{"report_id":"19306fee-130d-4005-9895-30c5114a6c82","version":6,"status":"done","tags":[],"date":"2025-11-28T23:40:24Z","url":{"schema":"http","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":0,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"title":"rutor.org :: Свободный торрент трекер :: rutor.org закрыли, rutor org заблокирован, rutor org не работает, rutor org переехал, рутор орг зеркало","dom":{"size":1712,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"a0b3b0910ba2ed1f2c04f93dcdd5b222","sha1":"bd3904fe2aa29cbddec16db20347a2b290ff4514","sha256":"9fee71b75ff456c84c5901495e3578b3217cd6bda699ed4d648608a98e16cbb6","sha512":"6befe8ceb26aaf3f3e51addf53630575add2cd7678ae7f005e76cd3bd40add75231dca0509d194fc514b781c526b0615b9724cd74de30fc12c4b7b1681f93e01","ssdeep":"","tlshash":"663196377f10e04496269cd5d1e63a9ce557000fdaa0c832e6fe8ba6dfd03d04e11a9d","dom_hash":"domhasheb791831ee5e6c2d3bce10e39cb46e3e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":0,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-02T23:40:24Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"org.new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"myroledance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"vak345.com","ip":{"addr":"87.242.110.167","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2019-07-11","domain_rank":49508,"first_seen":"2019-07-12T05:59:47Z","last_seen":"2025-11-23T10:19:56.656586Z","alert_count":0,"request_count":2,"received_data":25517,"sent_data":916,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"libbb.yotor.ru","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-28","domain_rank":0,"first_seen":"2024-12-02T23:31:00.787899Z","last_seen":"2025-10-31T12:25:56.676421Z","alert_count":0,"request_count":29,"received_data":640506,"sent_data":13063,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ads.digitalcaramel.com","ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2017-09-17","domain_rank":589179,"first_seen":"2019-02-17T17:30:06Z","last_seen":"2025-11-27T10:59:10.534972Z","alert_count":0,"request_count":1,"received_data":503,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"org.new-rutor.org","ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"domain_registered":"2013-09-04","domain_rank":0,"first_seen":"2025-11-28T23:40:25.869068Z","last_seen":"2025-11-28T23:40:25.869068Z","alert_count":3,"request_count":3,"received_data":195860,"sent_data":1790,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"myroledance.com","ip":{"addr":"193.200.64.24","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-03","domain_rank":109832,"first_seen":"2024-10-07T17:52:04Z","last_seen":"2025-11-28T17:19:59.061084Z","alert_count":1,"request_count":1,"received_data":1755,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"kllastroad.com","ip":{"addr":"193.200.65.68","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-03","domain_rank":221362,"first_seen":"2024-10-08T03:17:02Z","last_seen":"2025-11-22T21:30:42.894147Z","alert_count":3,"request_count":1,"received_data":36452,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yandex.ru","ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2025-11-24T07:15:14.906519Z","alert_count":0,"request_count":2,"received_data":594405,"sent_data":857,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2025-11-24T04:22:26.796875Z","alert_count":0,"request_count":7,"received_data":1008687,"sent_data":3495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"psyduck-beak.yotor.ru","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-28","domain_rank":0,"first_seen":"2025-07-07T22:56:18.281573Z","last_seen":"2025-10-29T19:24:57.81651Z","alert_count":0,"request_count":2,"received_data":79035,"sent_data":1018,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"01aeda25cc612ac6fd77f18bba5041e0","sha1":"27eaf3c12999caa5c29a7591377756d6d7d35459","sha256":"8f6e59b4280f7b6855ac1a246568b4f412db956026ccf366ad7f4c698d9b8f6b","sha512":"a4335cefb02c3bdc8f6ec07084b23f0b61f502005365b2b522a6c100fbc768e9db4e6f40841ab5d7a92a8692ec8a35c05e8b4104bdc71646292f9a182cd54f15","ssdeep":"","tlshash":"f1e026b01c4348ac98430c73b9a085a529f4a5713b217322208e323928d0f70366aa74","size":305,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.924971Z","times_seen":125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vak345.com/csn/202511290240.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336\u0026_t=1764373201346.346","fqdn":"vak345.com","domain":"vak345.com","tld":"com"},"ip":{"addr":"87.242.110.167","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"10b7db767d4b5ccf7b673f0c1fcea8bf","sha1":"78db4b32f0129eb2859285fc0efaa8441b57e791","sha256":"34a6ad2a4b67d5910f3ca2c673e78fc1782e89b2dc8964fc2a84eec2be5e9b62","sha512":"ba1bb90def084bd7ad562c23c18b38857b653f3118845c5efce68c54ceeb629688bdcfb5b3cc9f2de2430de7be1e8279bff2411f7cc5df03feea7e1a0056632a","ssdeep":"","tlshash":"6480000a2cbc22ba22280c208e2020c3b2800c20c800a0ece020aa2c00afc0882a8c2a","size":31,"data":"","first_seen":"2024-11-04T11:23:18.039022Z","last_seen":"2026-04-20T06:54:24.971279Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/zax/jquery.min.