{"report_id":"d47193c3-9f78-47e7-9627-86d0a3a33ebf","version":6,"status":"done","tags":[],"date":"2026-04-08T18:00:02Z","url":{"schema":"https","addr":"market-dota2.cs2rate.com","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":0,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"final":{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"title":"cs2rate.com","dom":{"size":32441,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (537)","md5":"f234aadbab8eae1ce8127b6ec5742935","sha1":"88fa8056a29c639bad66edc6bbb157746bb75842","sha256":"696e009e5b55344f9e15f6b66f9d1b0ad49cf49f0eea9cab9386f84c43c2ef89","sha512":"e2d27f856a7399b49f0d6a73665e68a909ec34717bed9bb614877dc36938dc1d984b4f6aa595af2797d4bda3ea29bee4a52faa89cb3632174715cd429b935695","ssdeep":"768:2uip+zulMghr498WPDKgTRfaDpQiI82SzVD:vipEulMghc98WPDKgTRfaDpQiI82SzVD","tlshash":"fbe2002154f450a71143b086ec14be0e7de296bfde5b571930bc0eaa3fd3c55ca2ba28","dom_hash":"domhashf0d0fd0c30e270d8473124c4be677158","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"market-dota2.cs2rate.com","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":0,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-13T18:00:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"market-dota2.cs2rate.com","ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"domain_registered":"2025-01-29","domain_rank":0,"first_seen":"2026-04-08T17:58:46.293353Z","last_seen":"2026-04-08T17:58:46.293353Z","alert_count":48,"request_count":48,"received_data":6238972,"sent_data":22488,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-04-05T22:16:34.770209Z","alert_count":0,"request_count":5,"received_data":140606,"sent_data":2744,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-05T22:33:08.106483Z","alert_count":0,"request_count":1,"received_data":3782,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-04-05T22:20:18.514512Z","alert_count":0,"request_count":1,"received_data":22765,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e543256c480ac577d30f76f9120eb74","sha1":"d5d4cd07616a542891b7ec2d0257b3a24b69856e","sha256":"eb045d78d273107348b0300c01d29b7552d622abbc6faf81b3ec55359aa9950c","sha512":"16a332e891e86030aa9d08ab032fe026c4d4857b64902c386f3ede705373ecf9206f58d712a91a07a63dcbd14f133ab48571bfeb88927995224b299916af8fa5","ssdeep":"","tlshash":"565000000c000000003c0000000c00000000cc33030000f0c0000c0c0c0000003c0000","size":9,"data":"","first_seen":"2023-03-07T01:02:05Z","last_seen":"2026-07-22T03:19:29.978677Z","times_seen":98675,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.appear.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","size":4424,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-20T06:27:26.653978Z","times_seen":754,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/main.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"4496d502f86a370bbeaa224be3e2f760","sha1":"8c29cd31e31c9e6e208017af882bb5513cd56308","sha256":"fd639205ca25000e0f031e54f2d9cb4f868fb551368c6ba0e4a932c79f26d695","sha512":"f4a7434e183cfbff34918168d148ba8f19f79d0b75fed1fd3684a61b4acb8efd7be7b75b5634d3e234964e1a4d30683dc510bb6da0bd3a82a9836682b55487da","ssdeep":"192:WIQrrHbAT3Z2DJsyh1XfEqKNTQR5dbutgYoaHIp8QWIBZ/c4N:WJr5XtKNTU5dbutFpHISs/NN","tlshash":"ac126349731a103e51ef3324993fc645dbbdd061c207a1bab87c4968ab50b2d33869be","size":9374,"data":"","first_seen":"2026-04-08T17:58:55.298949Z","last_seen":"2026-04-15T00:36:00.190391Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/bootstrap.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-07-22T00:26:25.481368Z","times_seen":18652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/wow.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-22T01:39:44.884062Z","times_seen":13743,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"bcb021e558fb4cb6382caffd5fc784a2","sha1":"955e34dde1baf806860078a7d16a17de9d606bb9","sha256":"024ac15423cb31b344ea32bd1af96da04c731b97a4899d0888cca4483b79f519","sha512":"67aed23639f0ec742d39c06613ead0517e21d3c640a8bf57e0031f8423345b74541e65ff6d3f1906e0c2ae4ebb866737f8d38515e6a59bba045cb82826f99bbf","ssdeep":"","tlshash":"2801c05a799a0dc90542f02a8b842b0d3873887f331983173cbc1e3a6fd1824872e39b","size":799,"data":"","first_seen":"2026-04-08T17:58:55.322073Z","last_seen":"2026-04-15T00:36:00.202143Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.knob.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e708020309de1747a08957f691324ac8","sha1":"4df8f239f9a18fcdd446d2238e6c1b0e32ea52d5","sha256":"db5e38abe34e33f5d4e99c52a914c9f0fd16fc2918eb35dcea65d8b78fa617db","sha512":"361459ccf77330e31fd34e5799de09a27c0f7edcf83def7d99155c15e44371d0ad7e3bf8eb33c88bfed929271ba470ff5741c1d446fe6568a032ac3de155156b","ssdeep":"192:1H6pJasduw1Erl0D/Mt8AyQCkkS8Xg3t4lEKZnGduNImQhJiEkx:tvw+rl0D/Mt8A8kkS8Q3t4lOduNImGir","tlshash":"9722510f321521776bc6d626002f464a7933f92a3617821eb2399ce27d75d09637bf78","size":10804,"data":"","first_seen":"2023-03-07T12:01:33Z","last_seen":"2026-07-20T20:00:59.805113Z","times_seen":574,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","size":2771,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-22T03:04:02.847161Z","times_seen":16032,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.mCustomScrollbar.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"25c68168422e6e728f75ca84af6e0183","sha1":"bcd3a3268c0ab83f2396f483bba59d8082341ba5","sha256":"6e39ba4fad6e787f935f33ea8dac9105b1384cae25041a12bc108805c86598fb","sha512":"79eeb65ba6b599ed9f74b4df00d35dacc743adca3795d2337481f07cb7a42d9aa3a2930d2e2daad92542cea18cfa587c5aa2c8ed89fc4cd2370d7ee9f07972ff","ssdeep":"768:FQO8nAAe1l6bV6JUOxOyywsvQm77xjBFQ/Sx1iJb2G:Oe26JUOxOOUjBa","tlshash":"77031af9370538f752dbaf5e901b010963365966a70bc870383d8c782ff1e6522a7a6d","size":40179,"data":"","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-21T09:20:26.262945Z","times_seen":1227,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jarallax.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0458551a243e9bf81ee13d5408d24344","sha1":"328722616a2d716324ebab38c9c4ce69716b1e99","sha256":"c5d5c870a8cbf1cbf6ed11b64fcdcd3bd9469e757b27de7c43113026bcdac23a","sha512":"0c8f7c22f6bef7d86a76c77e7ad49ffd6f6225c9b3e63a2b9f1896af99e4aff91c29695a083c08b165ba006c57bbf5f9bbfcb296c2d8268c1d3f321c2d40e497","ssdeep":"192:59W5RO5CcsDpEgCpb5ck24ZBGz/1Nfw9+ThFOisY1QmAaVh4DPExc4HcBAsot6JL:PIRCYY7GxNfrMKhUPESBAsot6JL","tlshash":"3b62e79c3221321285fb72ed201f630eb635997481aac951b52cc9fd2f65e8d80f7f1a","size":15498,"data":"","first_seen":"2023-03-07T12:05:11Z","last_seen":"2026-07-21T12:06:36.3116Z","times_seen":1430,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/slick.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","size":42863,"data":"","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-22T03:25:28.790782Z","times_seen":108215,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.ba-throttle-debounce.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d79df4b4d417c8096ae500167e5dffd1","sha1":"0f36123058eab0c10113043afe21c7783e662c6e","sha256":"bdbebd724e0bfb51f5b69fa3d8fadd999d66f32a1f939611a6735580b7f4d2c0","sha512":"87e455e82c83c9846ece145e19d27689eafa710284716baa6640f947b0cf4f43834d1576a61ee92723d28fe326cdbd5c616e1b4d345450345160e6b24bd9db20","ssdeep":"","tlshash":"3d011099228a102253e1ae235b7b53cb972ae08439f954c9d4a0e4c0bd20c8eb30ad7c","size":730,"data":"","first_seen":"2023-03-12T18:07:49Z","last_seen":"2026-07-19T14:48:56.382353Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.easing.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"96550741c997fd57758441aa1759b21c","sha1":"28179d80067a74176c1ff7bb8028c12d7ed6940e","sha256":"e5c0fa2f30aef4faf40adcf7a23b18c01453066fe5aa0088b3344a37811d6b8c","sha512":"4c1158fe0f47fdbb97751c8f720a6699cf32592c254dd1f485d1de11b0815b6cee9e1c877d6d922d06a5ea6c88f1a7080e569dff9cb0062e1b6830a75c73848c","ssdeep":"96:Jg1rrQ4ZK8C2vFfMJjIck9kJqBs8RPjoGs1scfX+YGW3cSniU9kZwSalaKEcrTeC:JIvHK8FMrCUMoykjl","tlshash":"e4917fa877dea50653213470491b50ce62bd7a02cc1c9d6ecc4c8c9879a4a3b92a7f3c","size":4297,"data":"","first_seen":"2023-03-11T19:12:19Z","last_seen":"2026-07-18T22:47:13.086665Z","times_seen":1397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.countdown.