:MYAk+KosBAzdDOzXpeYX/MCoO8muk0XIzvnjkK4mfu2rTAsBfBPLuL13AdVcd:MxaApy1eY0C3lv8IzvnjH4mfhrEsH81Z","tlshash":"e893124ed46f4169005fa0179e94a7fec325e20b582693c2e848fe9ebcd33e1f54984e","first_seen":"2026-07-12T14:30:59.801244Z","last_seen":"2026-08-31T09:13:27.534128Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":34,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793d2d41259.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:46.752Z","timestamp":1788167566752,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793d2d41259.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1210\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4ba\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1210,"size_decoded":1459,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"daccc562331104d559467d71c01867e4","sha1":"a71b7118b35864701745593d7aa2c23d4b6c6fb5","sha256":"0e7394f1a0f7f88ee6ca79f0c081c1909f502cad0f372a00c7237e07c383e25d","sha512":"9895e49a1fd05356ddcd6f99f4f995344c037d5cdec51b639954898e2c525f4766209dd1a79573697e26c488688a9eba141d7c022dd0b4d83871b58f6bd100e8","ssdeep":"","tlshash":"a821dad55ab158f4fa84790411248a638e4721707541ff7567c7d2cf8dda9f1683144a","first_seen":"2025-12-02T06:53:41.334126Z","last_seen":"2026-08-31T09:13:27.53499Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676345d0a211a.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:48.337Z","timestamp":1788167568337,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676345d0a211a.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1934\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-78e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1934,"size_decoded":2183,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b91a9028ca85887e11a301574f0c254e","sha1":"c1a3d4358d7f528302447be2ad5d9bd493db9082","sha256":"7df93a4a01e7c8820aa2e97467df3ad4dc448e479f2e3e4707af1dfcf71acaa7","sha512":"ce304476655d489e2dfb3b7336633ca3c62c4e44dcfe44d2505d17d5e0e37cb7a1a9b5a053878545a6aa537f904561a3661db31a83555e2d8f757ca2ec393e8c","ssdeep":"","tlshash":"ee414a686ae820c874a29888133c83080f81bc036f292c8d93af554b158cbd09c27b8a","first_seen":"2026-03-15T14:19:41.957717Z","last_seen":"2026-08-31T09:13:27.535786Z","times_seen":846,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/ico-limit.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.063Z","timestamp":1788167562063,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/ico-limit.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":318,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-08-31T11:35:46.896733Z","times_seen":47204,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-215-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.157Z","timestamp":1788167562157,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-215-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 17589\r\nLast-Modified: Fri, 17 Jul 2026 11:39:29 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1471-44b5\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":17589,"size_decoded":17839,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"2bd4ff45850a3575eebb2c6525c3b0d9","sha1":"22905a5fb1e65436e9cc54d3b3fd5a55cf90b537","sha256":"e00fd56d5750d77f1d186b4977efb95807d5637285b3b9f0ebe9c44c37c179b6","sha512":"4c73df6325ccb2fb604e615bb0f21cc84e9a95028d4e8b5b9e874e4644bcdd141d0ca336f8342eb43887dbef00c4da76b700e42ddd8128eb54366e984bf5688d","ssdeep":"384:FB2qmRX/pwRdnvruzPeXsrW+A9mwTPXBFFTIS1gbrN2RGbvWYgUzlUqy:PmRRknSeXsrW+w17XLFES1TRn6aV","tlshash":"c582df602e96e864e63d911f877107d140306cbedc2f5ecaa585de3fbca59089d60cd6","first_seen":"2026-08-10T05:37:52.190045Z","last_seen":"2026-08-31T09:13:27.536594Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-65732eddc6801.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:51.707Z","timestamp":1788167571707,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-65732eddc6801.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2964\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-b94\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2964,"size_decoded":3213,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a8f76959d5b94601901437b98cbf99a6","sha1":"104334dbf5c4118d3760fbde176ac4551960227e","sha256":"9af0a1305467e107bbbd328e470c763af91b05bfaa73971a5985392812021228","sha512":"7c5b63d50eb7f5610fba02c7adc8bd4cb3a1c84428a676fd897b4a9b32d876f65d9d6eef3f1b379b042e1312adc199907fca88e09d9d790808db5b29c4d2b202","ssdeep":"","tlshash":"7d514bfaee3aa3edd4709e7505e05f17f8893f250226487791e05522085239246a224a","first_seen":"2025-12-02T06:53:41.378725Z","last_seen":"2026-08-31T09:13:27.537412Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762d10f65c8d.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:56.922Z","timestamp":1788167576922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762d10f65c8d.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2132\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-854\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2132,"size_decoded":2381,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"18aa0f80987d50c59c2b8a95dbc8a9c0","sha1":"4e38f162a7dd44ddd2bd9b4740dfba2fe890bf56","sha256":"a083d15a0d5de06b798cd7644b0bc06daa05acde88ab0e74231500e8a1e8e4ca","sha512":"5db89ff75d2eda4faa2c9ca71fcff6840f0116784208bafb720f6ba212a3f68b511d60d07334d87c2339585d14c1d47d829fb02cd79338e9997ec54d0142710e","ssdeep":"","tlshash":"34410a86444b2ec1700d69834d64fc6eee514dd1f13e7009c25aef1d446aacbe00cc75","first_seen":"2026-03-15T17:02:17.254698Z","last_seen":"2026-08-31T09:13:27.538247Z","times_seen":877,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/promo-bg.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.652Z","timestamp":1788167561652,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/promo-bg.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/bannesr_section.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":162,"size_decoded":318,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1b7c22a214949975556626d7217e9a39","sha1":"d01c97e2944166ed23e47e4a62ff471ab8fa031f","sha256":"340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87","sha512":"ba64847cf1d4157d50abe4f4a1e5c1996fe387c5808e2f758c7fb3213bfefe1f3712d343f0c30a16819749840954654a70611d2250fd0f7b032429db7afd2cc5","ssdeep":"","tlshash":"59c08c6e2613bd4cc6a3217522c3b490c09aa3a7a4ea46214840805331cb29a8ac7396","first_seen":"2023-03-10T20:17:28Z","last_seen":"2026-08-31T11:35:46.896733Z","times_seen":47204,"resource_available":true,"data":null}},"time_used":85,"timings":{"blocked":55,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.691Z","timestamp":1788167561691,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26596\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:08 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:08 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:32 GMT\r\ncontent-type: font/woff2\r\nage: 427293\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26596,"size_decoded":27409,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26596, version 1.0","md5":"dae1850484b86d299c31bc08aaa563cf","sha1":"dca808d6d16965c40bfba4e4b3c8a819f843890d","sha256":"8f80f993e523f2e6c2d097552740fd26331658da23ffad31d26edcdd3aeec370","sha512":"69b34f2652aa731ad29fe49a8cea85ebe4ef402573a10048598667f94b7a7855e534121f22d7749b81762b3176f437de607745df82b71484c4ab7c9f8bfd40e9","ssdeep":"384:nYOl9Z/81DjYTaXQMfCMNASNEVM9mYQdpx1sLt/zEkNKxgmS8AXACAU:pJ8NY2XQk0omjdKvKxgCAXACAU","tlshash":"9ac2e13f487a2046c71227f8ee5fc9b571c360a35ab32345c26748650db0ea93f86776","first_seen":"2025-05-29T21:46:50.299968Z","last_seen":"2026-08-31T13:29:45.226039Z","times_seen":48267,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":51,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/favicon/android-icon-192x192.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.125Z","timestamp":1788167562125,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/favicon/android-icon-192x192.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 7624\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-1dc8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7624,"size_decoded":7874,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"255b3f4f64e8134a663d76b0bdc4a315","sha1":"915ee1c068fdcf7cdb8cf54e1a0f8a0fcd335e36","sha256":"2cab58bbcdd3306dbc2198a3e15f305ce68e678c494c1624e22386611e8009cb","sha512":"4509589c012fa9af29a75a2be724213d169a9c70ee24b07a3b03abe536e260790afa8fde381ee59eeed09a53c4ee077963912365c93c62acb558f8f216837fbf","ssdeep":"192:2OLtbd2c9aeyxkoc9fouyF7KPZl1WHyFHel3pjK6ibhzM:5Lj2cJ99fouK7KPZlDZG3pG6i1zM","tlshash":"4df1bfdcd22e32e456c1a85e72afcf97e78221553bdcc2a87c7e80434268473b5a4519","first_seen":"2025-09-24T06:54:00.34043Z","last_seen":"2026-08-31T09:13:27.540679Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-216-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.161Z","timestamp":1788167562161,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-216-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 16419\r\nLast-Modified: Fri, 17 Jul 2026 11:39:29 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1471-4023\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":16419,"size_decoded":16669,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"4fd6443904383827fce06e5dbc11f500","sha1":"f8c354c41851d35543a73b1a25e0d4c993e1ae7a","sha256":"60daa10e002f57c192d49457516d61619f618315b9f79b217cfbffa545cbc930","sha512":"da8b91d40e42da71726c6d1ab3422803b15289ff2b83cc7a75d8d09ac73a51a1cce4c86b215cac2491e816da7b2a2a69559a7cac2b63a1760ecd93ca8ab91fd5","ssdeep":"384:FBA/hRf8yRs/jArB5jlJL1byqrMjWXiCL55meAfT7nws:M/hqyRuS7bV4765meAbLws","tlshash":"4972c0b0bbfd23f00c42808e7997273e95000645167f037cc7f95e66956ae6e5e49a93","first_seen":"2026-08-10T05:37:52.135279Z","last_seen":"2026-08-31T09:13:27.541485Z","times_seen":1852,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-184-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.177Z","timestamp":1788167562177,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-184-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 87119\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-1544f\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":87119,"size_decoded":87370,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"a9868f5fdec296dcf89e42f90b69c771","sha1":"aa0ed835a7a343097fa67a0c1ec9d05d389f53d8","sha256":"5ea30c93379a8645e7a667981e355109169f83f56b5b690634a6beef184c3c81","sha512":"39ce7ebb9b5c1b022ca67b0adc72547a7becadab8fbf5fd57b2febf5ff01007053a6c18fc75340f87ccee2096a87c97adf3792733a8e3eedf351613a5dfc955e","ssdeep":"1536:5UVFg0+ZPmwN1v8rpovs/00sxoG8gZVY7VOefHd2ngx/JHT+yzoHvQ9r:z0mOwv8eqY18cVY7Vn2nuhHT+ykQ1","tlshash":"d38312b60a09381bef37265c6943d4518c835859347cf6fe924e22ca15ba18c96efdbc","first_seen":"2026-07-12T14:30:59.943952Z","last_seen":"2026-08-31T09:13:27.542291Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-185-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.180Z","timestamp":1788167562180,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-185-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 88307\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-158f3\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":88307,"size_decoded":88558,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"a6bfcc6661799ca16bec3f216706cbc4","sha1":"71b9a6a76971604f226aa3caafe7892d69f65a10","sha256":"cdbd547fdc4f2a24e78364051873b2e9bd51e3bd8d1f392e98e15d50b533429c","sha512":"d8be6e627f3a65af47ebfb502aaefca00fe0b8fb8491adef53d20445637e1a9570fe9f7ccac951a72183c0c94871af86a01a8de706c7d9875b94d7475986418c","ssdeep":"1536:lOqKaSrY2d4dZ1+D0TQOQEdC7GgTBXNUKarOhKH9pBADPH5/LCnNMGgDYhb7uUsp:lOqyY2ssygXNUhr4kqjZzuiHchu1Aa","tlshash":"8783027f9b15b2c0d81a70b219a3e840074e7b6c11c8be853b66f91e88e661f9e0ddd4","first_seen":"2026-07-12T14:30:59.760097Z","last_seen":"2026-08-31T09:13:27.543131Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":92,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67476bc7efea2.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:46.880Z","timestamp":1788167566880,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67476bc7efea2.