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10092eee563dec2dca82b77d2cf5a1ae","sha1":"65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b","sha256":"e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59","sha512":"cc92cf5a9b3a62a18af432fdffb81b76da84e2f43ce3c7800a919c10809118d0611e29a47f103ff3df18a54d5331bc5f06ef4771dc406cc763b30ff2a66a3e81","ssdeep":"1536:Du98G2ltZMNWnDr7doqPp07HVDTLGbY9TGA7zEcbnkb17jQq3nPRefqvpsz:DuJItn6qepq15nUfqvpsz","tlshash":"5063e9c9b2c67273c3e730b824af510af136a8aaa44c4854f06ce8e5bd74a55447bf7d","size":72174,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-05-23T17:33:30.986286Z","times_seen":8829,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"6669f7c2f3f58330d59ab6b683374809","sha1":"5d49730677f9b7ef9397e0aa8b071052ca3a54a5","sha256":"1f1529c0f20ed3349c47a94594a4ce15e53029c33090daf525ae73951cd50ad3","sha512":"3550edfda7660784d2c47e5fbaa6d428e5a13728d3a0531f5b13aa814f72236b556cd63c3bc11bec32e5efb31ef09212d88a3bd7a55e09c900516781edaef1f9","ssdeep":"","tlshash":"ef8000083c008cc2c2280b03a322ae28203220222880b0c028fc228820e02cb28ce088","size":29,"data":"","first_seen":"2025-11-28T23:40:32.533564Z","last_seen":"2025-11-28T23:40:32.533564Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"2744a37ceaa29e760f738c3a74a83a7d","sha1":"06f0589bb234822a0471beefce05c5dbf58b6966","sha256":"d94db2a1c37a7ee75c603192f99b27222bc0f84dd082197fc5e634fdf3545286","sha512":"eaf4daf3482621744942cb0fbd68cef2a711399a9f2c49e43a94ac21dae08d58fcb730cfdf03c82fe8a368cf3f6f4cff02be47ea7d5489e1f6503c93428c0eda","ssdeep":"","tlshash":"67f0dcaa3cc88139433612227233f29872693a28284dac24c55d88a228a6cec087f50c","size":468,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.418388Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"ace9db13a7dd020090d7137c2003ea20","sha1":"4eb635fc5ec72ed6ab636fe35265f195b80bf281","sha256":"c3f7251bae9ebb1a7cfdc617b3f683e59ae1c3db71651e3aa0cbeca72c24e13b","sha512":"1368d72925705d8d71b89c855a51924e5f4f2bccef41aff76ec2ccdc35c691483877b101af03ea2ee471db5a8eea175bc8ef328081f8498509587e62811383a2","ssdeep":"","tlshash":"d39002576259954827d4e64168811d23a4f48a64500e5206d154185405520066f148ab","size":54,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.928759Z","times_seen":51,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"psyduck-beak.yotor.ru/inc/sisjoy/gen.php","fqdn":"psyduck-beak.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea3422cf15e911843a6aca4efd61496b","sha1":"a6b2a4aae248f1bbf075e0780f98298409a89385","sha256":"da161eb9d3244315008244b2e1a2c4e0393887dcdfce21e16423e2277c2a3720","sha512":"26d71df83013894e21023a821670121a71bddfe07e3754cbaa6210ae7b28969ec9c6373c9179039022c94a861bebcd92cb2db84600090fa5bcc775a58624cb34","ssdeep":"","tlshash":"31d023165ffd5130c17616cd30f5435c6562145834d6d137a7cdc9346460fd15e5f845","size":211,"data":"","first_seen":"2025-07-09T19:13:06.350919Z","last_seen":"2026-05-13T07:52:24.931172Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/5f9960c41cea84ce2eb3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5bad6ff2d867a5cef30ba0725207b073","sha1":"09aa929c7c43d9f58c986701d113e7384380e522","sha256":"cb46636fa17a3a30726db627410195a3a9a318d34a1d15d094d3b49d863ade50","sha512":"3e498411decf14229eeb7a7a0bd5410fc44d36ba939d3a63466df6bd738efaaedc336e152f81487e2f85dcce665778d79a70a27d0f0bd2443b209efcf62afbd7","ssdeep":"768:7syoxBshVVNu+NSW/lQSuZqyWEDVP8BD93yjDUSp0Bpnr2nAY17h8q:gyoxBqy7ZqrXBDNhBF6AYxWq","tlshash":"e073ead97595b9ba02c3d8f1443f220ee37b9611711a6580b323dac1ec25adf5223e7e","size":75241,"data":"","first_seen":"2025-11-28T08:48:47.151953Z","last_seen":"2025-12-01T11:00:56.932623Z","times_seen":333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/3186cfb9b35b0b59fd0d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"37ec02a1943fa9a6171faed6b6bb4360","sha1":"8dd896a271cff22ce35aae8e908c050b3c39dfc1","sha256":"f4f2f8cea9feb381c64fa226b2014a1230f3a407c162c594e614ccb5e522245c","sha512":"9c7e5dba464c1b2c77d5db3ded61ca5b6ef321b638ea30c03ba8ceb3f5fa0f855b754a7e0addf1df6acb337df5433ea008075d2dee4b98ea0fe039cdee11b733","ssdeep":"384:jw2yPj2+lpQMXZ+2l2BTYPS+Y9P6fyH4R:c2yPvvJ+n+0ifyH4R","tlshash":"0462e79574d5b4a513db20bb413f150bf3ba6879684d80a0f222e8e97ef885c8167f6c","size":14938,"data":"","first_seen":"2025-11-28T08:48:47.156615Z","last_seen":"2025-12-01T11:00:56.942621Z","times_seen":333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/e625ebc1f79dd770b245.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e76567e9240ef902cc8753745f62544","sha1":"4f45afca767db26cacee7ee2503da1cffc4bcd32","sha256":"b760d625d540b5eb4ed099b6d335c44bfd0c87460b127b3779013f9eabac2fbf","sha512":"6e0997b0455951f85079176452711fe3ace12f20323efa7093d53967499ee16652657616821f68fd551b19c66c616e6240d2c7960cae7db576a8190d4b7e6036","ssdeep":"12288:InzBNKPWd1EUHbjiIN0V2pTklRo8OOsuEnHbnhBrqZBP:fPe1EUHbjiIN0V2pco8OOsuEnHCZBP","tlshash":"8fe408d9fa5170b542e790e9c03f150ea23f751a700984e4b76aede16c38a8e6123f7d","size":708953,"data":"","first_seen":"2025-11-28T08:48:47.142433Z","last_seen":"2025-12-01T11:00:56.928128Z","times_seen":333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/southcentral/js.js?08","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f15eb2a5b8ee7b68b032c16d4f9ee8","sha1":"8797e04b9c5a05dc71c8aac4cc8b145ae6bde3e2","sha256":"6ede838c510b030a60f27b0e3466376607a480c6d0cab4e0d2f2f19d92d16af9","sha512":"2832b9fe25e789c3552227ac05c1c4672c27833784f468920a5f3520d6802bfb3302661cea000ec709e13dcf32ce0f52cd16e12109ddd3a9a41776047c1b82e3","ssdeep":"","tlshash":"2c510d4cf75de11c94d603857ead02ee387ca5233242852dfd5d6e606278c3a8a3cdb5","size":2898,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.884759Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/functions.