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4e4074fdef00e6ccb52c770e486024a","sha1":"6ec0873db87fb3083e97555a36b6acb5b2b1caf6","sha256":"8d31da3ce6c7cbb620633b9b9453220b4170cccce2ff2c0172eddf2847c0a838","sha512":"ed793d3a2a5abe445f074bae5b9f41e01a5cf02b990b8c07ff178f6979e3ee64a806ddd85a773f79973bb47ebcb286c2c172d289767c540dbadc7094a2a42261","ssdeep":"96:UXpMQHIXWxspIb9TMlF9NQA3qAZRzblMJDi4jr2R2fylzM905qO2Jo1yVsqVMHTW:JQHrrTcF953zzb6rffylzM9cqO2JoQVv","tlshash":"f1c1604973f1232265aeb2105d9e4854a338e74be1c7445c78ecd6c87a258bc85bfdbc","size":5991,"data":"","first_seen":"2023-03-07T16:43:42Z","last_seen":"2026-07-13T08:32:16.980376Z","times_seen":225,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.odometer.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","size":12147,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-20T06:27:26.656173Z","times_seen":697,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery-countdowngampang.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"515cbb16cf8d4bd748bc224bfa076fbc","sha1":"894a32b4e2a5968b8f0def2c5988819e68c42180","sha256":"c1146cc6289cdec097dc2577b8b19c1645c1ce2a3c100f536a10e4ce2f098d05","sha512":"f022da1d21bde6944de32a0dcc24806c1a108cd0354a45a9f533558f09ec176a68a4c62484685e0934545acdd1fc55d3dab0e5d7f0881f2b825f54b527a056f8","ssdeep":"192:kxporzbmZCy8SiUQ2QsQ+Q7Oc6RSsPjqimJHe1YvjO:gD8SirFDN7SRAe1YS","tlshash":"bf32a01050720cf458b7d46b6bcb07d831af5067ad0aa9147dad72743fac81877eabd8","size":11898,"data":"","first_seen":"2023-03-13T14:15:12Z","last_seen":"2026-07-19T14:48:56.354534Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/vendor/jquery-3.6.0.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"e86504b92c4745b9315d7f4f9b73fc2a","sha1":"b9b4714b5c1cbc03d9444c9f60a17eecb8e0750d","sha256":"878796facbcbeadeddda79c14175bb3967519b61d1db46ae49a36b5dc84e5dd9","sha512":"b68bab355239d15d094c62bbe79cde78267f7636d15db229da584ce0d7276edb6d0844f05fb903d3f341ab5252004de893c9d9ba60d8a739e883d56695466491","ssdeep":"1536:b7/cnTfIbdDSRjlJTQPWVTagPShkMnJuxlk6WRIvQEtUK9G2CWKeYcftIougRuOk:bLd2oe9G2CWPtmK4Y3OFnG7KokA98J","tlshash":"4fb3b69973d63335864bf0b69c9fcd4df2b9595c23c98409a60cc5a6a830878877edec","size":107748,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-21T06:12:06.424518Z","times_seen":1340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T17:59:39.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:39 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 5809\r\nConnection: keep-alive\r\nCache-Control: no-store\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:3.6.0","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slick","description":"","website":"https://kenwheeler.github.io/slick","common_platform_enumeration":"","icon":"Slick.svg","categories":["JavaScript libraries"]},{"name":"WOW","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}],"data":{"size":29659,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (645), with LF, NEL line terminators","md5":"59ce7146a63368d59772e70fc90c6c7d","sha1":"1acd3ce4e00376a888f913a47d6806a2478ee07f","sha256":"8e9c2aa6ebee5304c1fffdf4faa21eefe3c9c368fe37e24ead153ec5fe1c0470","sha512":"039d69eaf302e64841a861555a9f27d4004ecb8ae84d99076a7b10f2d56ed9ee1cb54a327018b009f9225aeb17c6c6130fa3e71df22032953df800c606a53a88","ssdeep":"192:oWDyJTlnvnqTIZmwj+B0qovlx/eYjm65jfwlR7YmtlVJrsloyC0Up4Y7jQziU9YI:6pZZp+Flr27WbnXyv2735S","tlshash":"f2e2111290f5609b206b9093fc207f8a7da1d6dbc68e461b30bc47ac6fc6fd6c91b558","first_seen":"2026-04-08T17:58:55.318449Z","last_seen":"2026-04-08T18:00:06.751507Z","times_seen":2,"resource_available":false,"data":null}},"time_used":352,"timings":{"blocked":84,"dns":1,"connect":44,"send":0,"wait":176,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/css/bootstrap.min.css","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:39 GMT\r\nContent-Type: text/css\r\nLast-Modified: Fri, 24 Dec 2021 01:58:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"61c5293a-28021\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":163873,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"94994c66fec8c3468b269dc0cc242151","sha1":"ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad","sha256":"62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab","sha512":"190194d1f30c8b6dfcb80f9afdb75625fa5418a52405d81f15d8019bbd92510e817b25a3a18feda27d2d1231fe3921fd88fe037e1fbb1ccd08f5fe5e4742ffe3","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM","tlshash":"c1f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-05T04:27:21Z","last_seen":"2026-07-22T00:26:25.242768Z","times_seen":25654,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/csgomarket.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/csgomarket.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 13 Dec 2023 05:21:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65793f4c-26bf\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9919,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 106 x 106, 8-bit/color RGBA, non-interlaced","md5":"6ee089d3943319d06257c492f253d56d","sha1":"eaf1a11bab44cf647af787c762ab917d786a568c","sha256":"d4517f60917949192aab5500d84c0e222b15069af98364c1be9df748db7a2e8b","sha512":"0b11b44d46f71948c589c4aac86855d777e0f764d6f8cd14b8d2ac865ab8f8f758e60a371f28ae7f0be86380e155fca095c2b8d22f35e396e3fbc9cfe5732a44","ssdeep":"192:fkneQO4ICIx8HgAHj7/FMNpCN3L/N6orGA9x4Y0zCgDBjY4:MneQOtC+8HgADxfN7/Nz9evfDD","tlshash":"1c229f09f9217ea04d9fbf80beff62471d6f0790b20150797ed9d5a32841279c4391ab","first_seen":"2026-04-08T17:58:55.319294Z","last_seen":"2026-04-15T00:36:00.188091Z","times_seen":4,"resource_available":false,"data":null}},"time_used":783,"timings":{"blocked":734,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/marketLogo/skinscash.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/marketLogo/skinscash.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 07:20:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65377032-46f07\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":290567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"c6dc167f2e671ba8f232741a2d0be1ac","sha1":"512d01d5cf496d0e2aa6d4ae6329f5c1b4bb5d32","sha256":"8bebeb4781c0259d11dc6d460cf85a2f7590ad4b5608ae4150cb7229d655529a","sha512":"8bbff410b7411dd1d61308d337e39efa909971de894540936063c3adff4058d7cad29d299fd8a91df9874e40048ee086433628ce364519e8916fe9e7038a01b7","ssdeep":"6144:aUEFOklkGrYKrwtpHFzkI1jrSpg/w8HJc:mFOkKGkCwrFzbWpg/jHJc","tlshash":"a05412b38a035ce8f44b45b1e9ee1f8eaaeb179519f70f9ba7c0ad401cc21159c53179","first_seen":"2026-04-08T17:58:55.309218Z","last_seen":"2026-04-15T00:36:00.178397Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1909,"timings":{"blocked":1166,"dns":0,"connect":0,"send":0,"wait":43,"receive":700,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/marketLogo/csgomarket.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/marketLogo/csgomarket.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 07:35:26 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"653773be-24a1b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":150043,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"0ebace7cffa5d0bd5b84650a2e008ac9","sha1":"a3e35a16409996720dfab43ad632c4d3cafb0801","sha256":"89268015716ba331fcb71340ec073b4194747cc4bd99ec9636b1eb88fe97be14","sha512":"5ec8f5acfb57c77b992e5ba5732611b0eec30a8d06d34eae2af4f77c8a941b8ef3d48fd5bbf40ab589f1412396795322c2d4c456812cb50ffbf95499cda745bc","ssdeep":"3072:b1AvtCDQI0HqwMj9xcWRSJ4RCHv+J4ErYMAvhuthSZYr:b12tCDQdqwMRai8Hv+drZAvuhSZY","tlshash":"cae3e182d6638ceedcef2870a5eeafdc3b184708909a51fbdbe86c19714113bc155c69","first_seen":"2026-04-08T17:58:55.279721Z","last_seen":"2026-04-15T00:36:00.172175Z","times_seen":4,"resource_available":false,"data":null}},"time_used":906,"timings":{"blocked":354,"dns":0,"connect":0,"send":0,"wait":98,"receive":454,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/marketLogo/shadowpay.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/marketLogo/shadowpay.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 06:29:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6537643a-43ccb\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":277707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"2f2b9a734394dbf5f785a00d20ccafb4","sha1":"a85fdcb79bcf975915ec0d4ead8335827f9a40a7","sha256":"96007ab44addc56aff098433641290d4f6a600cd9819fdfc7092ee2565f0a54e","sha512":"f242cff5f1ecc321075c01eddc66f818c8b8e005dc7b94f7633c2ef38a81a6d3f30bc841225d41f8d7829d0f09bc1edcbfc7d91a3f58e83f39cd0bca574636b7","ssdeep":"6144:npk+axYdOpSt9YGfXOJQG42LNF3aYbiicPQyif17fX2IsR0J7Q:psydOpSbjfA942vJbiB4yifFX2B5","tlshash":"fb4412348836e56ccc031633e48d1f4ba4733565c5f913a89baca8c769c3e7bd8526a7","first_seen":"2026-04-08T17:58:55.295792Z","last_seen":"2026-04-15T00:36:00.173683Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2493,"timings":{"blocked":1210,"dns":0,"connect":0,"send":0,"wait":87,"receive":1196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/marketLogo/skinsmonkey.