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:46 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2826\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-b0a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2826,"size_decoded":3075,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6d51dcbebde069d62d9b50473c91ffca","sha1":"e56800a0dfa3fc487c91cd18324ad40f743a62aa","sha256":"07f245a59951af2f1d9987d631fc5240daf0baa83eb88b5f33900f27562390b3","sha512":"ce94d90961617d98135df56e89555e1ee30e496ad1cacdf4467da60d6b41e5401178a1d3888d5551d033e4ded5da6a857a18b96869755dc222ec13bfc4f42f1b","ssdeep":"","tlshash":"27514ca602f25befd66a00060f372eb33c9801c6354eeed045b65d3432749445ddba01","first_seen":"2025-12-02T06:53:41.499064Z","last_seen":"2026-08-31T09:13:27.543976Z","times_seen":1296,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793d9da2639.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:51.468Z","timestamp":1788167571468,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793d9da2639.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:51 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1240\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4d8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1240,"size_decoded":1489,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"21f91f66721b72a757d12d4cf6a852be","sha1":"e91b3e64042dc40f532e99617be27c42529808c1","sha256":"278147738bc630675177634c880e82017429b59917bd4c69e916a51de10b1f5a","sha512":"438467554af37fd206c8a1ad9601a4fca5dec8531c26f29f9543625a2a98e1d0d31036b043760e870785cf412e59eef40834c5619d26ea3422fb90144d962a1e","ssdeep":"","tlshash":"9121b78aa25a0d498719aedab06997e58b2b1d3c8a335c19ff31698541d408f3648d93","first_seen":"2025-12-02T06:53:41.32218Z","last_seen":"2026-08-31T09:13:27.544824Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676343464331f.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:54.150Z","timestamp":1788167574150,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676343464331f.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1854\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-73e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1854,"size_decoded":2103,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e50d03ebff374057ebcd324e307aafc","sha1":"61c46ce15dda9fdaa49fc87e8231e7ceeece317f","sha256":"cbc46670144b6c3cb463cfa88569d66b69fc568e29f15c6b0c5d581cb8ba13cc","sha512":"246df569c6d9759acc3f928fdda75a41186012ff3138a15e38e3c170cb326b7b7a1fe5b845d864c96f6984516e47d778535569908f25aab69da231a37642960e","ssdeep":"","tlshash":"38312b6fffc1324689d04c56180bd06a35515ad09ef089bc46c521f43b31a7b78bb21c","first_seen":"2025-12-02T06:53:41.418053Z","last_seen":"2026-08-31T09:13:27.545655Z","times_seen":1300,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67610f3b69e9a.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:59.156Z","timestamp":1788167579156,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67610f3b69e9a.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1846\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-736\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1846,"size_decoded":2095,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a68e7d2a8ac4816e14f17c1834f1ff7e","sha1":"7592d7aff8e77b79e166dd3ba6ae29b913f91eaa","sha256":"3f006d09a07363790e50919cf2ed00416ed1ef9a2c5e0c44c2c59e1345bfeace","sha512":"9b6445b126e23ab34e93e4c1256c504f9cc52c7e5185c4c1d6c860c33b99a54c8673709e8c437fa601076ba8a21f97d22bd842f507770121248420bc1f49992b","ssdeep":"","tlshash":"1e31f979a125407ac242e027a165214b51757b1ab1f20168428265b88fcdba4b7e7d67","first_seen":"2026-03-15T14:19:42.924419Z","last_seen":"2026-08-31T09:13:27.546613Z","times_seen":834,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"wss://casebattle.id/ws","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:43.946Z","timestamp":1788167563946,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /ws HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://casebattle.id\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Tpfu2l48yiaM7e6V3ttLNg==\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:44 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-31T13:32:54.913088Z","times_seen":18203002,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c794023e2a84.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.732Z","timestamp":1788167569732,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c794023e2a84.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1014\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3f6\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1014,"size_decoded":1263,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fa87ed8e2fbc667c9bace012eccfaf95","sha1":"f4a2e39c6dffb8f3b91d784ef89d42e5ca1a11b2","sha256":"449bf8a0d5d498437ead41176bec75b5a17d5afdd99c148d01d4839579b0ed50","sha512":"b048cdf5d85b48947024838eebd9c33a6b3b0a57c99308a1a535a3b01aa88f8d469f1c74a11a0f4996b1cdbb2e449c083caf9faf9ade5a476ceeb75d62b5ec82","ssdeep":"","tlshash":"e111a540ed54484ad1893cf056008f07a6e7811a32ee5fa4dab183d0d03a3d44fd771e","first_seen":"2025-12-02T06:53:41.411371Z","last_seen":"2026-08-31T09:13:27.547466Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762deae53fb0.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.415Z","timestamp":1788167561415,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762deae53fb0.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1280\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-500\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1280,"size_decoded":1529,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"443827d20f8e0979c37b0ffa0d062968","sha1":"27c4156385b49fde4686acbe5233c5eb09972254","sha256":"7ec185614c9ff21d8735360eb07076d3fd06454d57ea23d7dabab3f046f5251d","sha512":"683d80dca878b5d738fd2efc0d0ac8c714c03112a3953373d5b69b73e7982b2edb3cf699711c44d54fdd3c2d4d91741d3161f1fed9cb723c65bb4622896b2853","ssdeep":"","tlshash":"1a211a70d67048f9b785a6f0208cf2c206384e438b722fc4f86bd146e0cbb4521e40f5","first_seen":"2025-09-24T06:54:00.285116Z","last_seen":"2026-08-31T09:13:27.548287Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":310,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/build/module/index-ba6f7af1.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.561Z","timestamp":1788167561561,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /build/module/index-ba6f7af1.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/build/module/funds-form.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 15035\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3abb\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":15035,"size_decoded":15298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15034)","md5":"ead5b126d2af3da5885f478bb7af0ba8","sha1":"1132097a1055feac2aef2103dcce5b12de928571","sha256":"1f148469472d047bca7376ad2475606b41d4b524b4b3767cf7bc6b760c40700e","sha512":"9fd6c9db8034bad4040048733f1a013d28ca0515802cf40235fc16166fe4d2d3b771f0a6faa48b27496aea0db3d6804315500447df1f6f79797b01a8a5da8198","ssdeep":"384:4fMK/QCtiXbJJMcP4ss3dwvxzx1j+zFuEMbWCtdbo+OYctS06ECQa:4fMKvQXjMa7s3Wvxz+zFuEUWCtlo+OXW","tlshash":"956285993280b07653ab01b690af455af3347454340b84a0d57cbcdb3e726ae47ebf6c","first_seen":"2024-12-02T21:43:54.597652Z","last_seen":"2026-08-31T09:13:27.5491Z","times_seen":1867,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6737230c55210.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:48.201Z","timestamp":1788167568201,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6737230c55210.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1116\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-45c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1116,"size_decoded":1365,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b90e50d0d9ada4ce9f93dd112a1ddaee","sha1":"cd3d84db69ca4068dbfa7691c4e00e87e6e22c73","sha256":"3dd52f62bfe90cd8543b0ae377bd8f3d1ba9be83b391aa5257d7ab668d70c856","sha512":"bd863b5aa3d27ad6f2df668fc51b1d4189a69c28b0c78c3862e79fa6345374850235a3ce2c1bcc66b06f97b6d6a663d6d939a05134877ffe1f07408980193566","ssdeep":"","tlshash":"e321b9582f95c1744190df10c371a91b74db4a05670f4e6ed367ae7004ff91965387d7","first_seen":"2025-12-02T06:53:41.382507Z","last_seen":"2026-08-31T09:13:27.54991Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793dcad6460.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:55.866Z","timestamp":1788167575866,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793dcad6460.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:55 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1236\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4d4\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1236,"size_decoded":1485,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2577269c3c62ab27761bc09893450d39","sha1":"6cc2c1c121e7e2a64b0f76367c76ca5668e0dd7f","sha256":"f5159bc2b26568c309e4050eafb1c9ca034c3ca1ed0144cc3db0ca0eefd480da","sha512":"b29c4c0ea0cdcd3b614f8445b218f429102de986d7fcf905a3528185020da650e73c7f1420cbfe73471cc2aba43073b870d4896c976007530e932c0b7bab3cb1","ssdeep":"","tlshash":"3c21b710eefac455d2922cf40a026fc69bea6114b1c95e049ae342e1ab3c7d0ae92c48","first_seen":"2025-12-02T06:53:41.422325Z","last_seen":"2026-08-31T09:13:27.550825Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762e0158dc1b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:57.788Z","timestamp":1788167577788,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762e0158dc1b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2480\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-9b0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2480,"size_decoded":2729,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d327b35a775fe0e3abb28cbbb57b6fe1","sha1":"f78ab8c7b0e2eba7dc5f947f81f10370b90a5eb5","sha256":"d33ab45e166c4c7fcd53b2cb7da952db1091595d8bd2f826e7c50092a88b2a78","sha512":"182cb95a7f41309b365315b1601473dc0b2e1d246cd799dc517502ea209409878c89899f1186dc9dfcfabddea5227dcda6dea75b4192568468551d57dcb345f5","ssdeep":"","tlshash":"5c515d43f1f1134aba774b9ab7206149de973894cbb9153325de3ef42b329f01c45116","first_seen":"2025-12-02T06:53:41.560426Z","last_seen":"2026-08-31T09:13:27.551732Z","times_seen":820,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-65732460afc81.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:00.998Z","timestamp":1788167580998,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-65732460afc81.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1046\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-416\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1046,"size_decoded":1295,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"abf8e6e89f64382059ccaa1557374976","sha1":"1b047656534c4d4c89da24f93afba62d05bec3db","sha256":"25df97966453eb171a237dcf96ec2e40151a114d642966b5cd21ba46125c0b86","sha512":"457ac059cbb8067a80c3101a38f8edaddeded5efbf90813bfb45e5ccc89ba3294bfd8973bcad1c47d3c6d99e38702905b8e48335b08b7efefb4ed9d644faf490","ssdeep":"","tlshash":"8711e9dc017742f2fe60a27d0ff4c87b101423a20d5d1e613a53896094ea03142ed066","first_seen":"2026-05-29T14:16:16.679481Z","last_seen":"2026-08-31T09:13:27.552752Z","times_seen":1843,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6750b85bad5bb.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:02.319Z","timestamp":1788167582319,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6750b85bad5bb.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1984\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-7c0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1984,"size_decoded":2233,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"47071d82aaf7f1c518e8b5c284472517","sha1":"1a796841c4a91787905c21fb6676d7ca69b6068a","sha256":"9b36e102a1fba0ba17432ef125a168f42934b40a4c328b60e3ebefddcc3ec325","sha512":"29871f3d472c28d678974924d92b63c3ed915b09f477b3cb86b8beb8b138b3c63d5c13c7e31aea58ea41a02dac8cc065cf26bb785640c8b08d4745e2a23c1612","ssdeep":"","tlshash":"5741ca72d12dcce23c8b49fea43b5b596a1f8c7d4d18d69b4ad1845c4477e01528ec39","first_seen":"2025-12-02T06:53:41.608935Z","last_seen":"2026-08-31T09:13:27.553581Z","times_seen":837,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@2.3.1/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.361Z","timestamp":1788167561361,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /aos@2.3.1/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 31 Aug 2026 09:12:41 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a33aea3a8bf48deb-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 48232\r\ncache-control: public, max-age=31536000\r\nexpires: Tue, 31 Aug 2027 09:12:41 GMT\r\nlast-modified: Fri, 07 Aug 2026 06:32:01 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:8mhhK6WerRskNTu3fWZ4O8xDWv8cIr5fk8QLrDhplo4=:\r\nfly-request-id: 01KTHMJH9YDDH2T4ZH9FJV0B83-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14239,"size_decoded":5380,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-31T12:43:49.610892Z","times_seen":24542,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/svg/giveaway-icon.