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1807e6a8009ef9a06b54a0586ee8884","sha1":"2691a68a2209485cbe526d8914c54113daf773df","sha256":"d47ad6a2c2fa3bbd326ea77e4a328ea45e13f67593684237859ef21ed594222d","sha512":"99bde3ae5264e92d6288bf01bda8cf48eac02d7e2c9d51ddaeceaeaaec439f61bec916355253a29eb18c614bfc66080dae36f19910cca9027825600c4e87280b","ssdeep":"","tlshash":"82613219b9c1502a872710353def364a34b90573d085da62b86cb9606f64e34577eef8","size":3392,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.895574Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myroledance.com/services/?id=146839","fqdn":"myroledance.com","domain":"myroledance.com","tld":"com"},"ip":{"addr":"193.200.64.24","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"05b5f50693636e9c48f32009050bc897","sha1":"2dd6ea907945cbab3ce7ce50e2a7a042ea3172a5","sha256":"97109d2d40747b7202a6f5994799137173f4834fb53ff863bad12d3863c6f324","sha512":"171c7550558dcd168a65b84c11804a08618944661ac4b5f7b5bdc1721a7b0cad6d719b8dbeb27b356301aa9bc006c43635181c125e5097a2f80e450c19ac9d76","ssdeep":"","tlshash":"9c312769764b20fb729fa0417abde402fa1d3a3188ce8cdcc54cd59b139256987dbd34","size":1592,"data":"","first_seen":"2025-11-28T23:40:32.480146Z","last_seen":"2025-11-28T23:40:32.480146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"348cec49376fb3c15569c9d6df404eaf","sha1":"97d9ebac60a6a5140647c81db6f2f1e7bce94ff5","sha256":"15bc72c526f5d3d5d1fbdbfd0218a135070925b7b414eae39ca38a8e5cd3165f","sha512":"f09ef08e0d607a59c3f06f286d5d857ca7b705b923ac84767a3692592ed634e7232915e30816a4b1328595b2dec4fc47e8cfe397a1394d2de3ed3858b937fdaf","ssdeep":"","tlshash":"7b019e26d1ecc62723d6aaa1f94b3d5cd8873216d15a4a01f0fa22d8f007f8c8ac3810","size":683,"data":"","first_seen":"2024-12-11T10:01:53.153509Z","last_seen":"2026-03-29T07:13:34.421442Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ed5f24030527b233bfe4972d891c85a","sha1":"6463b94ece30792f6fbefead1a85ab64eaafff2f","sha256":"bbe07d3d476e13f3a3208edf38fab3d0fb0a80a98e2f4b6eee6e77e5e15912ee","sha512":"0f11e45baa8401b0e0f444c54e7653386e8ce08ce9ae902d3aa4b679b044d4944c8f12b94ba526f7210d7681d26520216766415c35a226446bd317fdbc79799f","ssdeep":"","tlshash":"5cd097287b5ce38d0421300028fac8ea301699b24f1687402b4cb022f84032b7d4cebd","size":247,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.932551Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"038b07bc5bf7a09e3785702b4dba46b4","sha1":"dba46d242a5c86e92f7d4bb50df67dfdd07c2304","sha256":"ba24a03d5a21d556fb00101f33c7652e83bb7b85fe5070ad18bf74af199d57a0","sha512":"5d502b52e6a40be14d7a1b9be4b984d4ff0ab9069056aa546994928212f5a22c0bfe71d7b06ef5c5976d4972524d4c8bf1352c9902d81088dac7a0185bb3ce74","ssdeep":"","tlshash":"81b012c75002616a1a630019059b32503bfb89ab00085004c54450903269f4fd217d8c","size":93,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.933315Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/jquery.cookie-min.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","size":732,"data":"","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-05-20T19:53:54.618075Z","times_seen":1838,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"eval","is_inline":false,"md5":"2aff10b37ab0d44018e0210b4da7c2f6","sha1":"d215850ff163164dfcd327ed0b6bd09091c947f1","sha256":"024dca6a094a832d223dc9254632e4e5a38a75c107742e4b79f3debe6a5ab583","sha512":"7996a25f47957b67d78d138b3b63b126badf4337d15ba187e8fbb7ed7906901c520a71f774abbf6212c39420e0f20cbd622880012a34f22cd29e41bc22cf29b1","ssdeep":"","tlshash":"20d0c9a915a938a39db36fa89342964a38828077350620120c40d22022fe6c384e18b8","size":205,"data":"","first_seen":"2025-11-28T23:40:32.539425Z","last_seen":"2025-11-28T23:40:32.539425Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"9746fee96e71372dfcf2469706766e64","sha1":"3d343f2bec9a87bb7e06ff4602403ed7d8159745","sha256":"96a5061bcb6b961514705a44d52a6c60334de407eea279a2c237441d501c813f","sha512":"cf54d5bde6bd157d9a5f939aa64e328e347e76bcf5949151992eff388aa2275beea0d5f556bfeee93e07293f6f45668557185bc52ead6d124222e10ee66772e0","ssdeep":"","tlshash":"3ff0274290048d0272fe7aacd5966b0460f611ab2633804429064cb82b66bfdcbadea4","size":444,"data":"","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-05-13T07:52:24.934055Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8c722c29c106deffac333373bee3f1a","sha1":"3b22e04a56c59a1944aa4eefad04c21dffc7cf54","sha256":"eda58a9eed09189c9201bf769b9611f226c20ee9035f92944cc1b8a063bc18dc","sha512":"00e27cb36c92c04cd7674b2d0f1b29ac726a7daad89d831021deee82ff070c83517b33f8d8bc9b1c3170ff553d3f8ff2b53d19210fb0ea0173a3d217de3961fa","ssdeep":"","tlshash":"bc8000a080beb008880200a22000a2b0e00a20cae08200000200083b88002f0b0882cc","size":26,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.936336Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9feab8347346cd568a157489324aeb1","sha1":"45c07e53bdc1a5c961480251438ff9106ee5063b","sha256":"b6bf34b0c0063143cfdc7977334b53e6aaad68a29aa25162defa0be10afc3cce","sha512":"3f94f77ccb583d2a4691c96723e4977822bc1964de8fa45bf7c59c6ea0fa1fb1d5bcab63e47a9077b94dd7322baf75e945634c7b28c1da71812de3ba2429e0b4","ssdeep":"","tlshash":"01b02238f828a88882bb00a3202b8b000c0ab203a082e008038828a0cab80280c00f2e","size":121,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.937284Z","times_seen":256,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vak345.com/s.