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.011Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/marketLogo/skinsmonkey.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 07:26:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"653771b8-1152d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70957,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"54dd252291025fa60f90eb9581211709","sha1":"c18a3314a7dbc3f21db8a563fd179f0c4cae3184","sha256":"f0028c6c73a0754edd727767248cb4b894772abcdae4f3509aca84d4c97eb52d","sha512":"810a80990dabf9e4fc3afc78513f9dfb74c9f041d07b7b859e2a77182df0c9609bd919ad13852e6468ed36367481eeb0bcf38aa92e773045c0f2680c5eccbfa1","ssdeep":"1536:ZIvj+S0sVqthtn1vbTaPCe/kJylLNZvaS9GCzL:W72cqDtn1vbePD9PZ9GC/","tlshash":"53639fcec2b0d849fc1b0a75dcbeca4c916c8e6063d86ed77f60ee16ae421775903598","first_seen":"2026-04-08T17:58:55.305788Z","last_seen":"2026-04-15T00:36:00.193046Z","times_seen":4,"resource_available":false,"data":null}},"time_used":649,"timings":{"blocked":391,"dns":0,"connect":0,"send":0,"wait":99,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/css/responsive.css","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/css/responsive.css HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 27 Jan 2025 04:56:40 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67971208-4db5\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19893,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"7007b57d1c9e54e0f2e68e4681871b2b","sha1":"9aff62c6a0cc6e2aba8e241cd6e329607537a578","sha256":"9d446c5380c966b8e1fad578c8db9d95234916dee2ae4755ee3a1cb6eb5fddb6","sha512":"a93baa6935131ed8e51c837f6e854ce7a0b5a7c5a4615f8e7af25fe173f10c2e01ec0aae60b614b4b69056bdd57c3633fec72ae2d51c4e85d3a61686096335ab","ssdeep":"192:Zvy0FVKnwhzd51MfqM2ICuDwjmJxMxUH2NER4deLZBAGTmY3CKRr57McEKfvxaZJ:51UA3142lsuZg57n7OORBq","tlshash":"3a929dddae84245c5302af9aeff81b659e5d64f3df8f00ed90a0560d90cfa3d61626c8","first_seen":"2026-04-08T17:58:55.278391Z","last_seen":"2026-04-15T00:36:00.198323Z","times_seen":4,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":88,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/lootbear.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.001Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/lootbear.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 06:23:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"653762d8-3246d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"39ad563df184908cd74cd24399be9227","sha1":"1d318696dbb70cdcb7370e50ceac0ce9a8eec985","sha256":"39ab19a4846c0cd05ad7a979228482f642bbc6602c08444c39313eb0b28a8537","sha512":"fdf4675bf603fd61440c1e362166bfdcb2fb3fc22098a16440bb2d189cfc55ca2e51227dd00290fc2895f42666e9c55ea14e448d66d1be2ce7aa0f7d5e758558","ssdeep":"6144:X5VIbblKtWernVrDwCxrnifCPb4CvxXa6w1sT8H9:X52N+nuWn+U8TD","tlshash":"3414d0b84ba7db94ea5a5077d9a6974479ac0422a0bc57e34714f056fcc227ccf3c2d2","first_seen":"2026-04-08T17:58:55.290886Z","last_seen":"2026-04-15T00:36:00.182624Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1472,"timings":{"blocked":927,"dns":0,"connect":0,"send":0,"wait":89,"receive":456,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/skinbaron.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/skinbaron.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 13 Dec 2023 05:23:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65793fec-3d9f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15775,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 98 x 98, 8-bit/color RGBA, non-interlaced","md5":"1e601ad5360d16889b7f52fb34eee144","sha1":"9df7a45cf691b5c090608966272cc54d0a9cdc11","sha256":"30bbf903da3e6b19132b7ff7336fb27b4667e529c84dded109d7f8739ff5ca9f","sha512":"a790b2944ba9806ced6e2b47916adb9ec522834a281224186f97a914e0185f103b8e7db8c6fde312039e52a3c1797fb9ec40434dfa781e68b03fe9dfb3d4eb91","ssdeep":"384:knEHOt9WxB59nQoYrt9KIcNkuSmALFKM95arO5l+45:k6bBP0omu9ALFKSUwT","tlshash":"9b62bf48b944bc385c5dbfc878ff30e71127cac46b036558ba9e641b1fa12bae05b8c5","first_seen":"2026-04-08T17:58:55.286863Z","last_seen":"2026-04-15T00:36:00.186093Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1127,"timings":{"blocked":1042,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/skinsmonkey.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.004Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/skinsmonkey.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 13 Dec 2023 05:24:52 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65794024-21e4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8676,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 184 x 111, 8-bit/color RGBA, non-interlaced","md5":"ac23210380ca53952461a7b5d705c9d6","sha1":"8ce2d0239c30fbcde82dce27d2d667218140e3f5","sha256":"f12767fbbffce2161cd6f81da146b14ff4465c95ff3042d2c77d4706aa69b4e2","sha512":"c2055d41be9d04bf368cd6a09bb8d4c2d5fc4905b354a08c6be92eb426f87481e59b7694a477a561d83a77810c7153fea89b1eeab0e5d63c6b5e746ebb6462df","ssdeep":"192:V1knSQO4I4lBnTADKFZ2u3MDfs02Pjgkkrh08vZDOxdKUC:UnSQOt4TTADju8Lo7aOOwxI9","tlshash":"42027d046d60aa40ae8dab206efce1260777df91df41a1057cd5ce2218e46fbcc57ada","first_seen":"2026-04-08T17:58:55.320085Z","last_seen":"2026-04-15T00:36:00.195834Z","times_seen":4,"resource_available":false,"data":null}},"time_used":397,"timings":{"blocked":355,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.knob.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/jquery.knob.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 12 Oct 2022 19:56:12 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"63471bdc-2a34\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10804,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (10804), with no line terminators","md5":"e708020309de1747a08957f691324ac8","sha1":"4df8f239f9a18fcdd446d2238e6c1b0e32ea52d5","sha256":"db5e38abe34e33f5d4e99c52a914c9f0fd16fc2918eb35dcea65d8b78fa617db","sha512":"361459ccf77330e31fd34e5799de09a27c0f7edcf83def7d99155c15e44371d0ad7e3bf8eb33c88bfed929271ba470ff5741c1d446fe6568a032ac3de155156b","ssdeep":"192:1H6pJasduw1Erl0D/Mt8AyQCkkS8Xg3t4lEKZnGduNImQhJiEkx:tvw+rl0D/Mt8A8kkS8Q3t4lOduNImGir","tlshash":"9722510f321521776bc6d626002f464a7933f92a3617821eb2399ce27d75d09637bf78","first_seen":"2023-03-07T12:01:33Z","last_seen":"2026-07-20T20:00:59.805113Z","times_seen":574,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":109,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/wow.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/wow.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 24 Jan 2018 01:35:10 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"5a67e2ce-20df\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8415,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-07-22T01:39:44.884062Z","times_seen":13743,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":215,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/css/odometer.css","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/css/odometer.css HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 08 Mar 2020 10:59:22 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"5e64d00a-e24\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"b0db2ffb579367350645c5cce8bcb622","sha1":"f52705958f241317f66b5ca2153cee1c1aa8b892","sha256":"6613bec6b1e7bf01e3507ca03d1f4baeeb321d13275fcd99ee7fc85f3025e89f","sha512":"4312b7eec24f918e3fdef8d00e35b3fcbc47477e4eae2f4299ea103e1926466d14d3b60634b539e26132abcf654de1ae13c40e47dc44a482cde7f5ce669618b1","ssdeep":"","tlshash":"ee71f51d1f60132463367406b7d927a0fefcb9525623e59db74aa44bcd03db9c288e17","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-07-19T05:05:36.72562Z","times_seen":441,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":69,"dns":1,"connect":43,"send":0,"wait":43,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/logo/logo.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/logo/logo.