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.388Z","timestamp":1788167561388,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/svg/giveaway-icon.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1753\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-6d9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1753,"size_decoded":2005,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ceae9ac313a7ecb3a8629b0aecceb857","sha1":"9703701e31698a750389917ce6b10dca27a3b13d","sha256":"88ae3070c4a123bdbdee5963f68f8489195856358487bc6e8be1bee7ad4c744d","sha512":"3e91d42305fd340c951a97e11f1dce745bd369778598339dc692d14a3964269f4c29250af7c5ade3d039597dff8f12d2d4d90b52e1929251b5f4c35ca2914e2a","ssdeep":"","tlshash":"ba312d58d384c7fa7de1422892e42c8172b49dbbe474e2e4a7ff1451dd9c0e1651cacd","first_seen":"2025-06-16T19:50:55.77131Z","last_seen":"2026-08-31T09:13:27.555373Z","times_seen":1920,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-224-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.144Z","timestamp":1788167562144,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-224-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 18057\r\nLast-Modified: Fri, 07 Aug 2026 20:09:04 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b60-4689\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":18057,"size_decoded":18307,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"6f85ae735c68ff137c886552df0c06f2","sha1":"828d3ac88a5fd15750165137667127cd6c74a63c","sha256":"24c6ec6627d8c215d0bcce4b97eb96c31249c437426d02314b4c709f7739a0b7","sha512":"4da5e5fe00a353a41075d064e45473bcec7a235af99a47ae863d2a37f9a36ac6613c89a0f0538ed3bba8f67052284b31b6bed5e79e9da597f683dca3da55ddec","ssdeep":"384:F+xQoC/Yvj+LEv2IEWlXGm2qLNOyhyirwo7BqjaVx2xtiyy:MaoC/YbAEjP7doIwo7BQWoxtiyy","tlshash":"2a82ced112b014881f8153eeb6a4190f9d82ad796e6fbce8fb610d1d8a00e8ced85697","first_seen":"2026-08-10T05:37:52.050683Z","last_seen":"2026-08-31T09:13:27.556208Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6761239757d54.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:43.922Z","timestamp":1788167563922,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6761239757d54.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:43 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1208\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4b8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1208,"size_decoded":1457,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"75edd58e788f320f8d3d777692a1346b","sha1":"f1e08ffd6824303cbdcaed0b7af82c63488794c2","sha256":"4a34271c2f871ac56f557f3208eb7391f482008d6bc23ace7e86afeb5e07b8b6","sha512":"f6b7b34690d4509ed09909e3318208724f5d7720d24bd34079e14fd7485df56d7262255741239635aef2017f6645c7ae70a771af13e2ddd6a47171c176b7fb44","ssdeep":"","tlshash":"58210adcc9084022c74b4293b7d75d07610349d879c5ae7aaa4f89b3207cb488fec9e1","first_seen":"2026-03-15T14:19:41.899282Z","last_seen":"2026-08-31T09:13:27.557003Z","times_seen":829,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6762cf89a1cd8.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.366Z","timestamp":1788167573366,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6762cf89a1cd8.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2386\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-952\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2386,"size_decoded":2635,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a19806afc82e3a157fa64f59f7f3fd70","sha1":"9b589b406f70cf7de9b5e8455e277c84a428e7dc","sha256":"bf19ab112ad6dc5c65768b8a1bc74d457b45824cd9c4d8e62b76522527955023","sha512":"f6b6a666d801ad9a679ba173fc7237e0c6449baceb57435491161f8f58e568d33fafd6491401a45f19e6a043b11185b90f60f69c8e4f00463d707f888e23c388","ssdeep":"","tlshash":"29415b00850a6fbf1510ea39a546913a9193c0c3a7be5584c42c747810c638e38cfcfa","first_seen":"2026-03-15T14:19:43.000692Z","last_seen":"2026-08-31T09:13:27.557814Z","times_seen":849,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6761573c194f4.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:58.815Z","timestamp":1788167578815,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6761573c194f4.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:58 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1594\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-63a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1594,"size_decoded":1843,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"486bd35f2e4338dc7f12b4de5d766b34","sha1":"0bb67c26e5c591dc84300592d127daa22400f61f","sha256":"8440a23df367cd2b1ed1873182aac08cca7f740d13af2a090346fceb11e61d23","sha512":"edf94ec3c9dbaff7936e17e07066111b9e7aaa3e16ac0210bace568e390fc3e5a33f5a6a26496a183fae90e52ce5dd4b2d890afd62eb342f3ff5f2f781ac73d7","ssdeep":"","tlshash":"cc31b7ef9c8905c655d28d0de2de96400156e3893f12edd05c884b59c2ace7059ddfaa","first_seen":"2025-12-02T06:53:41.507349Z","last_seen":"2026-08-31T09:13:27.55856Z","times_seen":869,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67530ebb0e9d9.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:01.576Z","timestamp":1788167581576,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67530ebb0e9d9.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3180\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-c6c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3180,"size_decoded":3429,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c07b9079af52a276298bed0cf3690f0e","sha1":"91595b85dee0fce29e0d5d89444fbc94f1c3fd77","sha256":"9a7647c15e16e3c963a7fad971cc0f48c6211d825526d80abce85b703ab092c2","sha512":"815124fb448aeea863a8a9a74607f7867e4a98276820a80a70cb544477152c04dab9d1ac49fcfd8bef555612399ce1e13fa86600f3bcfdb6b26de8090428c129","ssdeep":"","tlshash":"d4614bf278152fedd4080270a0e45f29f32179a3c52a263e533acfb1f6de2c6858c981","first_seen":"2026-07-12T14:30:59.799426Z","last_seen":"2026-08-31T09:13:27.559353Z","times_seen":1779,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/steam-login.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.392Z","timestamp":1788167561392,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/steam-login.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3258\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-cba\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3258,"size_decoded":3507,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"09bc1e0a30306661df1797c91b73d09b","sha1":"c83a8a11e5549eba4edd18d19851be3949cabd6a","sha256":"4c4ed6afb880efb895df40f563b56f215f6edd11800d4209d30a7085c18673c0","sha512":"308e5ddf9c04938357497369f912ae486a057ea8fa22949fd1bd3485c1dcb2f725a1f3616b0c4a2d1dfb7082b7c3bd312e549ef92ff0141d5a3a47c130cc753e","ssdeep":"","tlshash":"95614b8de71494cae219ec922b9bf62c90309209db37c92e64c7e5326ce49c6d931e57","first_seen":"2025-09-24T06:54:00.238311Z","last_seen":"2026-08-31T09:13:27.560164Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":12,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793f629583b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.407Z","timestamp":1788167561407,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793f629583b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 938\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3aa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":938,"size_decoded":1186,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"689a7212a54ed84ea8287390c2ba75c2","sha1":"33f3341e3d73eb796e9717e95f190346c604c276","sha256":"6b28a071a9b3f9d29747e1d32d9e4b7bb24d1d9f30100422922d4336a44142c7","sha512":"0d9eaf5d5ecd43bc4cdf8a4aeb8496bd1108c5a0c5eeab26b3cd6cab90b2a16c801c796972a913301b3435d3ce92d4bf708743ed6d168ca2f7440f741a2fe428","ssdeep":"","tlshash":"c411fb244fc0e173c07138965f7f9206d703603694c85a060b4f29cd7e79303055cbe8","first_seen":"2025-09-24T06:54:00.29756Z","last_seen":"2026-08-31T09:13:27.560911Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":248,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.694Z","timestamp":1788167561694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Aug 2026 23:02:32 GMT\r\nexpires: Wed, 25 Aug 2027 23:02:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468609\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-08-31T13:20:21.230658Z","times_seen":15274,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":16,"dns":0,"connect":0,"send":0,"wait":47,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-223-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.136Z","timestamp":1788167562136,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-223-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 87409\r\nLast-Modified: Fri, 07 Aug 2026 20:08:53 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b55-15571\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87409,"size_decoded":87660,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"dd1ffeaa78caf7cebf7bace97c361bd1","sha1":"4ea9fe50b9eeeff11b9db8c8eff3db557b6c73c2","sha256":"c15d086aba0e840628194685ba8172fa9d06b0af74769f807cfd5fabb796bcd1","sha512":"92990edf90c0d2499c8ce42348ef9d9be4ad946ffce41d706afcdedde5a04f65cc6c248390c45b13841b9f88e34b1f06ab11a47c620621e7802b3d546c3a963c","ssdeep":"1536:HHeCF4T5nM1YlaHZ7GjRRHDWyGq6AQtlmfDHp9ErKiIaAmbIK0rEItN2I59RAhFf:HHIJML57+R5V16Plmf7pSrnHrGoIiOLG","tlshash":"0983125a34746dc284225a005fb31336fe36930c3bf7a887031e819ed9e8e4b3871a99","first_seen":"2026-08-10T05:37:52.254734Z","last_seen":"2026-08-31T09:13:27.561784Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-215-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.155Z","timestamp":1788167562155,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-215-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 92953\r\nLast-Modified: Fri, 17 Jul 2026 11:39:28 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1470-16b19\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":92953,"size_decoded":93204,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"59dd57581783be907d2da8e379ff36db","sha1":"9845ff275646a145f92d888d7a6d0f0bb19c3955","sha256":"8e6aa65140251748dc326d0288b18dd7a40eb1b7e2b6c5933f824833af5d9e8a","sha512":"03823c2c6e2fc8aeb9e1282b560f3dfb2f12e0baf8a2dcf0c046c917e7169f0afbcadc3d4de49ff1bc95d3aadbc6011bff30b6e9bf24807515c64dd200b0dba4","ssdeep":"1536:x6hGV7uQDrfLFY1QYGRzMFc34soKuYngdssZoxp5BAbI+LmJEorvz2l+3:aG4QX21p0wWvoKNxpm2rvG+3","tlshash":"a8930242844badc83ac414d578af8364bcfd13d9ab98ccbd40a871f9565d085abc9b2f","first_seen":"2026-08-10T05:37:52.243834Z","last_seen":"2026-08-31T09:13:27.56282Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"oldddrewq.com/dbxkdieprotvslduyumjrsgtfucaysdbiihrizixingvmn","fqdn":"oldddrewq.com","domain":"oldddrewq.com","tld":"com"},"ip":{"addr":"194.87.134.37","port":443,"asn":0,"as":"","country":"Czechia","country_code":"CZ"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.266Z","timestamp":1788167562266,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"oldddrewq.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 15 Aug 2026 10:56:02 GMT","end":"Fri, 13 Nov 2026 10:56:01 GMT"},"fingerprint":{"sha1":"34:45:B6:1F:D0:AF:52:76:3E:C8:96:87:94:C6:2E:A6:7A:C9:1F:08","sha256":"FB:9B:DF:C4:79:DA:2D:8A:1B:7F:78:0F:B2:50:45:2B:33:99:49:A1:3B:E7:E5:D4:BD:71:2B:03:22:FD:B3:00"}}},"request":{"raw":"POST /dbxkdieprotvslduyumjrsgtfucaysdbiihrizixingvmn HTTP/1.1\r\nHost: oldddrewq.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 151\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":151,"data":"d=casebattle.id\u0026u=f-mth0spi0-v6jflzsh\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0"}},"response":{"raw":"HTTP/1.1 200 OK\r\nX-Powered-By: Express\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 67\r\nETag: W/\"43-ktPua1K2A+sam2Klb125q8YG3Sw\"\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nConnection: keep-alive\r\nKeep-Alive: timeout=5\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":67,"size_decoded":412,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a1938a4f1881bd76181e81155b5adc6c","sha1":"92d3ee6b52b603eb1a9b62a56f5db9abc606dd2c","sha256":"208fecd169168d9b43ed3dc3d74a0a25add9a9372695a21c2ad8e49363ad847f","sha512":"81a603583ed60af6b1f4e0fbeeae555b95cda04394eac11a21023b7457fb996fd9777f4245e8d753af941266dea4961abe340f9cfe8d5d634c1caabcb698d6e4","ssdeep":"","tlshash":"85a00245c95072fdce0b091c814d2f101f7c10377ac5a8c6f04c4e8851f50af852553b","first_seen":"2026-08-31T09:13:27.563635Z","last_seen":"2026-08-31T09:13:27.563635Z","times_seen":1,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":59,"connect":22,"send":0,"wait":141,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"oldddrewq.