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336","fqdn":"vak345.com","domain":"vak345.com","tld":"com"},"ip":{"addr":"87.242.110.167","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3c768ca91fdad8f56e6309dcdc5c533","sha1":"313aef1902a3336c3cf88a9783d4f4502f8e6857","sha256":"28eb420cc872b5b7a4e37278a4b602f9dc117da020e2340afe39259280dfc087","sha512":"a1792623756f82e95cc4491e141dd152872b7676259290cdb9fe23586b03d9cb1a9cddc970a343a360dd85b70522cae90d2df6e055135e9a192cc1c42e81e0c1","ssdeep":"768:E4gj8m4M2LpG+9BTl1OvaF/0a+EbFKm7awn8uPmkbeS05FI8x2WM42GxUofG5ZiH:NFELdFIeDPoiHjKxo","tlshash":"81b2529225d4b4a943b317b7620ef2c6e02a5cede4440edeb30cf994f198503fba9571","size":24878,"data":"","first_seen":"2025-11-28T23:40:32.51032Z","last_seen":"2025-11-28T23:40:32.51032Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/jquery.tablesorter.new-rutor.min.js?1","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6de84298187380f0dd15bfa17ace1a7d","sha1":"8dadf1532d9651d168bfbd73ff139e8494198e4e","sha256":"fb736e8586695a5db7c37884ebfd5860cb016a3a587b00b17fcc3053b5681048","sha512":"2e7edeeba1afebe8b9fe0703c59ff8f108d48ee9782a924a3c65bcf9c6f9a09371f0aecbe9333c880dc00ef7202a4bd0c0f21438a345ada598d672254ad9b5bc","ssdeep":"384:RGyqkRzzWBYEfmHtYyR0GPr4h6I/uaa6TYWAZVszlEAWhS5b:Rg+zWBVfmHtYt6+UuQh4","tlshash":"4282c69573ad346390dab4b0886e0859bd315fa39908c435ad35e4872df4e8cc6bbf78","size":18623,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.911535Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"75d02574b4d2b91d421c6202503d703f","sha1":"047f71a00802fd9ed91878bbaeebda68521e77fc","sha256":"840ad758733c0966b5e57b85fa86884e75ed85947b265648edec34b2a75236e1","sha512":"da644d793c77dec134483bb8f9abf181b79d0e7aeb77bf4bf77c8fe2496aba03c5379a330150ac6f5e7205fe09c73b5f0ca43b0ef8b4b26c4c46ee2c1a5e53c1","ssdeep":"","tlshash":"1fa0013a8423193c09800ac9212ef2c2be37f06138aaa6029108021811d9a9e8842c08","size":75,"data":"","first_seen":"2024-01-30T23:48:35Z","last_seen":"2026-05-13T07:52:24.93806Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"psyduck-beak.yotor.ru/inc/sisjoy/gen.php","fqdn":"psyduck-beak.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bef5d85ac5e1807113bdd4bc12a0b3f","sha1":"1f6977f25a4ae34145ba1cff0ded6a56e752c51a","sha256":"b6a0b8a1a3a65994a30934c12ef315a9ef7ba9c616a6fc26549519bf7a3fed7e","sha512":"92ad12d27cfd9aa9677b0cd081f302c0ebbec6701855cc6aace6e96ebff99b53eafce32bdb4171cbc7c3106504dade12f78f8dad3665ce7119a24fdaa8e78efb","ssdeep":"","tlshash":"ab9000a8320000c0a220a0222b0eb288b2320032a0f082200e00200ce0e00038b200f8","size":46,"data":"","first_seen":"2023-03-08T08:12:15Z","last_seen":"2026-05-23T13:55:47.434136Z","times_seen":1003,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/d7cf9ed1df092ba45d5b.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"1f68c2179abfa91464c96dd0c1d233ba","sha1":"81ede4a5289bc72d7e57d5bbe1be06da0171c330","sha256":"a42270d3753a2542cbb8cd2f41115b3b149333b2d41f6dbaf25b7e7a281a06ff","sha512":"0a908398cf6325061c3701455313fdf83f165725fe17ee74c9165850496274807a40a57018fe0ad1456f58f8d9b61cbda7640e6d4ba3ec2c03403f87e807f840","ssdeep":"1536:Yy9yyK3OPDIlNTE1T151AwaVKiBSoQM6yQNA4liPeRHbg6:Yy9FrP8LTE1Tv1xiBvF6ysik","tlshash":"e7c3f788f59274b502e790f8913f6a0ab33b6419702584f4b76deef19e7490e5122fbc","size":127195,"data":"","first_seen":"2025-11-28T08:48:47.154371Z","last_seen":"2025-12-01T11:00:56.917204Z","times_seen":333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","size":33703,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-05-23T17:16:10.515424Z","times_seen":26938,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/pokemoky.js?48d","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eefc1f7d0796d34520a56f42baf2c1a","sha1":"10f69fb4a0e2f51a757c3e425777a2c75cd09cb9","sha256":"bcd273007ad9efb689cf0cd2beaf6b211569720a7971425f2db177506d87af14","sha512":"f82cd40427772f582366dd84d0a1579f1ecb8c4e828d2b9c60de05356e3baf0f9602176fa51ea9ccabe79bb667f304b6edc156f73a32ce7812ae945694ee9fa2","ssdeep":"768:N/EgW8iCORMC7g2ZIbCCLG/qPdVBMcv/k7N5R:hEg1CCLIpcv/k73R","tlshash":"9383c5a9dfad0259d1e3004baea15aca647d83777214dc12bc1c1a5873c1dde8b7a3bc","size":86848,"data":"","first_seen":"2025-07-18T09:21:09.181733Z","last_seen":"2026-05-02T08:30:51.216032Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/header-bidding.