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 27 Jan 2025 05:56:56 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"67972028-1b12\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6930,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 140 x 83, 8-bit/color RGBA, non-interlaced","md5":"a7d7949c88fb8d7a4ac572cbdbe15fd6","sha1":"da315444358d1639f09706172de6a5997751749a","sha256":"0bafc8943d00549ae7bf60575b4223ae4e6c6cc9d47248c2456de8d0f3f0de64","sha512":"60d451e5bcb9983a8b5ef8a3e36bbb97bded637196e64c40822eadee017404c252f3c06c7b4fe37aed5babea4f8d7097c77c6ebcbcb6a75a82fa387588e4606d","ssdeep":"192:OSCknS4XCPcAPgD+msboUyMFGSNvDBN2h1/qL:xBnSekaUtGSNvt9","tlshash":"8fe17d0eeca158798884e6412de15597ab2f8f8182cae0f2d8ffcc530e242edd97c1c5","first_seen":"2026-04-08T17:58:55.301953Z","last_seen":"2026-04-15T00:36:00.195282Z","times_seen":4,"resource_available":false,"data":null}},"time_used":443,"timings":{"blocked":401,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/gamerpay.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.000Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/gamerpay.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 13 Dec 2023 05:22:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65793f8c-2d6b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11627,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 178 x 114, 8-bit/color RGBA, non-interlaced","md5":"2aa0f02216e32d5acff6080f3c8b3c93","sha1":"785ad5df3bdcb96b959558b6c0eb130f293f8f66","sha256":"2792ee5790be2ee07533678ec1aba00379a0b70e3d918bcab401407e4783eadc","sha512":"f97050418cf577f6d73fd9429870f33f36b28779e13bf86866bf8ccac791d57377294b7cbeb46af64d20265474cff7ca0eae098ddfaa4b80ef75af0caed963e4","ssdeep":"192:Ikn/4CXmKuYhpitNxqtu4OgLsvBTvp3LlorjWmO7aLXjCUePGMLG:Tn/bXmKuYhps4u4zIlJLKaOurPGMS","tlshash":"9b32be2cdc613d149e4affa55dd9b1230a7312809b51baa4bcee88552cac4f19c0f7e6","first_seen":"2026-04-08T17:58:55.285953Z","last_seen":"2026-04-15T00:36:00.188669Z","times_seen":4,"resource_available":false,"data":null}},"time_used":958,"timings":{"blocked":912,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/marketLogo/gamerpay.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/marketLogo/gamerpay.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 06:17:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65376192-2f56e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":193902,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"f44d7180d7ed856e108b1e17deac0dce","sha1":"689486af08a5af9f0af2bbffea88cdf54dc98bd3","sha256":"d62a84ea0b1e6c6f4f48df36d7ec1368464c443db67e4ad99ef7676ffbbcddce","sha512":"85eb6e1d00f9d30dfa4b959293933ef80e91434a908cb59224573a97de3658129dbfed4747186659bf10bb435850020ef324b62bb88c8bd3b8da2b8c94153f75","ssdeep":"3072:RUTxGkeHuh4tDRTszQsK3D7MGvNzQvkCFiaanHlXZdFYRljw41MRr/w/Hg:2fh4tDRTds4H5FzTCcaO9rFElv/Hg","tlshash":"d3140132984a5caedd173078c4ffe71d67e2062090e50bc76f6ad08a7e0f629da4547b","first_seen":"2026-04-08T17:58:55.30304Z","last_seen":"2026-04-15T00:36:00.173054Z","times_seen":4,"resource_available":false,"data":null}},"time_used":901,"timings":{"blocked":352,"dns":0,"connect":0,"send":0,"wait":49,"receive":500,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.odometer.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/jquery.odometer.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sun, 08 Mar 2020 10:51:44 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"5e64ce40-2f73\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12147,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (12122), with CRLF line terminators","md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-20T06:27:26.656173Z","times_seen":697,"resource_available":true,"data":null}},"time_used":224,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.ba-throttle-debounce.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.016Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/jquery.ba-throttle-debounce.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nContent-Length: 730\r\nLast-Modified: Sat, 15 Oct 2022 03:33:26 GMT\r\nConnection: keep-alive\r\nETag: \"634a2a06-2da\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":730,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (479)","md5":"d79df4b4d417c8096ae500167e5dffd1","sha1":"0f36123058eab0c10113043afe21c7783e662c6e","sha256":"bdbebd724e0bfb51f5b69fa3d8fadd999d66f32a1f939611a6735580b7f4d2c0","sha512":"87e455e82c83c9846ece145e19d27689eafa710284716baa6640f947b0cf4f43834d1576a61ee92723d28fe326cdbd5c616e1b4d345450345160e6b24bd9db20","ssdeep":"","tlshash":"3d011099228a102253e1ae235b7b53cb972ae08439f954c9d4a0e4c0bd20c8eb30ad7c","first_seen":"2023-03-12T18:07:49Z","last_seen":"2026-07-19T14:48:56.382353Z","times_seen":95,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.easing.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/jquery.easing.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Fri, 14 Oct 2022 19:20:22 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6349b676-10c9\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4297,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"96550741c997fd57758441aa1759b21c","sha1":"28179d80067a74176c1ff7bb8028c12d7ed6940e","sha256":"e5c0fa2f30aef4faf40adcf7a23b18c01453066fe5aa0088b3344a37811d6b8c","sha512":"4c1158fe0f47fdbb97751c8f720a6699cf32592c254dd1f485d1de11b0815b6cee9e1c877d6d922d06a5ea6c88f1a7080e569dff9cb0062e1b6830a75c73848c","ssdeep":"96:Jg1rrQ4ZK8C2vFfMJjIck9kJqBs8RPjoGs1scfX+YGW3cSniU9kZwSalaKEcrTeC:JIvHK8FMrCUMoykjl","tlshash":"e4917fa877dea50653213470491b50ce62bd7a02cc1c9d6ecc4c8c9879a4a3b92a7f3c","first_seen":"2023-03-11T19:12:19Z","last_seen":"2026-07-18T22:47:13.086665Z","times_seen":1397,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/css/animate.min.css","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/css/animate.min.css HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 27 Jan 2025 05:10:38 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6797154e-10c0d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":68621,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (460)","md5":"fa6a3e3b88ad89d1bff325ab4253cf6d","sha1":"8eddd0b77805f3ad672328f857b4604f73ec77b0","sha256":"6c64de789f3840fccb5a9e6df7443f46424345554811be987e658e4c7032e45c","sha512":"582d15056d30ee1ba9ee22119fceea904e762c447dd0301c7f9c51dce4dc69ff1632683cb8b8f851441cccb96f5f634993b3906d22efd654743dca39bdad626f","ssdeep":"192:LIQHnIwf2T/awfDZUiduG+MONjnbimZbHMxymDSVbyPiVEzfukrWL7XU+qLmfRvc:LIWDyffHf7SpS/fjf7","tlshash":"9863096929e1114466370a19c7df9f78263ce1631826ecfab3d2588bcf41fac63c9617","first_seen":"2026-04-08T17:58:55.276889Z","last_seen":"2026-04-15T00:36:00.175968Z","times_seen":4,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":64,"dns":1,"connect":42,"send":0,"wait":43,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/css/fontawesome-all.min.css","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/css/fontawesome-all.min.css HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 27 Jan 2025 05:03:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"679713a8-e783\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59267,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59081)","md5":"0070dd6914483b486b0eb4973408753d","sha1":"fffadc1932dde7598ce79907ae4d63b3b9e13e3f","sha256":"81af6e502b95e98bb0f0205671c030ee7b5fc958a7ff5ae7ba954f6f89ee8651","sha512":"aa6925c8cfe255a25241d198426215405bd41d13381522d81ae9ab4513f757530d7c0af14d07eb7a4f336a944bfa23e5ae8cd70942cb23ff70d9e9f4d5bc46f9","ssdeep":"768:PEh31mPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bh7VSzJ:PEyPxXE4YXJgndFTfy9/Q1","tlshash":"5b43fbb8e54c01cab732c44bef81b2bc61b6f73de5914d95f00e591c2ad26a811c5fba","first_seen":"2026-04-08T17:58:55.288862Z","last_seen":"2026-04-15T00:36:00.191848Z","times_seen":4,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":70,"dns":1,"connect":43,"send":0,"wait":84,"receive":1,"ssl":54},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/icon/fire.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/icon/fire.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Fri, 30 Sep 2022 17:56:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"63372db0-109d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4253,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 52 x 52, 8-bit/color RGBA, non-interlaced","md5":"7c334312fe2bfb835806a1b50c1f4c22","sha1":"378b48dd407e4ae3945e18a7c3391ade8bbed3f3","sha256":"c8622f39fdd2309e038fcc06df8b59b00ca288820162efe40e48afd390f09d62","sha512":"6fe17943bd6d78cf6e164deb803fcaf5f6d2e585495c2da71480f565d5604e0501c80810aa801b4502bcb028a1acd72c7df80583efecd6dba9e59bbb5b3afd30","ssdeep":"96:ASMxpOWmMFSuCIMwgnYEkX9LnptDw3daAa75nAyRYBjy6DJ+J2KtQB3h:ASshntCWgILnptDwoR5AKsvJ+oKtQBx","tlshash":"b2917e0e84c3a9b1058b21bbcfb371e2146e942a61e1703e2df661eb0b71796b874f14","first_seen":"2023-10-31T01:45:44Z","last_seen":"2026-06-20T23:57:44.878936Z","times_seen":47,"resource_available":false,"data":null}},"time_used":496,"timings":{"blocked":442,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/shadowpay.