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6761317ae8fc3.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:47.323Z","timestamp":1788167567323,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6761317ae8fc3.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:47 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2792\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-ae8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2792,"size_decoded":3041,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d600b94f01e78b4d39151edd8b527762","sha1":"2aaa6fa5e1f08971e3a2a4f9e43b37ddb60cdf79","sha256":"c52e47ac3028bd7ece922d03b55c685a6c17f83c4fe13112fd13bd26febf88aa","sha512":"61340b5a806695040b48d93a61b192da7396b3212abf47cb7110e2a519b1b2e5c353b991cc968a288c78aef9c8628ae154732d2d3ab0bfe931291935ef3e2cc9","ssdeep":"","tlshash":"72515ecd699102c7affb790c4e534320e2054762f284255616231fc639cfe58a787f78","first_seen":"2026-03-05T20:17:01.880976Z","last_seen":"2026-08-31T09:13:27.567644Z","times_seen":849,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793fc459eaa.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.325Z","timestamp":1788167570325,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793fc459eaa.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1006\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3ee\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1006,"size_decoded":1255,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0fda9eda104dd1ff150ef6b07314aedc","sha1":"339e31a9906696b06f24984f1054b1e899edc24d","sha256":"afb715a4826da5d69ef8243750d4e42fa077f2c2f8420a363d9ec7c357e2e215","sha512":"6644dd97cc00cbceb03806a60cbb7637d6c75c7d50b85e96208596b53b5d3ccb1765c67167659c69112757de31740dbf1f55451faf6492d9ac3ad5d9b3fc1f34","ssdeep":"","tlshash":"b911a5ac808e01e4da2ae6c672f73f004f56038b3fd14a341b2089689d842a595e54d9","first_seen":"2025-12-02T06:53:41.356842Z","last_seen":"2026-08-31T09:13:27.568594Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/bannesr_section.css","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.358Z","timestamp":1788167561358,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /bannesr_section.css HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: text/css\r\nContent-Length: 4105\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-1009\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4105,"size_decoded":4353,"mime_type":"text/css","magic":"ASCII text","md5":"b483538f90cd4e8917916c380ff3a566","sha1":"7fa9580dc6e4979c07c6f2c9272e8d0403549b18","sha256":"61e49a7c880e8e657db68a6ab9acba600dc180fd4bc3b32ce0a4c89d1a5bf2f9","sha512":"9398e3d6bdc5c5644c04c4edcbfee225ae411aea2b0c21391c5ca9155c101013ea4b434cebe0d76a47cb70df681b93479aed509214fc1e908b0cf767dbeea42e","ssdeep":"48:v/4FaVTs3bQjwWga4YsVg+QQDVdziVU1eDRjzF5NV3UbX7cg9PMwPbzcxmR2Z2o+:YIRsVrgGW1l3NBUbxMwPbzcxmR2Ev","tlshash":"1e81eb8796336509f609f8be2b744bc90b2d442bd267c41d7bc1a14ecf8d7899f63688","first_seen":"2026-05-09T15:05:47.161634Z","last_seen":"2026-08-31T09:13:27.569307Z","times_seen":1857,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/live-drops.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.364Z","timestamp":1788167561364,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /js/live-drops.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 8713\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-2209\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8713,"size_decoded":8975,"mime_type":"application/javascript","magic":"ASCII text","md5":"7b58d40925c7539234a9279c905b90bf","sha1":"8506a2f2c402ff5b106d97ab2bd546c903e42e69","sha256":"756b1ca73214d4aefa166a3bf7047ee17d54c4774b94967e80f3f2ed53741acc","sha512":"24c117a4d4c9f94b4187b217a459e4ff7e5b202daf1b727c495da72ddcb354534121ad633bbfbcc19480fc1eac18967508ecbd6518ec3929c37edec75f4336de","ssdeep":"96:odh5tAv3w01/u0eHa9KTcYe4BSXxN10NEkGc1KtPJ9TGhFx6:ob5tAvX1/peHa9q4hNyE+UtPzE6","tlshash":"e202432462f3013701e760ae1f97921a3ae071037256ce597f7c47819fd6e55e8f2ae8","first_seen":"2026-03-15T14:19:41.776566Z","last_seen":"2026-08-31T09:13:27.570019Z","times_seen":1861,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793adb92d4e.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.416Z","timestamp":1788167561416,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793adb92d4e.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 780\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-30c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":780,"size_decoded":1028,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"10f459ebb9bd418ff609f4a429026366","sha1":"31823ee3d27a50de80ac3926828c5cc467ad94a2","sha256":"7c7bfaba13272c7adea531d9a1fecd2fa287445db19c4cb88937b85a12216d27","sha512":"6d82270d9bbae8539558c8754ba56b9af6914b735051b441cfcf8dd1bca37ceae985786389b18cec90d61862af7ef08a00ef6f9f8199d14c28772afc39190b64","ssdeep":"","tlshash":"bf01c57407ca0670c8a69610b85ec6a59b9e526d3330aa3170a00aa682f03255e0a726","first_seen":"2025-09-24T06:54:00.239226Z","last_seen":"2026-08-31T09:13:27.570853Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":318,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-223-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.138Z","timestamp":1788167562138,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-223-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 18351\r\nLast-Modified: Fri, 07 Aug 2026 20:08:53 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b55-47af\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18351,"size_decoded":18601,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"f2931797dbe9c8a92fe5ec871b4eb8a9","sha1":"cc494469e531bd8bfb15db1d6bc5714c9a2efa5f","sha256":"47ce7f95ba674eaa792ab1378a054c260b1f49f670b1e50b1c688c9e72a329e4","sha512":"eb4407290e4ff308c74e2e751216f45b1fa3e1ad356e5348d30a19caf74faf55b54eea21314970ba883f7d8a8d48ab1636c68011baedd9b32827a2247173b22a","ssdeep":"384:Ft2j9oVY3QFGhD7dPAPuRwXcojd4LyzP0AqBoAGOaOFIaB3:Kj9ofGd9gRdFPqqAGXOT3","tlshash":"3582cfbfd0f7d218cfc6563369820b025bf28d4768a5853ce2d4a6a80f1663e57e059f","first_seen":"2026-08-10T05:37:52.257996Z","last_seen":"2026-08-31T09:13:27.571633Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6752ff0d2b2ed.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:52.773Z","timestamp":1788167572773,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6752ff0d2b2ed.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3248\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-cb0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3248,"size_decoded":3497,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"43a8c7af7791408f0b40e321f5053bc0","sha1":"3048d07ac78f8d1268543040017d0b5379bae0ba","sha256":"e80440c69d8106735a1b8cb80a2860f5052c05a30b92150b0591001d8f58d0a9","sha512":"3896e961855a0c5ff452ebdf027c3d97ac55b3f3033cd18629bab6e2d47b8f3e8b6f9791d94a7ed774d5d4205fb4fff8ebe3c618ec34d1d133f7221a674f12df","ssdeep":"","tlshash":"54614cf3c3407b5bd65c657240984d8fc4287e628458cd91e652c7eb1da8f40cd61ad6","first_seen":"2025-12-02T06:53:41.519043Z","last_seen":"2026-08-31T09:13:27.572336Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6763399ab42cb.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:56.363Z","timestamp":1788167576363,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6763399ab42cb.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:56 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2168\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-878\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2168,"size_decoded":2417,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"50b1892ac8956580832196043975098c","sha1":"242672a340d12d11d9790813c491561fc88c694f","sha256":"92470b8df22d6882894f46f3b668e34cf557216d427385943e7ce5c915dcaa72","sha512":"49bde0633a5c4b0afdf41f08bb8a2d014c5325c659f462321bde5bb88198fdd7107a678d96af5cae730f806b0214259fefffbed5037a3715f8c791aff615e326","ssdeep":"","tlshash":"73412b689968573fc4a4e74027792ca8ca0f5465382d0936e15f1865e3499caf1b32bc","first_seen":"2026-03-15T14:19:41.90991Z","last_seen":"2026-08-31T09:13:27.573069Z","times_seen":840,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6727242690fd3.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:08.430Z","timestamp":1788167588430,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6727242690fd3.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:08 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1352\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-548\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1352,"size_decoded":1601,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"35561e340ce377afa9ff4a4ddf91379c","sha1":"0c6e096112c98bfa0de7ce83224fd68c1a911d49","sha256":"0b2d521532d44371c5bd063b238fec72fa000781a2c87ad1a84f3622efe2836f","sha512":"4b35c64be238b7cbb29ee1aba5e4d8b3260618cbafc4ab392fb1d455e86bcf9f4fdc8e9db778b60a8cb797f7c1347cfd7d331006180d9091f7af83852ed16190","ssdeep":"","tlshash":"f9212b3d8ec12d78fd42e0ca2b910118937aadf592590c28b61a53e88d3aff1e0061ec","first_seen":"2026-08-10T06:26:58.541054Z","last_seen":"2026-08-31T09:13:27.573733Z","times_seen":74,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676343a663748.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:52.347Z","timestamp":1788167572347,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676343a663748.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2612\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-a34\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2612,"size_decoded":2861,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"55b39f3c19f114f34e0baa7cadc82617","sha1":"82d082b1853214470278d9e0905324411fe55eba","sha256":"10384676853ddd86edb3f1d69decc26c0590611f548e5a58679a2c94b4ad7b72","sha512":"91978b8312d63e957f2e566b8594c6a19709e85d506780b9641fafa645ff07c162ca05e5142d7aa73f63271ba9d05f235a1a45ff9d9cf35e27e3bd67195116fe","ssdeep":"","tlshash":"bf513adf8d5240df0fb05823c41a148791105bbb82ba75eb2a83a6666022d1f2b93cb5","first_seen":"2025-12-02T06:53:41.569199Z","last_seen":"2026-08-31T09:13:27.574444Z","times_seen":860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-675ede08af76e.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:05.178Z","timestamp":1788167585178,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-675ede08af76e.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:05 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1388\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-56c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1388,"size_decoded":1637,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0c59d55f2ec66993a4a51973adb670b9","sha1":"8d6e5f5c9ebdc88ba42ffd55218b922fa316f194","sha256":"555b5d1e925a2fd9441b7e94ae72b8a574020878d4a4f1c89230a03137dc3519","sha512":"ef67276c9dc1cfaed9593c3d41ef96183e4a24c3caeff124e013ae2ef5bf02ceb5928bae8269628c49852fea40841cfb9115c362156190a8260880273e84b031","ssdeep":"","tlshash":"c621b8308236bb11a6b9178f6fe9704fa76e69c5991a3980ddc87b01b3fd230145d854","first_seen":"2026-03-15T14:19:42.884692Z","last_seen":"2026-08-31T09:13:27.575333Z","times_seen":823,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.690Z","timestamp":1788167561690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Aug 2026 23:02:32 GMT\r\nexpires: Wed, 25 Aug 2027 23:02:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468609\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-08-31T13:20:21.230658Z","times_seen":15274,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":55,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/case-category-bg.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.038Z","timestamp":1788167562038,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/case-category-bg.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/css/style35.