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a11946efb9a17caf6d6bde07d9399c22","sha1":"5d1c55a1cafa1e5b2319c2d929f3bceec9bf1039","sha256":"7cbfc5b4e67c632c558adfe5f421f6d8634100c9e859b67f90611add286cb70c","sha512":"3691b832b788ab975be9e0df7087a8d9cea2dfa61c3c3f94708365049b06245f17f7dd1735b57515178a1c86148a12df7812b898dc42c5979c5f8a7535f299bf","ssdeep":"3072:wGP7nOhf6WX7TiPQvxmTUSMEnd24LSGH5asbrFb5RjwQ+OXjc2j4HvKQUFCUthyC:GTRxSt5asRXpyy3h","tlshash":"7ee30a9d7aa1b4b6439350e5843f260ef33f5929a41d84a0fb27d4e26c3595e8223f3d","size":144821,"data":"","first_seen":"2025-11-28T23:40:32.515666Z","last_seen":"2025-11-28T23:40:32.515666Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/c4714f2841c33a556de6.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"69e089ea9a5e358092d61f6511fe0d0b","sha1":"d07f29146f438f2b3514caa7f1e8d832e92e7aee","sha256":"e0fc60bda4b90e6e5e3fe696f11d44f96e4fde03a71e0bff749c767b49b3c4cf","sha512":"176047cbedaaadb56fdc466b7616ca4bd27be3108952dbfee2764a6805ddd47c121fd439137b81cb921f3b7e8ff20f4c08fcfc5c59f5eb364340e673e1a5df61","ssdeep":"192:/wMyHK7SO2dyacdF6mmPyZeBbJVttdANkzmiWiN8XNVVpohQniuv0bbjLIFTcue9:/wMyHKOOkypvU/Vtodi3hyhvADhl","tlshash":"8d72f8fd7520b0605bdb30b5627f191ff378292e644cc4a06706edfa297491e5193fa8","size":16372,"data":"","first_seen":"2025-11-28T08:48:47.140122Z","last_seen":"2025-12-01T11:00:56.942133Z","times_seen":333,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"f13f5dc047435a2ea7bde51fd8352b66","sha1":"5d99e88f7367c4224db4560c8a406e729ed1b0ad","sha256":"0f037315de45ddc3ac1055d5fc35f60ca7bdd357c91bc777c795444936cba1d0","sha512":"9f2ae5bb8be4ca4471a863107abc55c45c0fbfe7659965fb4708fce7e01749636645eae51837614ba6656000cea88ba9e9ea9bb30c008b8a489b84630338811b","ssdeep":"","tlshash":"ddb012c464ed417063cf1c536c0e934a10301fb3d3d0d1ad79276d30888591acc144fc","size":112,"data":"","first_seen":"2023-06-17T11:09:51Z","last_seen":"2026-05-13T07:52:24.939584Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"81774d54aa944d3bd0afc3f98e052623","sha1":"ad2c136b4ebf24853a38ea9e120d169b71407ea5","sha256":"17dd49f17d360b866fff190bba425a204b9e3cc880798cfacb693f4b77bb88b7","sha512":"5f4568b27c30cff8ec069a1994bd407434374e4afb939ddabd86ba0f63fd435f1c7ef57b6a76a00aef040d27a36f3088226511823a55fbafbbad9c91a0e8a5eb","ssdeep":"","tlshash":"9a619cc7ff0ed1e64ef904086599919f783c62735a5358aa7c8c28b521804ebc8fd978","size":3456,"data":"","first_seen":"2025-06-23T14:43:08.47892Z","last_seen":"2026-03-29T07:13:34.44582Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"c202292fe573271b1244fafad2e73dbf","sha1":"1eff5d3199f6058d1b9afbd5020e3ba13c97e1fa","sha256":"309e3fb5a0c57cd08034721a10db4c3a41ee43661b7e459275a446975df8eedf","sha512":"97088564ff6c8dea897ac0ec54f133b7444ef8e07f89a3b313697014ff669a65c86a6fbf2d297066fad51a63decd8266ff185745c387abff05117d6b6e3aefdb","ssdeep":"","tlshash":"53800082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":35,"data":"","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-05-13T07:52:24.940498Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kllastroad.com/surface/night.js?24469\u0026v=3\u0026u=null\u0026a=0.39528957528058284","fqdn":"kllastroad.com","domain":"kllastroad.com","tld":"com"},"ip":{"addr":"193.200.65.68","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"d4a676073ddb0479954b04fabdb84b18","sha1":"bd2443b8dadbb01731486cf100633f7ffb876d51","sha256":"093f2a6195335dac05c991f822b5af25234ef672fbe4d0eb3d98f949c9e0499a","sha512":"a044451d647ccbd0085b60c1eed840e1e7668b4ed9d50fac92f49b435f0f8ba6f37f03b1795a65af32d6cc6b56a70b96c02a35264b2b9eb2c5e3bdca004ed524","ssdeep":"768:xwT/7d3VZb+mtjfptkwIL9HBlyQQwMs3NEaWlcb3z:xwT/7d3VZb+mtjxtkww9HBlyQQwMCNE4","tlshash":"abf2934e66e710320197a43f6fdf81487670c1873148e91cbdac46486f58e29cafabde","size":36100,"data":"","first_seen":"2025-11-28T23:40:32.484565Z","last_seen":"2025-11-28T23:40:32.484565Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"661ebb215e7c519657a4af1e834577eb","sha1":"8e534ffc9a0f1c2fb888d2628ec30cfa481128ad","sha256":"8f74c7012d6f835598e27c1eae7e88f1ccfa7d3aa81c1017aac8fb165c754392","sha512":"9b4727dc7efcaa274d1003a300b5938fefaba8edd085ac65b472724898fd904606bd34bed4137a6b79b3dc9cbd6e8e357480b14e51b609a62d87b1f15349377b","ssdeep":"6144:dE413h19jGGyyCl4PYXdCn7o4yGKzt4GhZRRyW:rR1QFl4PYXdCn7omWH","tlshash":"6794f8e975a1b4f203e391e5843f160fe33b5a29741d94a1b722d8d1ac29d4f5223f3a","size":446251,"data":"","first_seen":"2025-11-28T23:40:32.519621Z","last_seen":"2025-11-28T23:40:32.519621Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"b69f6a95989c863e45d0880ffe158fc1","sha1":"58e30fa1ba73ed34edf7e238bef69efcdd029930","sha256":"375d08160a21eed56dd65e4cb6b380e323141f11bc50f170479a9df6e0d7a910","sha512":"4f9c7b990b0ff8cb9376adb4dd507c8e550e884768df1f8bf8e3a5a489093581fb526ffb1d0396cbccfbbacff12d11f0d025c2b973358ba202d31bb052768390","ssdeep":"","tlshash":"cde00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":313,"data":"","first_seen":"2025-08-03T08:36:22.468852Z","last_seen":"2025-11-28T23:40:32.532263Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/pluso-like-small.js?10","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dae4b00893641d10303a88837aa5c45f","sha1":"a7514fb190fa8ba489b2dde5dbee92dd0fe7ecb7","sha256":"e786f1e87ef6054b4aab3d26780d3525a14975b8d4de