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/shadowpay.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 13 Dec 2023 05:23:04 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65793fb8-32a1\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12961,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced","md5":"747a6550b601fef13a5e19b96e3ab426","sha1":"922144e0b7985b3dddad0e8a2b6f04464f2e6982","sha256":"dcc9bcc3fd712858ee042c630ff8bdd96728bef65ea2ba69ca4afe1949bcf65e","sha512":"cc8db7e7386c1a8124b80f7b2558da2ae890a063bb973462b6a87f0acf97029bd5fd38e9c00634390ab2ea450baceea3e0018d67a23d623d1eb84a79d925b00d","ssdeep":"192:qknryO4IbXZaEUEyxOeMOu0c0Dj38pH7orc5SBnmwIdPhFtBrLhrEbzyvfZyqsOO:5nryOtbXo3jx3LDjeaARdHtLrEXyX1lI","tlshash":"d642bf66ba207da22458fc1e2efdd6b14b32d3c4ebc3f56662ba5c4290d31344c5d29b","first_seen":"2026-04-08T17:58:55.312311Z","last_seen":"2026-04-15T00:36:00.171059Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1044,"timings":{"blocked":955,"dns":0,"connect":0,"send":0,"wait":88,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/slick.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/slick.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 12 Sep 2017 00:08:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"59b7256e-a76f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42863,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42862)","md5":"d5a61c749e44e47159af8a6579dda121","sha1":"3b41b3bc956685015a347a2238e71db29dfa0dbb","sha256":"0c7178cc6ca34fb18e30f070a5e7a1c287b2d7ccfcba2cfdf06e0f46eda55740","sha512":"5ed98cb4311c373da3ede92bb47bce551e22c30683ea8fc55097baf99abe1e0702b24de48f8b9241047cc1e4364158f5a343e4e8fc182e8866db4e99ccd7ee6e","ssdeep":"768:4rkkX123A5YHi6pWzYdlNWYcx16nnYdXRRMd2KYCQCsPShb1ez7RFmYH:EPrYdlNixEePiYH","tlshash":"e513a549d205276285d721e62105c40eb3f7fb3cba22c0e475c9d3ea646ec4896d7bfa","first_seen":"2023-03-07T01:06:34Z","last_seen":"2026-07-22T03:25:28.790782Z","times_seen":108215,"resource_available":true,"data":null}},"time_used":247,"timings":{"blocked":204,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/main.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.024Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 27 Jan 2025 04:57:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6797124c-249e\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9374,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"4496d502f86a370bbeaa224be3e2f760","sha1":"8c29cd31e31c9e6e208017af882bb5513cd56308","sha256":"fd639205ca25000e0f031e54f2d9cb4f868fb551368c6ba0e4a932c79f26d695","sha512":"f4a7434e183cfbff34918168d148ba8f19f79d0b75fed1fd3684a61b4acb8efd7be7b75b5634d3e234964e1a4d30683dc510bb6da0bd3a82a9836682b55487da","ssdeep":"192:WIQrrHbAT3Z2DJsyh1XfEqKNTQR5dbutgYoaHIp8QWIBZ/c4N:WJr5XtKNTU5dbutFpHISs/NN","tlshash":"ac126349731a103e51ef3324993fc645dbbdd061c207a1bab87c4968ab50b2d33869be","first_seen":"2026-04-08T17:58:55.298949Z","last_seen":"2026-04-15T00:36:00.190391Z","times_seen":4,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":229,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://market-dota2.cs2rate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 14:59:40 GMT\r\nexpires: Mon, 05 Apr 2027 14:59:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-22T01:48:18.71181Z","times_seen":26935,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":148,"dns":1,"connect":16,"send":0,"wait":29,"receive":6,"ssl":124},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://market-dota2.cs2rate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 07 Apr 2026 06:02:23 GMT\r\nexpires: Wed, 07 Apr 2027 06:02:23 GMT\r\ncache-control: public, max-age=31536000\r\nage: 129437\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-07-22T03:26:32.21534Z","times_seen":279840,"resource_available":false,"data":null}},"time_used":419,"timings":{"blocked":208,"dns":17,"connect":14,"send":0,"wait":18,"receive":1,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/dmarket-logo.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/dmarket-logo.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 06:14:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"653760d6-1b56a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111978,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"5ec2f890f99956fdedcfe4eb4d44a2ab","sha1":"8f5309151c0a1e4157b5ec604699166013d2b7a0","sha256":"d6c75dcc8ef2b0a259604b88337021b04de8e5f6ef06f89a75a4885fdcb83ff8","sha512":"671be283b93f216f1f5f7259305d1aa1c02ed5aa78690f0d8925a9cc10833ab93b86be80b25fb5030993e0f622760db7dc8dc21119221b4214b83f7be5982fa5","ssdeep":"1536:gL3X8Z7JwGUH0Xeif3VcWZflHREt/rJPac9gle7vzNHmj98a0/2ufZdF/1HwAOQ:pxJAUeif3VcWF7cR7ExPY2ufZdF/1QAH","tlshash":"adb39e899da0d05cfc6f0ab1d8b28f1c3a3cc8406ae61df35d990851ddb7578ba277a1","first_seen":"2026-04-08T17:58:55.284382Z","last_seen":"2026-04-15T00:36:00.181965Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1337,"timings":{"blocked":909,"dns":0,"connect":0,"send":0,"wait":90,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/marketLogo/skinbaron.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/marketLogo/skinbaron.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 06:59:02 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65376b36-6eea8\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":454312,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"70a61973da1e1e9011c1a9e5ab1edfdf","sha1":"e6b90030e9b54c59089992fa175155829ecc4f73","sha256":"97ade9776eb5c60a40901728c148285c8678264cb354d70c01259018f0864d39","sha512":"2c86fca720c4426fc082b92ee2ee33d1e9347ed5326e2f2fac9c1776eb64fb982e7232db34cbf31e13f64feaba607c88482eb9f447fb20653fe15f14dfcbabe2","ssdeep":"6144:+RQLdAkMyuTIg5HeUNrxQnlifVPP5Texptkzhk6wP9dZHAO5SVaK8PHcHElMsb0n:rzMyuNHeOrqnQf/eT1PAV0fcHEyvx5n","tlshash":"13a42342c0938f4eed881ab1def8df8e6b2344c655db08f72858bdb0e35156cc5919ea","first_seen":"2026-04-08T17:58:55.297032Z","last_seen":"2026-04-15T00:36:00.178909Z","times_seen":4,"resource_available":false,"data":null}},"time_used":2614,"timings":{"blocked":1326,"dns":0,"connect":0,"send":0,"wait":123,"receive":1165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/vendor/jquery-3.6.0.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.012Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/vendor/jquery-3.6.0.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Wed, 09 Jun 2021 18:50:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"60c10d60-1a4e4\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107748,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"e86504b92c4745b9315d7f4f9b73fc2a","sha1":"b9b4714b5c1cbc03d9444c9f60a17eecb8e0750d","sha256":"878796facbcbeadeddda79c14175bb3967519b61d1db46ae49a36b5dc84e5dd9","sha512":"b68bab355239d15d094c62bbe79cde78267f7636d15db229da584ce0d7276edb6d0844f05fb903d3f341ab5252004de893c9d9ba60d8a739e883d56695466491","ssdeep":"1536:b7/cnTfIbdDSRjlJTQPWVTagPShkMnJuxlk6WRIvQEtUK9G2CWKeYcftIougRuOk:bLd2oe9G2CWPtmK4Y3OFnG7KokA98J","tlshash":"4fb3b69973d63335864bf0b69c9fcd4df2b9595c23c98409a60cc5a6a830878877edec","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-21T06:12:06.424518Z","times_seen":1340,"resource_available":true,"data":null}},"time_used":212,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":89,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.countdown.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.014Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/jquery.countdown.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Fri, 30 Sep 2022 18:16:22 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"63373276-1767\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5991,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4770), with CRLF line terminators","md5":"e4e4074fdef00e6ccb52c770e486024a","sha1":"6ec0873db87fb3083e97555a36b6acb5b2b1caf6","sha256":"8d31da3ce6c7cbb620633b9b9453220b4170cccce2ff2c0172eddf2847c0a838","sha512":"ed793d3a2a5abe445f074bae5b9f41e01a5cf02b990b8c07ff178f6979e3ee64a806ddd85a773f79973bb47ebcb286c2c172d289767c540dbadc7094a2a42261","ssdeep":"96:UXpMQHIXWxspIb9TMlF9NQA3qAZRzblMJDi4jr2R2fylzM905qO2Jo1yVsqVMHTW:JQHrrTcF953zzb6rffylzM9cqO2JoQVv","tlshash":"f1c1604973f1232265aeb2105d9e4854a338e74be1c7445c78ecd6c87a258bc85bfdbc","first_seen":"2023-03-07T16:43:42Z","last_seen":"2026-07-13T08:32:16.980376Z","times_seen":225,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":107,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery-countdowngampang.