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/webp\r\nContent-Length: 9464\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-24f8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9464,"size_decoded":9714,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4ed727dfad58fe3aaea1966c080fbfd3","sha1":"548544af51ed96ec6c6c86396c05b96224ac3be9","sha256":"bec3927495ce1a669df4c524804d7a9b89f5745e0fde9a3e09b4bf2ea3170146","sha512":"adcc20a95c0c5b280a3abd0545aca85f3099f829daa614066aa5bdd465c7697172c1d6cf31872fc2cd3377287308dc1db10563d678a7d07e1bbd22fd93b48cad","ssdeep":"192:knW/QeG97uhouw0KxCjrrbR76xg1vKC3O31cM:qZIdwjcjrF6WdKncM","tlshash":"64129f7ed66c024e6ef919713556198b80aa330d74c685cd70f53766b2bcb343e8b24a","first_seen":"2025-09-24T06:54:00.230854Z","last_seen":"2026-08-31T09:13:27.576101Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-609b803ac0ad6.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:04.611Z","timestamp":1788167584611,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-609b803ac0ad6.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:04 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1210\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4ba\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1210,"size_decoded":1459,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"21e72da8370c1aa0224de5dc0806cf20","sha1":"570a2d9955f96e560d473eb15a7064549ead8b0d","sha256":"fbf44eeda31bcd1f45ee45504bb82743fe772ead18bb38873a07e3f17230d6d1","sha512":"2b02b42d65c68f5d37da0108c1ce79c4448e7587b631b2ade3d8188e36e3c5412f21360a57523386835774d5df8d39ca6c8a325168f153457e12ac1aba989d9f","ssdeep":"","tlshash":"4221e736824548e499598181f92cb7f2ce6a50817c34f5503429d110db15afb3332746","first_seen":"2026-07-12T14:30:59.750736Z","last_seen":"2026-08-31T09:13:27.576762Z","times_seen":1061,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-673723ecc7149.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.399Z","timestamp":1788167561399,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-673723ecc7149.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1100\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-44c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1100,"size_decoded":1349,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"aa2b0f80fb73bb0dba20ccbd2722df30","sha1":"c1a991bf79df994af469748199967295454e4b70","sha256":"69f023c3c283c3003a6079cb4d985b3eb57ce5515406cbcc9d316ae625cb76e3","sha512":"958d4b5176997839fa0e244b23cc951dfe457ee866bfb0168883610059ee2822a45340a07f091a41d8c21b7b636ab4e16d1e184ef06c6cd5da9ed514342c1960","ssdeep":"","tlshash":"7f11b68847600ea6a1ccd939c74b59988996329462736aaae201ba04778d2f9c0636e7","first_seen":"2025-09-24T06:54:00.244072Z","last_seen":"2026-08-31T09:13:27.57746Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":154,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/voucher.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.422Z","timestamp":1788167561422,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/voucher.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/png\r\nContent-Length: 36026\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-8cba\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36026,"size_decoded":36276,"mime_type":"image/png","magic":"PNG image data, 213 x 202, 8-bit/color RGBA, non-interlaced","md5":"1971149d4a4bf079367c48e7ee28ee55","sha1":"bbd27ae6e0bdc2b7cb0e66c43951cd463b15b814","sha256":"581ac01289aa8bd4694e958156c15b8e6eacffc829294ff99475b4b5615be5f3","sha512":"b94a0dbe6ae0d23cb37fab0e3f10d750093476bf8069b3a6f674d12a6ac74ed65e09757ce985b2dd55f3cea72480c0308a5b708872c10918452814699f3c4b14","ssdeep":"768:7Eibpxs9WN0QBZLmLju+R/1RQ580PEai8wRxBNGeDz:7Eu/s9WN0QBd8B1RQ60PEp8iceX","tlshash":"13f2f173cae09be83c7100e023336a77e6a587a70b574d7d5a1d402f4544e98cd9ebe2","first_seen":"2026-04-14T00:03:43.749326Z","last_seen":"2026-08-31T09:13:27.578186Z","times_seen":1857,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":348,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-160-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.199Z","timestamp":1788167562199,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-160-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 11829\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-2e35\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11829,"size_decoded":12079,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"973dc1ec559467adb3ecfb93cf069586","sha1":"a6621ad8c2643efad3f9823dc4f3ae375bf15afe","sha256":"ede22d07402c17e771688255fd4c178eac6597e68bee2567a3a47ec803549210","sha512":"8e91f7349c5a2ef652df4ba79a2f5d6ce13eeca7b7ca396c3a64a441e77a73d4b0dd6242e2f38c60df9b1413ce7477018bbd6cee4e967268220e890c5df992ad","ssdeep":"192:KS4rCaWmn/J6uXPeE2jGA+ZAZDB6lvQUy5NWy9VSPfBlET:F4vWm8u12qATYlbkEybSPfB8","tlshash":"76329fd1c43d6c48a10a96cd0fe26687e0270f279b3d263be65b964dd51e284bfc0db5","first_seen":"2026-07-12T14:31:00.011926Z","last_seen":"2026-08-31T09:13:27.578888Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793c07a2f75.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.685Z","timestamp":1788167569685,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793c07a2f75.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 972\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3cc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":972,"size_decoded":1220,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"48dcd4b601f1aa0e9a15770a0d03101a","sha1":"1f020d350786e327931be1ed29f4a3e460c79234","sha256":"b3cbac506163aa5461e44589c6f730e66753b9ff0a1351e0bb55785647352c58","sha512":"66e88315df9f967827302c1ac50d9f249b0efbc52a398565716c1ef4249577df04834e35526ac3a4680f9986d7b0ff89a1cb17496d8fe2594a620077dd103595","ssdeep":"","tlshash":"3311613a82e9e9d1dd07be850b8e27a011054889e56e4e30fbb598258c2c2440adaab8","first_seen":"2025-12-02T06:53:41.567131Z","last_seen":"2026-08-31T09:13:27.579715Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6752feb5c75f1.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.789Z","timestamp":1788167573789,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6752feb5c75f1.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3308\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-cec\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3308,"size_decoded":3557,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a0033a685a1fa3f538972f39ae6beb5f","sha1":"8ce66c85c7176668adaf0317ae28d28a85f3c588","sha256":"d204754fbc77379a1b560dac6ef32646608f1824ab73a73cbd6c9dc538270d4c","sha512":"9c2701bb7a189f3a09610ba76b79beadfdb42d5f99f33713ac16397a4bde3aed3335dc9d0f9bbdc5c58dadca295dd26f1b4849ced17546b1d96be8610aa2995a","ssdeep":"","tlshash":"af615be3b5880ba6c20c4cb558400fdff6b87a205e84d27f9a604419ffd95e2c019a9a","first_seen":"2025-12-02T06:53:41.633272Z","last_seen":"2026-08-31T09:13:27.580529Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6319e9f6430e7.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:54.156Z","timestamp":1788167574156,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6319e9f6430e7.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3216\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-c90\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3216,"size_decoded":3465,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"204b8583df64e33b210622b1900f4a00","sha1":"319183c5d31852b50309e9cd086703241fd52258","sha256":"2ccc952ec70732f099b74272ef8e0088125b08e5b201e1fbf8c6383884327d99","sha512":"644404e2e3331a99a84d37247710e4a8bb86d1a6345b950bc44933f1ab557ccbb0629e4354d24a433915dbd54cbd45c17935a15c3d5731e0fe331351e2828e59","ssdeep":"","tlshash":"9f614ca1eb4ad793e454627091d19f1adf527110de9fd33c183f862a33e5e448a2c950","first_seen":"2025-12-02T06:53:41.543514Z","last_seen":"2026-08-31T09:13:27.581248Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-183-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.176Z","timestamp":1788167562176,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-183-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 14869\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3a15\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14869,"size_decoded":15119,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"1264c9b6ec0957a7987aaccacc14bcbc","sha1":"bdbc896b196c8287adfd6d4f97921d0601a62f62","sha256":"bed2903d3c0f5348bb9df7d8110a8342fec4f1d78c26cc1c20dbadc1c6f5a777","sha512":"82d79b129b0d595a1036ddf3b816d5d067a3e2c66fb9260d7546823e88ea8dd273ca8fa96846311bfccae52d64435db880aac76a376c291997eff1af288f207a","ssdeep":"384:FfyHZxlYJ0rPfwBcKggbneB9qzKCfLN7I2QPX8hxd3pRi5:xq3q0rPfqBggbneWHLxKPXqpU","tlshash":"2a62bf79d1b3491bbdc1107b74e70a9b6338146b289214ee2190f7290e2d7bd2b9dc9f","first_seen":"2026-07-12T14:30:59.967033Z","last_seen":"2026-08-31T09:13:27.581945Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":90,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676273a9dd539.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:43.452Z","timestamp":1788167563452,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676273a9dd539.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:43 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1422\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-58e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1422,"size_decoded":1671,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2a45fd7a9c322e13340e5e2a28a35367","sha1":"b40177f6ab986333f674ceda8f4444ff0e4dadfa","sha256":"df17ca3267e5be8873d83276b966ca5fd5d0f5846aedfe9e88ef89e2af2db51a","sha512":"abf7d72233fa9dd3395225ea01f28e173a8e9edaee525fc38af60e5a7c1a3945a2713a1bc12b7bfbcde83b00d06c35c109f8ebbb9eaff03e7aaacf91b875ddae","ssdeep":"","tlshash":"9221e97c471847732ee7b627ad1c0b0d55881dc429b706bf264d51401898b4ba0a656d","first_seen":"2026-05-09T15:05:47.152047Z","last_seen":"2026-08-31T09:13:27.582607Z","times_seen":819,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6763429ed442a.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:44.440Z","timestamp":1788167564440,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6763429ed442a.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:44 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2164\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-874\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2164,"size_decoded":2413,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eaba32ba22984df50e24b2dcabb7ad89","sha1":"a147a4a0c7c2c57e24ce528602ee53dc2c444570","sha256":"103f857982828e2c0cc5a5bc86d656c3f5b1574f50f530e39015c4243bb3c8a6","sha512":"88e7a4145bde2f18ee5209618733ce3fd9dd2d958add1ce8f1b1547faca63d4fcfa5fef4b6e0640c9e8acd65503d6f9825f33de9210b27da34773b55eabbaa52","ssdeep":"","tlshash":"7a4109509e606fa071f54c0c971c2f7976f8344f8e381db09aa6b5a6107e29880acb9d","first_seen":"2026-03-15T14:19:41.810407Z","last_seen":"2026-08-31T09:13:27.583471Z","times_seen":833,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-62c16af955672.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:50.135Z","timestamp":1788167570135,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-62c16af955672.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:50 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1314\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-522\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1314,"size_decoded":1563,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"59517eac1b0be346b91c55f47b8c25dc","sha1":"89de41bc26aabdc8b15ae0cf1cd1f721d101c75c","sha256":"2b02c661d3df6ba81bcc40ca6098ec7a0f13bfd9ca53747057e185178bbe2314","sha512":"b886fff45c361ae75bf8c3fbe8a35491254d8c8c724d418423e7d34241a46a315f63f97f518478c1546a071d5fee8d25095e034beb74bbf1478fa5feaaaedda0","ssdeep":"","tlshash":"ef21f86401d9da80fdca487bbaf122fe894381de883bb84e3e040c247128de5407b2e4","first_seen":"2025-12-02T06:53:41.495947Z","last_seen":"2026-08-31T09:13:27.584147Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793df2b330a.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.412Z","timestamp":1788167561412,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793df2b330a.