5bae54f095fa07ed5b08","sha512":"f42bd1cf7edca40d2d1bcdbd35c6f36bee9c62172dea1afcc9b0db07139a94cb9d4ead6f3401f7d0ba34d66ab08a5a2be88786def635d2809ef1110d646669f3","ssdeep":"","tlshash":"67411d78bf29722e4172106ff50f744ac0b4842ac4596c8f5f75a1be2da1b6b736c638","size":2266,"data":"","first_seen":"2023-07-07T18:06:31Z","last_seen":"2026-05-13T07:52:24.832606Z","times_seen":75,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"40c285ecafbab3c198fe55d004ed193c","sha1":"0b8c649c60572d1c55a562a10f6ef29ff34c2d4b","sha256":"c254f709ce4002f8f1e356caf60ef4fd7abff2c25960af5c65b315fe6d52fbde","sha512":"7bfd11e98fcf16e611abd27513a568475b68911a9fc5de1d8b99def6f05d27e3d3b63c570ba0a8401e7a7cd3b9b82df7417a67ce99eaeaae9e7258486b8a7bf4","ssdeep":"","tlshash":"e1e0d867008100d267f38753663a9f55a4b61e27ab63754164db3822f551c06d503cee","size":373,"data":"","first_seen":"2023-06-17T11:09:51Z","last_seen":"2026-05-13T07:52:24.942526Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/js/check.js?100500","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d61a419574aecbe3b0ff9e130958ac8","sha1":"9217d73e87f12fc0c1de4d2b1aca89bb757852d9","sha256":"0d6fd0e4a74606c8c0f1385b2761f0390869b07159e5bff4bf7814ecc6a90c7b","sha512":"da8a8069eba6e5556a6117f27f8f63aa3191e28d6f15925ed4f4ab01369da246a3e46a8a6080021d9bb020e7a4d4cf1b7c23bbb187ab0e665834fbe5a50b74e4","ssdeep":"","tlshash":"bff02729254d21ec63e24317427a5b01d8bc8d37d75374aa58ca3516b044d068512cee","size":481,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.916701Z","times_seen":64,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"libbb.yotor.ru/css/pluso.css?12s5","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/pluso.css?12s5 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 6982\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Wed, 27 Mar 2019 07:21:56 GMT\r\netag: \"137a8-5850e4ae34d00-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eFLVBbm1b9Wy6Vwi6ohpNwgU74SJNs%2Fk0cgUQCYXDklT1t2tKJ%2B7YXuhFFq7t4teoHYAoVFQrub7xWtv89GGvX8bum%2FZE%2FNN9pfVr3tP\"}]}\r\ncf-ray: 9a5db537afb00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79784,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c2908a25b09fc6863f9549e24f6c846d","sha1":"7f82c7cb6c53b8a9d935755a79a74dc3e8509506","sha256":"9bdc9500d9c5b13f9e5581d12caa13fd71feb0f5c2e61d4de26944b159bad332","sha512":"8c795581dfb50841b49aacf844a1433d7ab29e587ec18d77ead9b3d8fb0c45776639dbc16e24750c6f61607bd0e0f2b44377b59c5083b4ed8e64d39039db741e","ssdeep":"768:AcCh0C1CyacaNG+ReOw2ivyqwueX6K1u6Pe+XSWdy2nUW5QWgiwFKkiUOFEiSwq/:AcnmP","tlshash":"9073e5c299fe322cbd07dd23b650b980da3d3111d5253ebd819d3db9a28a4d8f01766e","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-05-13T07:52:24.902265Z","times_seen":71,"resource_available":false,"data":null}},"time_used":355,"timings":{"blocked":103,"dns":43,"connect":5,"send":0,"wait":131,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/southcentral/js.js?08","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /southcentral/js.js?08 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 1131\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=33SEcAVvxE24VD6pRJE%2BF0PaUldqBLyVQ5silJd24EUdf4rxZxOVyecQvyzUGUvvTyNLNnUqcVHbevcTGCeOZOOZYuCU1%2FO8lQPSmhqT\"}]}\r\ncf-ray: 9a5db5379f790731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (869)","md5":"48f15eb2a5b8ee7b68b032c16d4f9ee8","sha1":"8797e04b9c5a05dc71c8aac4cc8b145ae6bde3e2","sha256":"6ede838c510b030a60f27b0e3466376607a480c6d0cab4e0d2f2f19d92d16af9","sha512":"2832b9fe25e789c3552227ac05c1c4672c27833784f468920a5f3520d6802bfb3302661cea000ec709e13dcf32ce0f52cd16e12109ddd3a9a41776047c1b82e3","ssdeep":"","tlshash":"2c510d4cf75de11c94d603857ead02ee387ca5233242852dfd5d6e606278c3a8a3cdb5","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.884759Z","times_seen":76,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/top.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/top.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 612\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"264-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GEFtp%2BuvAkJrjHxHm8ms5ChtmTF%2FYgpku10A%2BY92P6vGzU568Ofoxd2vNs6xfDBwM037sbFSqLbrKbvCDUDBC%2BDw1LmTWMK9lbaRKl6v\"}]}\r\ncf-ray: 9a5db537afa10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 24","md5":"ab3755cddb40723270164fa84b8f0362","sha1":"a7e6700d02578c03bd76b217b23c55b4fba997ea","sha256":"79df9f5b18cac4dbaec0808448c15e094b5fe20d04aabfe7bed9e6ae07739dfd","sha512":"5abc1bb158bf7cc0ac5c8812f5ac8c9b4545a2622393129ec54b377c05e21de0bcd1840642646ee7e051152af9d6f33d7fc371f0441fc844a8b084504c98d5c8","ssdeep":"","tlshash":"05f0541439558b21e5ff73b5fb6c5f37225ebe1412c8c52738330b134311455c160a6b","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-05-17T13:36:43.206745Z","times_seen":351,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.digitalcaramel.com/js/pokeball.youtube-obhod.ru.js?ts=1764373201541","fqdn":"ads.digitalcaramel.com","domain":"digitalcaramel.com","tld":"com"},"ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:01.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.digitalcaramel.