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/jquery-countdowngampang.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Tue, 18 Oct 2022 01:55:04 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"634e0778-2e7a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":11898,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"515cbb16cf8d4bd748bc224bfa076fbc","sha1":"894a32b4e2a5968b8f0def2c5988819e68c42180","sha256":"c1146cc6289cdec097dc2577b8b19c1645c1ce2a3c100f536a10e4ce2f098d05","sha512":"f022da1d21bde6944de32a0dcc24806c1a108cd0354a45a9f533558f09ec176a68a4c62484685e0934545acdd1fc55d3dab0e5d7f0881f2b825f54b527a056f8","ssdeep":"192:kxporzbmZCy8SiUQ2QsQ+Q7Oc6RSsPjqimJHe1YvjO:gD8SirFDN7SRAe1YS","tlshash":"bf32a01050720cf458b7d46b6bcb07d831af5067ad0aa9147dad72743fac81877eabd8","first_seen":"2023-03-13T14:15:12Z","last_seen":"2026-07-19T14:48:56.354534Z","times_seen":61,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":115,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://market-dota2.cs2rate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 14:59:40 GMT\r\nexpires: Mon, 05 Apr 2027 14:59:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-22T01:48:18.71181Z","times_seen":26935,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":252,"dns":3,"connect":16,"send":0,"wait":18,"receive":3,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.566Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/jquery-mousewheel/3.1.13/jquery.mousewheel.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 17:59:40 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 1046\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03ec2-ad3\"\r\nlast-modified: Mon, 04 May 2020 16:11:46 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 218043\r\nexpires: Mon, 29 Mar 2027 17:59:40 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C8e1TpD1PSmDKW4OPLsBqI1aJeM8WZ0uoQk6pu%2BaA7Zv5oLdBKfeNOmNYClpdpr0oVBbmQQUVn6s4lEXrq1xMu0CHpHvPPGi4zgL%2Bh3AuGV7Mlo9eZKzn7u20eJiwGmm%2BJ3gWNED\"}]}\r\ncf-ray: 9e932acead1a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2771,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2609)","md5":"d5843dbdc71ff8014a5eafd346a262da","sha1":"127e1d971efab9341db8079f10663dc28e8e0a2f","sha256":"8e73a30d35c83ea6a597c3343324d2b7df097ad26e67b62efb5266ee12d317b5","sha512":"ac28dfa1a6fd09528e1ffc3f4fa19b0719c01f9033872e3eab51175b95c451179f1db22445b43ef9947e1810a5a37fdddeae7cdd7fe03b814a98e16e8642ab74","ssdeep":"","tlshash":"7e514241671662f381f60f36b12fb642713ad015140328b2b9bd9d90aba6deb5363d1e","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-22T03:04:02.847161Z","times_seen":16032,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":21,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/favicon.ico","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:41.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:41 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 1150\r\nLast-Modified: Tue, 09 Dec 2025 20:38:18 GMT\r\nConnection: keep-alive\r\nETag: \"693888ba-47e\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1150,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"28c024491e8cd88e1a7e514defb294d8","sha1":"1e7c7110ba5f56fb557840fd7f8cd1e95d0e5eea","sha256":"0226e0b58e8fe50a2ce418a638cdd05a1a56af78b62da38de1e940a33191ce54","sha512":"200425b95c1d0a4d0596beb822286a3f83896b81e1a39e7d3df7b74da0e5616ade52a60fa1745d6435c0c1ef856b82bb0f7628991100589c2e8a9341d9807377","ssdeep":"","tlshash":"152104b9ff5414a8c1707972c34ac59f088c2c985615f60b87e07dac33482e7ea02f47","first_seen":"2025-10-06T02:10:27.731628Z","last_seen":"2026-04-15T00:36:00.1977Z","times_seen":6,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/css/mCustomScrollbar.min.css","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/css/mCustomScrollbar.min.css HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Mon, 17 Oct 2022 02:02:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"634cb7b6-a757\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":42839,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (42839), with no line terminators","md5":"f59e3f4c0087b4d8ddc27bdd9c9ab92b","sha1":"fac9b521062feb5250c04d62128a8c3ddb312632","sha256":"247184981eb6f698a94e431a83d68c6b0df623cce57b6e29dc5a6c11e23aa195","sha512":"eaa92f05b0f29794c326d349882f1fa32115b81ea0c4c064acacbaed7a6a9c80f1caf2cb3c9ce64e3023d5d4497cd7665d6a83d7455b26878de29390a83c2f44","ssdeep":"768:hStyRbNWmYd7Z9t6vw7R01rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:hStyRsmYd7Z9t6+R9","tlshash":"581317992a4336dffa4f447dbb81379a11fc37834552166cb0d75ca4ab88bf7a439402","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-07-22T01:20:50.255256Z","times_seen":15371,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":72,"dns":1,"connect":44,"send":0,"wait":43,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/css/slick.css","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/css/slick.css HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 12 Sep 2017 00:08:14 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"59b7256e-6f0\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1776,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f38b2db10e01b1572732a3191d538707","sha1":"a94a059b3178b4adec09e3281ace2819a30095a4","sha256":"de1e399b07289f3b0a8d35142e363e128124a1185770e214e25e58030dad48e5","sha512":"c11e283612c11dfeec9a3cb42b8a2acdd5ae99dfabe7ffba40efef0dd6bbe8c5b98ae8383d3eeff3a168124c922097eddd703401ee9ac6122f1ebab09bbf7737","ssdeep":"","tlshash":"c931294845b389468416808d5fd7ca6d2bfff0130829e199ba8d1306cfce7d8a9c26b2","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-07-22T03:01:18.191694Z","times_seen":71698,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":63,"dns":1,"connect":42,"send":0,"wait":43,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/css/default.css","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.989Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/css/default.css HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Thu, 19 Apr 2018 06:29:28 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"5ad83748-21bc\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8636,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e3547138fb21a6708e8731cfed5d3be4","sha1":"395366968470bf6e8a545ddeb3a2a69c856ae140","sha256":"79fca8b9e341cec8be3997631300e4a50857c7a4e5d00c6796811df5825169f1","sha512":"09351bde403f0341eff0d4e8fe9c2ff64a30dbcd9f33ce5d912647198b4e0458e6bd390cd29bd421e792e771d9b554f1acfe18813fc20c6356279d179a1dd357","ssdeep":"96:8Vdlp2Lc6NCJWF8tyBEZu98FixkkqkuV2ziV+1nKVW7KF+XaPCkmjd/syqviq6XK:CcsIKDk1BauK","tlshash":"a70276c9aed314cd831a6fe2cbb6a060ef4d21f34a4d65dfb450254aec87a9d21624cd","first_seen":"2023-04-13T23:00:03Z","last_seen":"2026-07-20T06:27:26.636887Z","times_seen":489,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":44,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/0x0.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/0x0.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Wed, 13 Dec 2023 05:17:04 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65793e50-224f\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8783,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 109 x 95, 8-bit/color RGBA, non-interlaced","md5":"2a3802fd1f519f6f5a82d9ba0a17e1da","sha1":"1ca712c247d1fa89000e3375e8148d1dd64ab19b","sha256":"679a10f5ab9c3c06d7bd1114b3330ceeec801bcc8b9654c7a047bbed1b2ba019","sha512":"80f2915ff7bfadbcc9fc03a3c123b3b4ce6f5aa57e696f1b266cb598765d972909a7b51689f0700e90f05a16dff15cea38f8d581fe71c7b80a1d287f5fc7672e","ssdeep":"192:gS1kn14i/K736JcfdAZWBo/gWG/6rjEUdsAFQTF0z0nKfazEB:HGn1TSj6Jsdr3FOjEUdsaQBGkEB","tlshash":"5602c008fb30d011168538a456e5f0576e2b13a845c278227ae7da033c5f72fd79e2d3","first_seen":"2026-04-08T17:58:55.294048Z","last_seen":"2026-04-15T00:36:00.170535Z","times_seen":4,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":504,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jarallax.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/jarallax.