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1498\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5da\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1498,"size_decoded":1747,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c720837e7c57e45e79b4d51919242815","sha1":"846043dc030d077ed111cbd6f21b5dc269161883","sha256":"033f4873c6b398f56601762585c2d8396f18facd868a4d67fa2b7cb52b809544","sha512":"99fb8d08795598d1e43a3a03841f475b8eb3ea30aee567bc31d34631e05b9d852eeedfb4eb4b7db29cd598fca2ce714fb6c5ff70b5fb9691475ed5fbd044f6c1","ssdeep":"","tlshash":"8f31c7cab7714fbcdf801724e07667d002cae4d855928cb220e916918ac46940b4baeb","first_seen":"2025-09-24T06:54:00.301767Z","last_seen":"2026-08-31T09:13:27.584807Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":294,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676236fe6ca29.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.417Z","timestamp":1788167561417,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676236fe6ca29.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1058\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-422\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1058,"size_decoded":1307,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"952f9a1fd6155503dcbb4d9d00a631fe","sha1":"ec900b440c837bff24ca78b16206de7d4bd6a931","sha256":"50a7d27c2c76673930835c6bab8b650af55682afc534bc29ebe47116f3a91816","sha512":"a3a02dc78dd095fdd892c7f93457a2b54f036c57c923f8c7dce8f86c3c205b3dc555a0647bd31395364251cfed7d6603ead2b4db91334b6d4ba5456879636b7f","ssdeep":"","tlshash":"7611d8ad81b858dbca823ecd305cb020008fc8d80e7361a7d984ad551d14cbaf00feb4","first_seen":"2025-09-24T06:54:00.362644Z","last_seen":"2026-08-31T09:13:27.58552Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":324,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793a5c8ff28.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:02.161Z","timestamp":1788167582161,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793a5c8ff28.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:02 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1274\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4fa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1274,"size_decoded":1523,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9bb6158e25be8a7ad4b5088dc8a58ee1","sha1":"3754f10090c2d3b44590593693022a0cc0f47887","sha256":"911bf53efc4eb7985974ae8d70af44be36066f63812dd519101016e6446fbe68","sha512":"b04b6c86d7c96fdef6e38f556ddb3e17e8da89ed7fd39829408bd0d38b399e148875c4bab35a7f9ba732fa30f6fc48991a50a755d2333d8001531c7e493185c9","ssdeep":"","tlshash":"d221c8987ae4806a885cc01637969fad995f988695d46e0472b04730e6e1ed66c0c447","first_seen":"2026-07-12T14:30:59.814717Z","last_seen":"2026-08-31T09:13:27.586207Z","times_seen":1724,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793d2057015.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:06.016Z","timestamp":1788167586016,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793d2057015.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:06 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1040\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-410\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1040,"size_decoded":1289,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"541b2ced716437b70c491f3c8c5e7903","sha1":"d26fb11cbb058e4a297bf8d060d1f8d154a11c3d","sha256":"39912ab51f75d7cdb3643870b7e21acc0b96504bd5d17a2dd807919f9c9ccb64","sha512":"f40977a7aa33a12c5c6fc08063d72d58ec1d1cf07c6c9517c704af2cf712299bf0e62bcfa118850ed160b22da2c23fb75a627e5d8cc167d339bc1181cf88a377","ssdeep":"","tlshash":"e111b52fd6979390c98e78f370de0a85461fc9b812ed00c7249b2ab904911b70d86ec9","first_seen":"2026-08-10T06:14:35.173257Z","last_seen":"2026-08-31T09:13:27.587046Z","times_seen":389,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-216-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.160Z","timestamp":1788167562160,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-216-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 96697\r\nLast-Modified: Fri, 17 Jul 2026 11:39:29 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1471-179b9\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":96697,"size_decoded":96948,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"4e9613841914f7451da5ff92646f34a5","sha1":"0c77a49dd2d11e1601a0805ee0028b02283fbab8","sha256":"210d6815d2449b88fc4cbda5721afb8381c13987dc55583dae321c0302e188c3","sha512":"e1aee6f8461ff0ab5891d4181b27ff42d374fd3e4b4432981bc3ce534a1d7dbda74902916452abd90dc4382836e640b13b844a19f122667db02bab161a4bcba1","ssdeep":"1536:/0BS2pozynyWEvJ/9NErc9iUXyM7ZF7766W8TNpoRA6Sd2kJgb5mxnK:MBNpuyndMNHXL7CSd2k+ws","tlshash":"32930228ef206d83cb129f932fde91d791a724fa566d08260056b732c139ffb4ae4954","first_seen":"2026-08-10T05:37:52.112427Z","last_seen":"2026-08-31T09:13:27.587961Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":17,"dns":0,"connect":0,"send":0,"wait":34,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-184-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.178Z","timestamp":1788167562178,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-184-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 23955\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5d93\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23955,"size_decoded":24205,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"fe85211f728a3d0f9d09fe17d18d8b84","sha1":"72cb7676d5c4978192b6ee78ea1d623952de4327","sha256":"fb06862814bc32d0fe4f5dba6dbe9f59027ca1bb58f3ac3f82d5e1f8fb81228e","sha512":"cb3fb8f73607c7c6bdf02ffa2934b0d161656b68fc0c035024c015e1946e8761bd2d3109709c9d6c30579f1be89e1125f889983cde6747e9939f5194c62b1df4","ssdeep":"384:Fpp7p/bCR9vx+EMKlV/5Y9EdJJQZ6V0muCgtJUGgQpiE7MrEyaTqnWMd:F7p/ba9BlV/586JI6V0mAZgQ4EAYyaTA","tlshash":"31b2cf41759d26db53e1c80ebce02ddf22e89766b7e629ed6340adc0c64dfb11a1074b","first_seen":"2026-07-12T14:31:00.016019Z","last_seen":"2026-08-31T09:13:27.588731Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":91,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6753119c3c8e6.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:52.764Z","timestamp":1788167572764,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6753119c3c8e6.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:52 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1018\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3fa\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1018,"size_decoded":1267,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b9a985afd1908c3c8a2d8df52a1da5ee","sha1":"2b084def4d72151d76a3578e75077eecf0e0055e","sha256":"79488b99f2833b01ade6decfae98e6128b75fe6b87945c106dd8f78e88604cff","sha512":"b2ad3e508411930c9c937def2bbeb0cf4da905f0ebda551249d21fcdc81dfd3ab4cec70def91a8f5e8ae7d859f75d885c8daa059f9d0a100acf6880a40d38cbf","ssdeep":"","tlshash":"1a11c8cdddf76631826c2ab7203cc109a4466b1e89b5dd18c29b05e3734a6a5d80ab62","first_seen":"2025-12-02T06:53:41.440219Z","last_seen":"2026-08-31T09:13:27.589477Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676210309f0ff.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:53.505Z","timestamp":1788167573505,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676210309f0ff.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:53 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1628\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-65c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1628,"size_decoded":1877,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"eedc9824e3bc01025387b28c59379314","sha1":"27f5cd84fad05167fbe0003c14fb91430d920fe7","sha256":"c94a326ecbae5c81e62aee9386c5dc0dee9009a3231df8a189598122cad4dce6","sha512":"16d3d0a69ab551b60592ed116e1e7fa230009b9e5e3e1af3e09d5f8e160a685716290bf7bb76a070ac12d0822ccc8915ab535ac19fc465dff0eb36075267bd49","ssdeep":"","tlshash":"03310a56aaa648f5810d8cb73e1e1ed84f92d3629dec266004271150a69bc7237c5a0c","first_seen":"2026-03-15T14:19:43.181669Z","last_seen":"2026-08-31T09:13:27.590223Z","times_seen":844,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6319eace83e4d.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:54.149Z","timestamp":1788167574149,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6319eace83e4d.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:54 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1176\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-498\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1176,"size_decoded":1425,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c44b7df4edd951439ce788c3d806a7c5","sha1":"36c0d0ef7c4767e9149c9f3a13b9148ff28ea927","sha256":"5ee41b10bb420355db1960347501ecc80110b5959e2ca4ffcca75acc91685711","sha512":"f7f600f5462d00a0b8caa859125f923da7aec44ba41e7f61aa4489d7c309f894949e0358ea313c5ba796869bf6a3ee4b3dff958c5c2d4b7f19ee75b021f398ee","ssdeep":"","tlshash":"3f21b778c3798483f9799b1c90a8f90684e2684874d3daa48fc952682c3518c13779c0","first_seen":"2025-12-02T06:53:41.421518Z","last_seen":"2026-08-31T09:13:27.591019Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793d5037144.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:00.506Z","timestamp":1788167580506,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793d5037144.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:00 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1210\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4ba\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1210,"size_decoded":1459,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1dec0494feb72d3ca0eb4712b01d7e61","sha1":"09ce831e418fa9b47fa0813249b5a64525f5dc29","sha256":"e988097e43392ca211c6a23cd58745fecf1fb09b8712180402c32ae739a6ea7c","sha512":"b4c67e14910909071565914c37752919e19690df34d90178dab5c2d293bc8c9194afb0c06764580763026f72ff68ef135315060e3a15e66307a1867069ac7b25","ssdeep":"","tlshash":"e0210aee30776d98b44c69b03d6bf64618400c5d5c097373ba60861af09c8c73351acb","first_seen":"2026-05-29T14:16:16.559326Z","last_seen":"2026-08-31T09:13:27.591788Z","times_seen":1849,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-67371470ea677.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.649Z","timestamp":1788167561649,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-67371470ea677.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3670\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-e56\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3670,"size_decoded":3919,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"76088e85e54091f55de8cddc8c8047f9","sha1":"7acecff429b4e2d638d636406317cc47fa97c00c","sha256":"a64f1f26efa18a11f88e22d182183cd455bb85d94840d9479328d5a35d1f3ff9","sha512":"79fa6b62f5b779a33d4ec18a8c3fb5b4966c7821829cad3196fcdb5d3fca47ce90d80219b9730a90a98889e2bf3c454cc1fbe5d03b923040a1498a8380ab0339","ssdeep":"","tlshash":"a9717e6297907610cd4e453069f10e7ef6f9bbf049d18dba92c19199fb37ac0d89d047","first_seen":"2025-09-24T06:54:00.331596Z","last_seen":"2026-08-31T09:13:27.592557Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":220,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6760e7a25a357.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:44.455Z","timestamp":1788167564455,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6760e7a25a357.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:44 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1626\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-65a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1626,"size_decoded":1875,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2784fab2ee641a67a542d2ebe26f5b8","sha1":"4a683d21f007bfd0b5288882600c7b27eb42cbc9","sha256":"2f1d6d95791c897adbe25627afa3fef7b5190b84f5d947a53dc1cef231d89e77","sha512":"cb10cf2fe68a2e8260c67035ffcfa8daa41b57695dd7fb65649da3a9dc99503108b1d6c202b247ed5b3f8f3a6ad1696f3470006af7513bc9a692b9de612613ea","ssdeep":"","tlshash":"b0310a463a21d190996f18e7f707214b2c3fed32b80a72e56dc7007a60853da638a2b5","first_seen":"2025-12-02T06:53:41.309338Z","last_seen":"2026-08-31T09:13:27.593393Z","times_seen":811,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6763391a6949b.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:45.673Z","timestamp":1788167565673,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6763391a6949b.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:45 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1352\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-548\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1352,"size_decoded":1601,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b407d37a8b87044b5b1b62c55091c0f5","sha1":"8da2eb9c226316acf26074c274c72bd323901761","sha256":"1613614743635217999bb226b0af0a93727ae9e7aa4649c34a4bb6deb516f938","sha512":"ce11b1a1895036294e678b9ae960959ea6921896f5b71ae74c7f592990734ecb32d58dbdb338f6246d31b3250cb7ae2ae2d77d9349b226203ac7a55f9f00263c","ssdeep":"","tlshash":"22212bfb2a80120b549ca535a44ec6c287dbc68e5c3417c38486ea8ec21ff7f18d43b0","first_seen":"2025-12-02T06:53:41.318613Z","last_seen":"2026-08-31T09:13:27.594519Z","times_seen":1346,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676345a94a124.