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 26 Nov 2025 21:08:33 GMT","end":"Tue, 24 Feb 2026 21:08:32 GMT"},"fingerprint":{"sha1":"2D:F2:A2:EE:D4:6C:C3:75:F4:98:F3:1D:8D:27:85:47:B7:7E:F1:A5","sha256":"22:CA:00:88:C2:B3:06:CC:EE:13:39:AF:A2:90:52:5D:D0:CC:E1:FA:14:31:86:2A:21:89:46:0F:A6:22:C5:4A"}}},"request":{"raw":"GET /js/pokeball.youtube-obhod.ru.js?ts=1764373201541 HTTP/1.1\r\nHost: ads.digitalcaramel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';\r\npermissions-policy: interest-cohort=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-23T17:07:55.698935Z","times_seen":15618608,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":55,"dns":26,"connect":14,"send":0,"wait":13,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:02.240Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://psyduck-beak.yotor.ru/\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:02 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nx-nginx-request-id: c24d3d27ffab7b29\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nvary: Accept-Encoding\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31556952\r\nexpires: Sun, 29 Nov 2026 05:25:53 GMT\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-strm-log-split: 5\r\nx-request-id: 5f594280821a71ea\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-05-23T17:16:10.402616Z","times_seen":26012,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":68,"dns":9,"connect":13,"send":0,"wait":27,"receive":5,"ssl":37},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/d7cf9ed1df092ba45d5b.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:02.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303076/d7cf9ed1df092ba45d5b.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 25231\r\netag: \"6b040747a08d7d84d1630a39958a6780\"\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nexpires: Mon, 29 Nov 2055 06:10:21 GMT\r\ncache-control: public, max-age=946708560\r\nlast-modified: Thu, 27 Nov 2025 18:37:48 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 9\r\nx-request-id: 76928980307b195b\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":127195,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"1f68c2179abfa91464c96dd0c1d233ba","sha1":"81ede4a5289bc72d7e57d5bbe1be06da0171c330","sha256":"a42270d3753a2542cbb8cd2f41115b3b149333b2d41f6dbaf25b7e7a281a06ff","sha512":"0a908398cf6325061c3701455313fdf83f165725fe17ee74c9165850496274807a40a57018fe0ad1456f58f8d9b61cbda7640e6d4ba3ec2c03403f87e807f840","ssdeep":"1536:Yy9yyK3OPDIlNTE1T151AwaVKiBSoQM6yQNA4liPeRHbg6:Yy9FrP8LTE1Tv1xiBvF6ysik","tlshash":"e7c3f788f59274b502e790f8913f6a0ab33b6419702584f4b76deef19e7490e5122fbc","first_seen":"2025-11-28T08:48:47.154371Z","last_seen":"2025-12-01T11:00:56.917204Z","times_seen":333,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":36,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-28T23:40:00.080Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.new-rutor.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:24:15 GMT","end":"Sat, 27 Dec 2025 19:24:14 GMT"},"fingerprint":{"sha1":"31:3C:47:E4:76:18:C1:E1:62:0E:AD:52:80:B7:0E:8C:07:88:E2:3E","sha256":"7F:60:C9:74:7E:AF:6C:AB:AD:BC:B4:9B:E7:14:02:A6:EA:FA:1B:00:B9:D1:68:A4:87:5C:7D:5B:B0:84:2E:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: org.new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.1\r\nDate: Fri, 28 Nov 2025 23:39:27 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 29667\r\nConnection: keep-alive\r\nSet-Cookie: korjik_test=1; path=/; domain=org.new-rutor.org\ncrackers_days=1; expires=Mon, 23 Nov 2026 23:40:00 GMT; Max-Age=31104000; path=/\ncrackers_visited=1; expires=Sat, 29 Nov 2025 23:40:00 GMT; Max-Age=86400; path=/\ncrackers_time_visited=1764373200; expires=Sat, 29 Nov 2025 19:40:00 GMT; Max-Age=72000; path=/\ncrackers_views=1; expires=Sat, 29 Nov 2025 19:40:00 GMT; Max-Age=72000; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":191638,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (55331), with CRLF, CR, LF line terminators","md5":"3dfa4d18ebb81e10ebc8d82659521a3e","sha1":"ff448405ebb06505a745506cfecae8e8aca4cdb4","sha256":"00436830e2cbbf1ab3fa65a666598927f965fbdf2db873163efb6413d197293e","sha512":"d21e096458454de9b4ec33ad7e49085615fecf69d405d5f676b96df2ac68320feb2c0873c2ebfa15299711a9e1dbd2a2d0f3392a4ee4e7de4f4f01866814043a","ssdeep":"3072:28MZ20JAQILHSFT+9iuzUMPM+LjEsy7dyD9HYcYSmDW+HmeouKqY2mb8Fcn/6DQd:28MZ20JAQILHSFT+9iuzUMPM+LjEsy7E","tlshash":"2814135a80c356b723c161c0e9163e66ecd214bfd1b10906e9ff26baf985eecef42154","first_seen":"2025-11-28T23:40:32.462623Z","last_seen":"2025-11-28T23:40:32.462623Z","times_seen":1,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":105,"dns":1,"connect":28,"send":0,"wait":99,"receive":1,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"org.new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/parse/s.rutor.org/i/poisk_bg.gif","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.180Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.new-rutor.