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sat, 01 Oct 2022 05:04:16 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6337ca50-3c8a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15498,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15303)","md5":"0458551a243e9bf81ee13d5408d24344","sha1":"328722616a2d716324ebab38c9c4ce69716b1e99","sha256":"c5d5c870a8cbf1cbf6ed11b64fcdcd3bd9469e757b27de7c43113026bcdac23a","sha512":"0c8f7c22f6bef7d86a76c77e7ad49ffd6f6225c9b3e63a2b9f1896af99e4aff91c29695a083c08b165ba006c57bbf5f9bbfcb296c2d8268c1d3f321c2d40e497","ssdeep":"192:59W5RO5CcsDpEgCpb5ck24ZBGz/1Nfw9+ThFOisY1QmAaVh4DPExc4HcBAsot6JL:PIRCYY7GxNfrMKhUPESBAsot6JL","tlshash":"3b62e79c3221321285fb72ed201f630eb635997481aac951b52cc9fd2f65e8d80f7f1a","first_seen":"2023-03-07T12:05:11Z","last_seen":"2026-07-21T12:06:36.3116Z","times_seen":1430,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":160,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://market-dota2.cs2rate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 14:59:40 GMT\r\nexpires: Mon, 05 Apr 2027 14:59:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-22T01:48:18.71181Z","times_seen":26935,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":88,"dns":17,"connect":28,"send":0,"wait":22,"receive":8,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/css/style.css","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: text/css\r\nLast-Modified: Tue, 09 Dec 2025 05:11:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6937af82-1202d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":73773,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"82e606e2a26dbb3bfdef7db4cfa931c0","sha1":"5b6ca9f12c50098f53ea5810f468ff4a9e39333b","sha256":"3ba5cfbc878d0acb7a2f1bdc09f079843b5ca7bf8ffeb54a07c22b046539af1d","sha512":"0adcf684905161ef5d2627d2db1f10adec744e398a56675aabb66fb2ff24556632414811c7ba65d63c4d1c234850af1b6a129851f39b38f2dd2aa1657d88bfe9","ssdeep":"768:5P6r1ImDXgiEr4C40rOSJo9QEMmQBGc+yBCW01Mdhkg8HdJrFxiR5u8p+Do5xufV:5yaLBdV7ylGupn","tlshash":"df7374acda58108d7313aba9bbf45b615e6d50a3de0f06adf191260d83cf66c36336c4","first_seen":"2026-04-08T17:58:55.308177Z","last_seen":"2026-04-15T00:36:00.18557Z","times_seen":4,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/csmoneylogo.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/csmoneylogo.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 23 Oct 2023 19:54:30 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6536cf76-1546b\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87147,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"e69e4f79ca4fb6d90d7e9240a16d7572","sha1":"cf83bdbf94a49e8e3677afbc29989faf39312771","sha256":"964ea98546f11e3b88634729c68bf3f7d0c922f56afe7d31d1b64efd4157f2f8","sha512":"89486a61b4226f22104687f420d9d453100bff9262a140d33580261da431c8be045a1b40a369f1f03adb2c17fd207efeac3f3c496af745cdeb66288972845dcf","ssdeep":"1536:DgAQjMtaiC1Cn0oaYNKBRvncMaKroUvPVLmngmeIb8yW/0CK:wItaxNywBhnc2HVMeQ8TsCK","tlshash":"5c835a9645d2db5cfccb32f1e4f66f1f2a6f164a21e106f39b386984f9311bda1020a5","first_seen":"2026-04-08T17:58:55.311021Z","last_seen":"2026-04-15T00:36:00.199696Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1221,"timings":{"blocked":782,"dns":0,"connect":0,"send":0,"wait":151,"receive":288,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/marketLogo/dmarket-logo.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/marketLogo/dmarket-logo.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 06:14:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"653760d6-1b56a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111978,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"5ec2f890f99956fdedcfe4eb4d44a2ab","sha1":"8f5309151c0a1e4157b5ec604699166013d2b7a0","sha256":"d6c75dcc8ef2b0a259604b88337021b04de8e5f6ef06f89a75a4885fdcb83ff8","sha512":"671be283b93f216f1f5f7259305d1aa1c02ed5aa78690f0d8925a9cc10833ab93b86be80b25fb5030993e0f622760db7dc8dc21119221b4214b83f7be5982fa5","ssdeep":"1536:gL3X8Z7JwGUH0Xeif3VcWZflHREt/rJPac9gle7vzNHmj98a0/2ufZdF/1HwAOQ:pxJAUeif3VcWF7cR7ExPY2ufZdF/1QAH","tlshash":"adb39e899da0d05cfc6f0ab1d8b28f1c3a3cc8406ae61df35d990851ddb7578ba277a1","first_seen":"2026-04-08T17:58:55.284382Z","last_seen":"2026-04-15T00:36:00.181965Z","times_seen":4,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":353,"dns":0,"connect":0,"send":0,"wait":58,"receive":313,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/bootstrap.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/bootstrap.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sun, 10 Oct 2021 04:44:24 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"61626fa8-13131\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-07-22T00:26:25.481368Z","times_seen":18652,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":80,"dns":0,"connect":0,"send":0,"wait":131,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.mCustomScrollbar.min.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/jquery.mCustomScrollbar.min.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Mon, 17 Oct 2022 02:02:36 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"634cb7bc-9cf3\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40179,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32001)","md5":"25c68168422e6e728f75ca84af6e0183","sha1":"bcd3a3268c0ab83f2396f483bba59d8082341ba5","sha256":"6e39ba4fad6e787f935f33ea8dac9105b1384cae25041a12bc108805c86598fb","sha512":"79eeb65ba6b599ed9f74b4df00d35dacc743adca3795d2337481f07cb7a42d9aa3a2930d2e2daad92542cea18cfa587c5aa2c8ed89fc4cd2370d7ee9f07972ff","ssdeep":"768:FQO8nAAe1l6bV6JUOxOyywsvQm77xjBFQ/Sx1iJb2G:Oe26JUOxOOUjBa","tlshash":"77031af9370538f752dbaf5e901b010963365966a70bc870383d8c782ff1e6522a7a6d","first_seen":"2023-03-07T01:07:38Z","last_seen":"2026-07-21T09:20:26.262945Z","times_seen":1227,"resource_available":true,"data":null}},"time_used":242,"timings":{"blocked":152,"dns":0,"connect":0,"send":0,"wait":90,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/js/jquery.appear.js","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/js/jquery.appear.js HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nLast-Modified: Sun, 08 Mar 2020 10:52:00 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"5e64ce50-1148\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4424,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d18fe7c86d2bcea69a0810de7b81e676","sha1":"3bc98b3a47dc6f09238bbd0e496fa11daa3caa98","sha256":"70f721f0d6aaebc5c683551fb12668e6a91a02d17ac1b41f8a4dda0fa91dcbd5","sha512":"0fc73474dfb4fa9247793332815cbc70f6b575058381032981f2a05e87432e904f275a76567511841c568d554b3426c4c548c55fb775bc9b5c1d1d6bb35efd7d","ssdeep":"48:Wl3XwqL924ayV+9FLAPfnUIeohhR9zIr0FfFoBSxMEh1u1cWSKjf4WJzw:y3XUz19FkkDo7R9crgYSpTocWZAUzw","tlshash":"2b91dc4a759b2ab54877622a9f1fb20cd721513b0202c2113cedde6c6f71864a197fdc","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-07-20T06:27:26.653978Z","times_seen":754,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":190,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/banner/banner_bg.jpg","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/banner/banner_bg.jpg HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sun, 26 Nov 2023 05:11:06 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6562d36a-29c26c\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2736748,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=1527, bps=158, PhotometricInterpretation=RGB, orientation=upper-left, width=2715], baseline, precision 8, 2715x1527, components 3","md5":"3e4adf5ba74c276f2cdaa4fb7345b9a8","sha1":"5cc9736616e9ae2cbe8ab91e0cd33052d799bf4c","sha256":"48cd279c9bb2f25d4195dd6fefcc31620d27f62e795d91c50399306cd9b6faef","sha512":"3bee4d8b29880210d5f5e04ee102c9177bc6fa24b91bf76a73966efdda7a68531ce33638bd4d0450906b2c56e42b6090284ee565b0a744e0462d19d0aa582edc","ssdeep":"24576:QbELUr09tHYpWId7Z1mIzlLBB/V1RjLoBNmce/NsV:QbELUqtHYj7ZEYZdfjNsV","tlshash":"ae2512a4c446e731f468b038f716ae5e1b6103bf54d9d44c392e1e86bbc628cbb4d69c","first_seen":"2026-04-08T17:58:55.300189Z","last_seen":"2026-04-15T00:36:00.194138Z","times_seen":4,"resource_available":false,"data":null}},"time_used":5751,"timings":{"blocked":238,"dns":0,"connect":0,"send":0,"wait":92,"receive":5421,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/markets/skinscash.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:39.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/markets/skinscash.