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:55.864Z","timestamp":1788167575864,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676345a94a124.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:55 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2232\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-8b8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2232,"size_decoded":2481,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d7a970c3cd3236f16602e56aa093fc0b","sha1":"440210983698ed0d12166e5ac594e38afe7ac78e","sha256":"13e7f0716b7bbaa87f0165094454620aaafffed668f17b1b4cfb890a6a60e8f7","sha512":"3e45283265da87fabd0d5c38c7432a501946b214a732deacf6cc96e243f181cd8b308d886e692c616a6e71942fbccac1f5abfda5c82eec971c8a54abd2493d67","ssdeep":"","tlshash":"0b412b59f8c839e51060dd22d4ce4daf9f3365a8b5a49adb4788869aa5208cc7141eb3","first_seen":"2026-08-10T05:37:52.202946Z","last_seen":"2026-08-31T09:13:27.595421Z","times_seen":872,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6761520eb1315.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:59.472Z","timestamp":1788167579472,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6761520eb1315.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:59 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2414\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-96e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2414,"size_decoded":2663,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7edaf046541326eff39a995e26f8819c","sha1":"2a98468e84ca955151b432a728c7ff89778b2d64","sha256":"cb3baa69f46fbd57d1d2b29be96cc2cdfdc091aa6b584f48a84ef60ea333377a","sha512":"b2687def74201cda8e33868a7bc67ea14ffd4bfaf3aed322bd4e2889ee1ee4b7d138b38da88a9e94fecd7538fed3ba25563b918849d761845e095add33988b41","ssdeep":"","tlshash":"2e411a8a97a315b657d98c0cd2445f505b3811ccb3e0c94b9baa8ee783c1da9e0a9a30","first_seen":"2025-12-02T06:53:41.628579Z","last_seen":"2026-08-31T09:13:27.596298Z","times_seen":833,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-218-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.166Z","timestamp":1788167562166,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-218-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 16233\r\nLast-Modified: Fri, 17 Jul 2026 11:39:31 GMT\r\nConnection: keep-alive\r\nETag: \"6a5a1473-3f69\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16233,"size_decoded":16483,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"676009113f7cdcc0f2f5886ee6c922b4","sha1":"0dea2bfb124733567a313f83f86888320ef31e7a","sha256":"8dd6ee1aae86bc451455b5d4b1f981be8aea47704210b8b84639f9588e285f23","sha512":"84eb7b7670a70705e9ae3aeddcb229752e71abf2279d231b5f131247a8dd30b45cee511af48c4ca826506c76e177b37b5d28d93cb216275d92c9c8f0d6a40eb2","ssdeep":"384:FzKEJ58+8gk3yAVd0ZC+2tZBqPHNp0Nt64n6Qk:pKQ8uk3v0ZoEPTat64n6Qk","tlshash":"9e72d0ac7c184adfe1126c50da2978dc9b19c79ed6330ec7a8d1d50f184790c7aeed0a","first_seen":"2026-08-10T05:37:52.075736Z","last_seen":"2026-08-31T09:13:27.597173Z","times_seen":1851,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":38,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6763461c74141.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:57.264Z","timestamp":1788167577264,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6763461c74141.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:57 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1140\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-474\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1140,"size_decoded":1389,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ca7d8f7653a4fe068aa0d1e983fcc881","sha1":"f227b13abddd844659e79c097ab6db150a96efd9","sha256":"d0d9c1972389e446f395df1f4e14496ff90f5aec3c0135a4586a37f8af986bdd","sha512":"d5f588194271ab5d30ec444590afb8f697f2b589f9588b98b10c0e7a155438ac52debcf3bf6c0d23fe1c24720e86fcb19dbe4b12a67bf406f88e9fb2b39b610a","ssdeep":"","tlshash":"4721f93d67b985c4cda1307e7fd5059539ce038e022096711580d9dac3caa42913313d","first_seen":"2026-03-15T14:19:41.960208Z","last_seen":"2026-08-31T09:13:27.387512Z","times_seen":1310,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676067811e3d6.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:01.570Z","timestamp":1788167581570,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676067811e3d6.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:01 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1488\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5d0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1488,"size_decoded":1737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c3d0bfc867f73360aae7a15e4c6c0e3a","sha1":"9bc73aca725fe9042c55d2a3ac80f2305b310fc2","sha256":"31c4f5f4e147ffc0a2ce1705226388c08646f90c2ee2e174e65e86863fa311f2","sha512":"a88d8f4c7f4e136c7f684d314837b3af46e5c399c33628782686987aaa04ed9fd92044fcbd035914e61be9f15b8518a93ecdffd165bf04bb050557c52d137bae","ssdeep":"","tlshash":"c531e916ec98837baf02a593c2866d2e9c0724d8cb2061097d6d021ca67a41135af9b8","first_seen":"2026-03-15T17:02:17.220347Z","last_seen":"2026-08-31T09:13:27.598117Z","times_seen":838,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6760735a66067.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.408Z","timestamp":1788167561408,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6760735a66067.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2632\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-a48\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2632,"size_decoded":2881,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a9c527bb0879407f2b6cf3f60f2ab345","sha1":"537b9bcea8c666e9c41b3e6812063cda7eabfdeb","sha256":"577f7bd7d8f18ad084efe8ab063dbb5fec7c84df007e88a54494f1b39945bb79","sha512":"a85862edf19f6ccbfcd36d42d4b04200299b098032f33638dfe0a67059089fe1a2fe7b2745dac3ad5dfee7a7f0baa23b6245f104dbd533cab324184e17933ebd","ssdeep":"","tlshash":"4e515c17e92f072e703d83d943a7f70c064874e291a1bdee14b4f4a45896235ae9c221","first_seen":"2025-09-24T06:54:00.216269Z","last_seen":"2026-08-31T09:13:27.59902Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":274,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-227-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.153Z","timestamp":1788167562153,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-227-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 14778\r\nLast-Modified: Fri, 07 Aug 2026 20:09:06 GMT\r\nConnection: keep-alive\r\nETag: \"6a763b62-39ba\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14778,"size_decoded":15028,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"ada2c7ab17d9ee127c935ba5e11fca8e","sha1":"04ad71b94965d79148055e75230ca9893ec014dd","sha256":"aa7c6c314fb35d8ef344470cf52c1a92600393d147e3ecea8467bd36457a9ea1","sha512":"469e96cf6a03143e4cd34f1bcc6c35287929113799e204135d1d2c9c0961df3e157199fa0f614f63109417c96f5a6f30b2373305d63133fefbeec2d3045f817f","ssdeep":"384:FRJl+HzV3CIY7yjqwji5i46vAdjt+5ZuSivPC3vbTVB7NzG5:PX+HFCIY7yjqS7eWu4vbT/7Nq5","tlshash":"5062be742a3ad8098c5f5aad3fe25c5f89e681d2873f5236db519f01a1e0f0e942b513","first_seen":"2026-08-10T05:37:52.101129Z","last_seen":"2026-08-31T09:13:27.59987Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/themes/summer2026/css/style.css","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.138Z","timestamp":1788167561138,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /themes/summer2026/css/style.css HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: text/css\r\nContent-Length: 1953\r\nLast-Modified: Fri, 31 Jul 2026 22:33:43 GMT\r\nConnection: keep-alive\r\nETag: \"6a6d22c7-7a1\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1953,"size_decoded":2200,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"86f7d96f904c3b3f626cc4662b9d0134","sha1":"82935a2f2b522bb6a9a660bb1ec6f11527f13c8f","sha256":"dc5f8191daf9ec190e35ce400167338e3e9d88cea21e51b979f1d527d3a09886","sha512":"54078f4aa09301f3bc3e20feb83937e12289d3ea46030e76ba6281f95d0d3a3d6c100aadeeb82924b635bd822684d60a87eb5e061fc25b9d953c0d146769399e","ssdeep":"","tlshash":"2241d04652c9530df4eb8495770153da67fa7853fb261eb9f2a8d6f39b821c343122c4","first_seen":"2026-08-10T05:37:52.049764Z","last_seen":"2026-08-31T09:13:27.600801Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":30,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/k2riw54dhndi.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.910Z","timestamp":1788167561910,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /k2riw54dhndi.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://casebattle.id/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 418325\r\nLast-Modified: Fri, 07 Aug 2026 20:21:36 GMT\r\nConnection: keep-alive\r\nETag: \"6a763e50-66215\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":418325,"size_decoded":418590,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"fc1c536b72957316ae68032687021956","sha1":"5a0db32bdab3e01b94855cb253f382d33e8289e0","sha256":"346b8844618f6f192ad526cf9bea66b26a54961e662c05d224bc47be5146b56e","sha512":"69e0708ee6ef2cdd1b26a84fe872270ef1cc7f3e573b89ef35f91f10e6e174b1c7915952be34118b1601c5ee08951a31780296a4130b0e556611056762b52724","ssdeep":"6144:dUPvDRSWtDuXqrMaIXahPQMWWxm7xzkuvipIMm6L:di8WtDuXOHIXahodxzksiM6L","tlshash":"7994c5713bc1a859539b8fb7b21bb8e5fc2e08af2c540d5bd240fd60759192afae1530","first_seen":"2026-01-21T12:55:04.521414Z","last_seen":"2026-08-31T09:13:27.601856Z","times_seen":1879,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-156-back.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.182Z","timestamp":1788167562182,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-156-back.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 89064\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-15be8\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":89064,"size_decoded":89315,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"dea9555c0f83b87f0e8823f25d17b92e","sha1":"9838bae895ef9a157e8162c58c9889d73bb6a131","sha256":"1e062e7f84c98a0ee9152f79c8b7c7a8496f75f870e9004b8eeed948d1ac188e","sha512":"5582981895883ce3837a7d7a0fcb83a46c88f81b18b9d6094985960e81844cb6601add8d9effcf2140dd8f7ae2773b2b0f88de0ceb8aab8314ec872ed9f29c81","ssdeep":"1536:uneRoKr1IbKKZCQeDY6M1M7tQSvpGF76Vrvro1Puau1G2YV:nRoOim1dzmSRbVzro1J2YV","tlshash":"d2931298c2c52d28d926515db2d1e933ef8fb09a8604f09085fdc51d56fcb43b6cbcaa","first_seen":"2026-07-12T14:30:59.812889Z","last_seen":"2026-08-31T09:13:27.602757Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":122,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-615b06cd875d4.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.734Z","timestamp":1788167569734,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-615b06cd875d4.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2310\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-906\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2310,"size_decoded":2559,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"fae29d29e304a8a4f600c32092208264","sha1":"594d486e7438f8a010f99e33f5ba64516aa8509c","sha256":"7a239b87899c34959e7b367d00ba5faa0dc96c48bf736ad54dce1fa180d521f5","sha512":"e3362b31b425273dda8b0fddffbd248f05fb8ed0a15186798e39b7d3c9212346d137e6e3080ffca6a8ef7dc19df89bb2a999c0599e10576702c27f4b07d688d3","ssdeep":"","tlshash":"63414d14c18acd66f0105f683be137233c15b0d184d2dc86cbf90e69ed6c1268e9641f","first_seen":"2025-12-02T06:53:41.446883Z","last_seen":"2026-08-31T09:13:27.603609Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5c793b318a93d.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:55.238Z","timestamp":1788167575238,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5c793b318a93d.