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 07:20:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"65377032-46f07\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":290567,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"c6dc167f2e671ba8f232741a2d0be1ac","sha1":"512d01d5cf496d0e2aa6d4ae6329f5c1b4bb5d32","sha256":"8bebeb4781c0259d11dc6d460cf85a2f7590ad4b5608ae4150cb7229d655529a","sha512":"8bbff410b7411dd1d61308d337e39efa909971de894540936063c3adff4058d7cad29d299fd8a91df9874e40048ee086433628ce364519e8916fe9e7038a01b7","ssdeep":"6144:aUEFOklkGrYKrwtpHFzkI1jrSpg/w8HJc:mFOkKGkCwrFzbWpg/jHJc","tlshash":"a05412b38a035ce8f44b45b1e9ee1f8eaaeb179519f70f9ba7c0ad401cc21159c53179","first_seen":"2026-04-08T17:58:55.309218Z","last_seen":"2026-04-15T00:36:00.178397Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1174,"timings":{"blocked":680,"dns":0,"connect":0,"send":0,"wait":47,"receive":447,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/marketLogo/0x0.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/marketLogo/0x0.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:41 GMT\r\nContent-Type: image/png\r\nLast-Modified: Mon, 23 Oct 2023 19:49:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6536ce5a-daec\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":56044,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1000 x 1000, 8-bit/color RGBA, non-interlaced","md5":"cdcf92835784041a6d0f71312c7aa514","sha1":"f7fabfc8152871febdf572a9d48f3cb9d28d67c9","sha256":"843a8c7fcf86d506c72aab47bafed79d98edb3c17e486be05f9f0c7919d2e49f","sha512":"828ff16af6399ff3d61a2f6bb00baf4690c497cce8d815f8eee7379d1528c06196ca40c0c4d3193196548f90792cd57eb49e03096dfa2e3cff4b021485c48e77","ssdeep":"1536:4BN/jxRurXk2Mk1c/of4qQXzGdhG4Poyfg:6W02t1gofFQjGdhG4Poyfg","tlshash":"ed43d0f7bc27f885aeef515c3bb37119c34695780a8e7ef41fa611a8c109852a8107dd","first_seen":"2026-04-08T17:58:55.313208Z","last_seen":"2026-04-15T00:36:00.171612Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1335,"timings":{"blocked":1126,"dns":0,"connect":0,"send":0,"wait":125,"receive":84,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/img/marketLogo/lootbear.png","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.009Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/img/marketLogo/lootbear.png HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: image/png\r\nLast-Modified: Tue, 24 Oct 2023 06:23:20 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"653762d8-3246d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":205933,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1740 x 1740, 8-bit/color RGBA, non-interlaced","md5":"39ad563df184908cd74cd24399be9227","sha1":"1d318696dbb70cdcb7370e50ceac0ce9a8eec985","sha256":"39ab19a4846c0cd05ad7a979228482f642bbc6602c08444c39313eb0b28a8537","sha512":"fdf4675bf603fd61440c1e362166bfdcb2fb3fc22098a16440bb2d189cfc55ca2e51227dd00290fc2895f42666e9c55ea14e448d66d1be2ce7aa0f7d5e758558","ssdeep":"6144:X5VIbblKtWernVrDwCxrnifCPb4CvxXa6w1sT8H9:X52N+nuWn+U8TD","tlshash":"3414d0b84ba7db94ea5a5077d9a6974479ac0422a0bc57e34714f056fcc227ccf3c2d2","first_seen":"2026-04-08T17:58:55.290886Z","last_seen":"2026-04-15T00:36:00.182624Z","times_seen":4,"resource_available":false,"data":null}},"time_used":919,"timings":{"blocked":351,"dns":0,"connect":0,"send":0,"wait":84,"receive":484,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Outfit:wght@200;300;400;500;600;700\u0026family=Poppins:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,200;1,300;1,400;1,500;1,600;1,700;1,800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:41 GMT","end":"Mon, 08 Jun 2026 08:38:40 GMT"},"fingerprint":{"sha1":"03:81:A0:0E:E1:9B:80:A3:BC:CD:F9:25:A5:7B:8A:43:07:22:C6:00","sha256":"73:8D:9A:B1:F0:C3:6E:8F:EE:C0:2F:99:C8:89:24:16:9A:DB:D1:9C:27:5D:8A:7A:A8:2B:0E:10:42:28:53:7F"}}},"request":{"raw":"GET /css2?family=Outfit:wght@200;300;400;500;600;700\u0026family=Poppins:ital,wght@0,200;0,300;0,400;0,500;0,600;0,700;0,800;1,200;1,300;1,400;1,500;1,600;1,700;1,800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 08 Apr 2026 17:59:40 GMT\r\ndate: Wed, 08 Apr 2026 17:59:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncontent-security-policy-report-only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":21928,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6d1d803b4215a4e7e1df269747922dd9","sha1":"66658af0e6dd0a2ff228c94ab547065c19c55982","sha256":"3a4b28728a7e8964345d5ff9c4c10a1d242c330d6534deb173bd871ce52cdc3e","sha512":"86a0bef7d583b7a6175eab563caa6c554e46247ec36c3c0d64b48259e6a0be683bb16845e9b9d9eb70d43475cd736268dbd1cd073cd64a2207c82fcfb33efbb8","ssdeep":"192:Bh0AhbNh6OhprhwEhXxA6LA6+oA6jn6zn6mon6bOROmoOnN6AN6roN64E6gE6Lo/:DR9xqWSUq+DnLami0A0BNJ","tlshash":"e1a29c91087ba1149b871cc122cf7d37ee0ea254b850d978abfd1cd8adabc5a436172d","first_seen":"2025-09-25T13:22:40.673366Z","last_seen":"2026-07-19T14:48:56.35289Z","times_seen":20,"resource_available":false,"data":null}},"time_used":366,"timings":{"blocked":171,"dns":1,"connect":7,"send":0,"wait":21,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Mar 2026 08:38:57 GMT","end":"Mon, 08 Jun 2026 08:38:56 GMT"},"fingerprint":{"sha1":"92:E2:B6:93:F5:F7:5B:B5:A5:90:4A:FB:29:B8:D9:13:92:F0:4E:4C","sha256":"CE:CA:3C:A3:12:47:2D:AD:A2:EA:EF:0B:F3:9B:63:E0:B4:06:B9:4C:68:4B:B2:4C:AC:61:C1:39:E3:A0:50:B1"}}},"request":{"raw":"GET /s/outfit/v15/QGYvz_MVcBeNP4NJtEtqUYTkntBJ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://market-dota2.cs2rate.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32108\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Apr 2026 14:59:40 GMT\r\nexpires: Mon, 05 Apr 2027 14:59:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 270000\r\nlast-modified: Thu, 04 Sep 2025 17:18:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32108, version 1.0","md5":"e414fe5664f376c8f145acd792939183","sha1":"5b69d46adc3a06af762193adb2dddbc359b2e786","sha256":"fa31c7981483e52cbb8b8bc1eb0dc6326f160b8699cc0899349f977f0517a9df","sha512":"51c251910e5cce616b3c336bcb63853f83c306e16e9b79e0a18f924a738ba06b3e2cb8132ff9bc6e720527234eb80e90be2625b860e1728b66d4fe86ac9bafe5","ssdeep":"768:gUX6jLkDeuAkZHs27nAflEFIapAgCauwIFPo3zjERcgmcjz:3X6tkpNAf6FIapAgCaMFozInjz","tlshash":"6ee2e14f8beb009ef3828a7812c46b3195b305d569cbfa901eef85d76b5c247c1474a8","first_seen":"2025-09-05T02:25:45.343777Z","last_seen":"2026-07-22T01:48:18.71181Z","times_seen":26935,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":118,"dns":0,"connect":15,"send":0,"wait":15,"receive":17,"ssl":119},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"market-dota2.cs2rate.com/assets/fonts/fa-solid-900.woff2","fqdn":"market-dota2.cs2rate.com","domain":"cs2rate.com","tld":"com"},"ip":{"addr":"217.149.31.235","port":443,"asn":31512,"as":"OJSC Telecommunications FEZ Nakhodka","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://market-dota2.cs2rate.com/","date":"2026-04-08T17:59:40.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"market-dota2.cs2rate.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 08 Feb 2026 23:35:29 GMT","end":"Sat, 09 May 2026 23:35:28 GMT"},"fingerprint":{"sha1":"0B:9E:83:E3:90:A7:5C:A9:AA:15:2A:9C:5D:E6:EF:8B:FA:77:9F:77","sha256":"99:07:2B:18:2B:72:8B:A5:2E:60:5C:F9:DE:C9:B0:31:7D:9B:C9:3C:89:A5:67:3A:07:72:58:B1:0D:46:F4:97"}}},"request":{"raw":"GET /assets/fonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: market-dota2.cs2rate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://market-dota2.cs2rate.com/assets/css/fontawesome-all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.0\r\nDate: Wed, 08 Apr 2026 17:59:40 GMT\r\nContent-Type: font/woff2\r\nContent-Length: 78268\r\nLast-Modified: Thu, 05 Aug 2021 01:25:46 GMT\r\nConnection: keep-alive\r\nETag: \"610b3e1a-131bc\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":78268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78268, version 331.-31196","md5":"d824df7eb2e268626a2dd9a6a741ac4e","sha1":"0ccb2c814a7e4ca12c4778821633809cb0361eaa","sha256":"9834b82ad26e2a37583d22676a12dd2eb0fe7c80356a2114d0db1aa8b3899537","sha512":"a84e13f216ea95146af285af98aef0b464cd962440e161a1c602ca2178a179e04ae4ed2a2f98d5b2eb165480ec6920e0e88de77d5f1eb7f11ed772b092daf865","ssdeep":"1536:AOhrLFyv3lzKb1hkG8l0o4HXWj2uwgcdSJSls7ZahNpUFl8a/KdDe8Y7fN5O:AOhfMv3ILc0Dm3wA4LpKKdO7a","tlshash":"c97312aba6cd77ac88dd14565f0043533afdfb35ab27864349eca2e01a300677b5712b","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-07-22T02:41:33.311287Z","times_seen":56150,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":37,"dns":0,"connect":0,"send":0,"wait":44,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"market-dota2.cs2rate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}