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:55 GMT\r\nContent-Type: image/webp\r\nContent-Length: 928\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-3a0\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":928,"size_decoded":1176,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f3e5ee5935ff4bf6200fed587cf86730","sha1":"852d8ac9c92450ff58f1ff0081ce9bb61494f4ed","sha256":"b9f2241774a2d4b18c09ac5785175f80cbe9fb1b8e0fc1841ea1268cbe7700a7","sha512":"34c51aa8c0ff75d49d1caff2adfa740e29ee4893cdd317b646582f6acfeb32182b4bdbea352678cc8e29ef0dfea128a915c93fea9526752ff63920750b5bf658","ssdeep":"","tlshash":"42118456fea6c608e7c4acfd0a128f4f66d72a5822c61e109af285c085b93d457c3e22","first_seen":"2025-12-02T06:53:41.538009Z","last_seen":"2026-08-31T09:13:27.604492Z","times_seen":1858,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-65732ecc626fe.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:13:07.390Z","timestamp":1788167587390,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-65732ecc626fe.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:13:07 GMT\r\nContent-Type: image/webp\r\nContent-Length: 3076\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-c04\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":3076,"size_decoded":3325,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"59fea73597358c85a475c1bd1cbb66a2","sha1":"6cc17f33bbb7296d0bf681a67da735733ce3fd1d","sha256":"9d7eae71df7e2795b7bdae94a3aa9673a48504a7dcb97789993ef823ad0bc8fe","sha512":"5c565a9b0eea7f10f6a9eb487873b57b180961c61cf054b2ae7d827dca25647d5441e2b84220d279211d8e9bd2692f713742551750c22405002c8dcb06d3db6e","ssdeep":"","tlshash":"ac515e59b36a275df8134c71d0d09fb6babb6b34cb46b718c6a8cea1779c1c091060c9","first_seen":"2026-08-10T06:26:58.510747Z","last_seen":"2026-08-31T09:13:27.605409Z","times_seen":160,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-31T09:12:40.751Z","timestamp":1788167560751,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:40 GMT\r\nContent-Type: text/html\r\nLast-Modified: Fri, 07 Aug 2026 20:20:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a763e20-225fc\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"AOS:2.3.1","description":"JavaScript library to animate elements on your page as you scroll.","website":"https://michalsnik.github.io/aos/","common_platform_enumeration":"","icon":"AOS.svg","categories":["JavaScript libraries"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":140796,"size_decoded":38246,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2993)","md5":"20d30e38eabce4ae9a13c949af5a7752","sha1":"d50879c0a8bd18bb05d4a92719d2807140851a8b","sha256":"f16a8db3915ba7b979ad54abb36ebc42bc467de99e4885fc7ea550791e773e2e","sha512":"886451965c45783e9d13a029ebae25b160057d5d1b19b706f10e9b2206139af6db39cddf47d64ccdc5e52acb5c6ea23da262d6638472fd5b6bdd1f554f20dd7d","ssdeep":"1536:rV9NDIW2O0fs25+Ur2XQvMSSK8SfXIXIVaA:ZKPr2wD","tlshash":"48d30a7193f910ab61459389da742a4b3fa040fbfa63411473ad1fc9afa3cd38537a64","first_seen":"2026-08-31T09:11:42.91634Z","last_seen":"2026-08-31T09:13:27.60629Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":43,"connect":33,"send":0,"wait":67,"receive":33,"ssl":38},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-6735fb5a384e5.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.398Z","timestamp":1788167561398,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-6735fb5a384e5.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1474\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-5c2\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1474,"size_decoded":1723,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7756d709a8cfdf931ae0dbcfd99e8e10","sha1":"ddeb1a3fe9820dfc432663098761e39329ca8544","sha256":"45fce6a4d828cc8f819456398ca687415f4e4a78663580b93ada765c143b4bb5","sha512":"27a9b1a651a460d442a0c9f86f5e4236f224ba2755f20f5024d054e6cdb52d96c32c60b97662809ed18078a5c5cecc27538e921db9c1fb24f6a37b1fe5a867e6","ssdeep":"","tlshash":"1431e95711d20c40da6f3050bb7ab381b62c288690d67d58baf095a265314ac7c09e80","first_seen":"2025-09-24T06:54:00.321418Z","last_seen":"2026-08-31T09:13:27.608565Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":223,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-676187fcdf76e.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.406Z","timestamp":1788167561406,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-676187fcdf76e.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: image/webp\r\nContent-Length: 2174\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-87e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2174,"size_decoded":2423,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 65x65, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3772ef828986b33b50fe2b4bd7468613","sha1":"c03989913bf4f40839a008f81bfd74c4ed747aca","sha256":"ad93df1535469f5a711cdc65ffd25f0eaa3b03e83260a01a48d2960f5352ef6e","sha512":"98323d82dfac6acb65af20d4c3948a498a4c75d231793efc39e72f83126bcc45bcc66888d2704826b58b0a9975aebd1eb9ae6c233fbe6c88d6ed2f5a2695fd63","ssdeep":"","tlshash":"2841090e34ee853085406b77304e861804ae58aec014ede5d3564b1ec52bdedb5847b9","first_seen":"2025-09-24T06:54:00.327377Z","last_seen":"2026-08-31T09:13:27.609578Z","times_seen":1866,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":156,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/caseImages/case-158-front.png","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.190Z","timestamp":1788167562190,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /caseImages/case-158-front.png HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/png\r\nContent-Length: 20236\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-4f0c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":20236,"size_decoded":20486,"mime_type":"image/png","magic":"PNG image data, 220 x 208, 8-bit/color RGBA, non-interlaced","md5":"c32c452963e03719991aa7c2d676e047","sha1":"fe434b7243d4cc70ef32d685f960e5db465adddc","sha256":"dd7bf8a1181e002f49ee5fc4e6ab832a0895c21d16b3458bf6c48c6e9b2ead53","sha512":"ab083d156f2db5f317af8b3df0911182b68739aaf2ea4e33abbe439a4cab06f716b0f317c992d3276e6d02169bb4afe375735b66271f3b5b41a3430ac68a35aa","ssdeep":"384:FOyS3IRQ23u098yQuogBs1SuZU7eSGFs+yktmyE0c2N521PjYzl:h398koMs8u+qSGG+Kbf20jSl","tlshash":"8892c0aad3f3611d465676ede3049ef6f062ca15aa592f83585200adcbc4ed7e00784e","first_seen":"2026-07-12T14:30:59.893193Z","last_seen":"2026-08-31T09:13:27.610571Z","times_seen":1853,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":139,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-5e8f2cba72852.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:48.205Z","timestamp":1788167568205,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-5e8f2cba72852.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:48 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1026\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-402\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1026,"size_decoded":1275,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"cbf310122e65d06d3c92bac6058797f0","sha1":"e87ee66ea553e67fa4a32ea6299a9b7a679581fd","sha256":"54238bbb3838da5b3f26e0f850b7ad7d67455347c09aee94b0a37c34efbe8a39","sha512":"e4e160254d2f54adb9b119f8b09eb67cbe2124e012444c83c4c2813062e723d7b1b2c8da647c4d1885269151934b17f0fea6eb985bdd275c8990dedd26528b63","ssdeep":"","tlshash":"a911acf5bfe908d6c8007575447f7300c55708276dec5581d138655f044571ba11344f","first_seen":"2025-12-02T06:53:41.373664Z","last_seen":"2026-08-31T09:13:27.611585Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/js/isbot.min.js","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.365Z","timestamp":1788167561365,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /js/isbot.min.js HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:41 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 2845\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-b1d\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2845,"size_decoded":3106,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2520)","md5":"936628f48ed2e266a67d09a7ca68b234","sha1":"76f3a2deda0106e8131080fab43679a5beebc4de","sha256":"6faa3faf7c21646a25508cf79521e317246b428433641ad6faeff27c1c8511bb","sha512":"d7822d3955afb58d6e50d8ca669e9ff8559715954279d0891d4bc80d1ca3130d5376a48102b515b110e9fca478f99df887459f78b184d4e33be2fac82d6cce3a","ssdeep":"","tlshash":"e3511b7f25d8e405325e2c4d22b792867b7e9610c046f014fa74c95d70588efc267f47","first_seen":"2025-09-24T06:54:00.330155Z","last_seen":"2026-08-31T09:13:27.612523Z","times_seen":1866,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.685Z","timestamp":1788167561685,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 26 Aug 2026 10:31:22 GMT\r\nexpires: Thu, 26 Aug 2027 10:31:22 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nage: 427279\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":49133,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-08-31T13:29:45.200702Z","times_seen":335992,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":40,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/img/svg/case_new.svg","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:42.012Z","timestamp":1788167562012,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /img/svg/case_new.svg HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:42 GMT\r\nContent-Type: image/svg+xml\r\nContent-Length: 1998\r\nLast-Modified: Sat, 27 Jun 2026 23:44:52 GMT\r\nConnection: keep-alive\r\nETag: \"6a406074-7ce\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1998,"size_decoded":2250,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5fa0fc159287f97cced8e84993a11fe9","sha1":"a4b5245b7a6a820b6aa7230cbf58d290f4f9e981","sha256":"a30c3d3c5ee552c7073e25af1d0397908e8b73000b568883954019eefb39b1ed","sha512":"b357bcff804dedcb8f636d0ad41e57758c944d8b8e68df56e0ca0e4503bbd5e362b5b39b9585bef498fb1e46210c861dce8c200f5f919cc702e601631258547c","ssdeep":"","tlshash":"8b4194f2d3e52c25f44c87d4c6246049be10248be191e3f4f4ceae493f224e2889c954","first_seen":"2025-06-27T04:58:45.862319Z","last_seen":"2026-08-31T09:13:27.613399Z","times_seen":1912,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"casebattle.id/cdn/img/items/thumb-65f2bca034ddc.webp","fqdn":"casebattle.id","domain":"casebattle.id","tld":"id"},"ip":{"addr":"2.27.5.56","port":443,"asn":12576,"as":"EE Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:49.901Z","timestamp":1788167569901,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"battle.tel","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 27 Aug 2026 15:08:57 GMT","end":"Wed, 25 Nov 2026 15:08:56 GMT"},"fingerprint":{"sha1":"4E:9E:C2:77:F9:B3:D2:AB:14:03:37:DD:80:25:C2:54:3A:59:53:8D","sha256":"30:E8:41:80:D9:0E:0F:78:2C:6B:A1:5C:FB:37:24:DC:65:32:AC:BF:E9:B6:BC:8F:44:D5:D7:7E:CB:6D:E3:12"}}},"request":{"raw":"GET /cdn/img/items/thumb-65f2bca034ddc.webp HTTP/1.1\r\nHost: casebattle.id\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://casebattle.id/\r\nCookie: uv=mth0spi0-v6jflzsh\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.18.0 (Ubuntu)\r\nDate: Mon, 31 Aug 2026 09:12:49 GMT\r\nContent-Type: image/webp\r\nContent-Length: 1546\r\nLast-Modified: Sat, 27 Jun 2026 23:44:51 GMT\r\nConnection: keep-alive\r\nETag: \"6a406073-60a\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.18.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1546,"size_decoded":1795,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"caef7a99eaf37da19470354dcda2eec5","sha1":"673f8ab585469ca1162bb1db45893e30e18ea2e2","sha256":"05e69e6675b454a1c498bc8fb52c274443e6081a1eb3521017e1f27615110909","sha512":"1bf87c866f15379c19821ac296e5d6c007caf32fbf561b6f55cbc6e409e706eb1e7b79c2535f3aa6edf38aa9f9ce85a77e7a67600d0470356dd3b2c62226cb43","ssdeep":"","tlshash":"4b31078ec429a39a4c2c9c0dda180ec781c8802f3440ee9bd5bae54d1b3ebf63111290","first_seen":"2025-12-02T06:53:41.410429Z","last_seen":"2026-08-31T09:13:27.61428Z","times_seen":1860,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-31","alert":"Phishing Block","trigger":"casebattle.id","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-31","alert":"Sinkholed","trigger":"casebattle.id","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://casebattle.id/","date":"2026-08-31T09:12:41.686Z","timestamp":1788167561686,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://casebattle.id\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 25 Aug 2026 23:02:32 GMT\r\nexpires: Wed, 25 Aug 2027 23:02:32 GMT\r\ncache-control: public, max-age=31536000\r\nage: 468609\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":27401,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-08-31T13:20:21.230658Z","times_seen":15274,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":29,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}