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:24:15 GMT","end":"Sat, 27 Dec 2025 19:24:14 GMT"},"fingerprint":{"sha1":"31:3C:47:E4:76:18:C1:E1:62:0E:AD:52:80:B7:0E:8C:07:88:E2:3E","sha256":"7F:60:C9:74:7E:AF:6C:AB:AD:BC:B4:9B:E7:14:02:A6:EA:FA:1B:00:B9:D1:68:A4:87:5C:7D:5B:B0:84:2E:6B"}}},"request":{"raw":"GET /parse/s.rutor.org/i/poisk_bg.gif HTTP/1.1\r\nHost: org.new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nCookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1764373200; crackers_views=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.1\r\nDate: Fri, 28 Nov 2025 23:39:28 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1998\r\nConnection: keep-alive\r\nLast-Modified: Fri, 09 May 2014 14:49:17 GMT\r\nETag: \"7ce-4f8f8b3aed540\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 46 x 56","md5":"76118a48fd5ae4b926e34f4edb427386","sha1":"4aa5f228e3f511bf626afa6703488d1d7c6df5e0","sha256":"4912841156c4582948d016867a6c71845a0221f1dd6419ea911f6f83bbc431d7","sha512":"1f929eb2a0a9bee00d0a7efa41991625ef4d05c1db107af99b4ea76e5f40435c5b14b8df3d3d3545e899f60fde2ea34dab55a3b65692aa766766e417b513e3d1","ssdeep":"","tlshash":"a141079a5b90cb9cc2ec70f3120486c80232c0f804a0b7060173e4cdea983712b28381","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-05-17T13:36:43.223681Z","times_seen":357,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"org.new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/3186cfb9b35b0b59fd0d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:02.256Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303076/3186cfb9b35b0b59fd0d.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5040\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\netag: \"e3061d9410b757f225df13e9d2110b29\"\r\nlast-modified: Thu, 27 Nov 2025 18:37:44 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncache-control: public, max-age=946708560\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Mon, 29 Nov 2055 06:10:21 GMT\r\ntiming-allow-origin: *\r\nx-strm-log-split: 9\r\nx-request-id: 740a8aaae77264f8\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":14938,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14904)","md5":"37ec02a1943fa9a6171faed6b6bb4360","sha1":"8dd896a271cff22ce35aae8e908c050b3c39dfc1","sha256":"f4f2f8cea9feb381c64fa226b2014a1230f3a407c162c594e614ccb5e522245c","sha512":"9c7e5dba464c1b2c77d5db3ded61ca5b6ef321b638ea30c03ba8ceb3f5fa0f855b754a7e0addf1df6acb337df5433ea008075d2dee4b98ea0fe039cdee11b733","ssdeep":"384:jw2yPj2+lpQMXZ+2l2BTYPS+Y9P6fyH4R:c2yPvvJ+n+0ifyH4R","tlshash":"0462e79574d5b4a513db20bb413f150bf3ba6879684d80a0f222e8e97ef885c8167f6c","first_seen":"2025-11-28T08:48:47.156615Z","last_seen":"2025-12-01T11:00:56.942621Z","times_seen":333,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":75,"dns":1,"connect":35,"send":0,"wait":40,"receive":4,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/forum.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/forum.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6049\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"17a1-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kB1VOG6OCig2f6Sotka4YZ4DHoJJzpRJ1bghdE7SRuRVI0E1CwLcIP2hAXciErWrOHS2f%2FpeY0PbXnnlFXLG9ceIn3F2%2FlC4o53VHMGO\"}]}\r\ncf-ray: 9a5db537afa20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6049,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 250 x 42","md5":"6ed3646afac817366089cc05d97bc358","sha1":"0c27adfd80ae76f705fe1c6093ea92c720124e15","sha256":"d9fd75312b80aa988432407952a1fa963f6a6ca7496d5a7533242475b20c600e","sha512":"eabd29f64c64eee9287f0efdc06b2037889cd075f99df1dae05f053917f38ad45799c9e498ee1fdc8e099625031a78869163982bdd792ebfed63333ba297f9f0","ssdeep":"96:f19JPLJ0kz1EUFu8anogZUmhPHnxTR2ci21YSCOBy0DosckEup9uCAnTMzbWySOd:99NLJ5flaoaUgPHnx92ciIYSCOMKosNF","tlshash":"d8c17d45ec39f7a7fc136878553f362ede15ea2db0471a6691063ec90306e6049718b5","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-05-13T07:52:24.850946Z","times_seen":64,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":73,"dns":0,"connect":0,"send":0,"wait":128,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myroledance.com/services/?id=146839","fqdn":"myroledance.com","domain":"myroledance.com","tld":"com"},"ip":{"addr":"193.200.64.24","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"myroledance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 11:16:19 GMT","end":"Mon, 23 Feb 2026 11:16:18 GMT"},"fingerprint":{"sha1":"5D:3C:C3:C7:BB:E3:FF:93:E8:85:88:8B:AA:76:5B:51:61:7B:0B:31","sha256":"4F:6D:67:C3:79:39:BD:11:27:1A:0B:3D:7A:A9:48:16:7A:27:67:6D:94:CA:64:51:45:54:EB:20:D6:68:7C:C5"}}},"request":{"raw":"GET /services/?id=146839 HTTP/1.1\r\nHost: myroledance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 28 Nov 2025 23:40:00 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 1592\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1592,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1592), with no line terminators","md5":"05b5f50693636e9c48f32009050bc897","sha1":"2dd6ea907945cbab3ce7ce50e2a7a042ea3172a5","sha256":"97109d2d40747b7202a6f5994799137173f4834fb53ff863bad12d3863c6f324","sha512":"171c7550558dcd168a65b84c11804a08618944661ac4b5f7b5bdc1721a7b0cad6d719b8dbeb27b356301aa9bc006c43635181c125e5097a2f80e450c19ac9d76","ssdeep":"","tlshash":"9c312769764b20fb729fa0417abde402fa1d3a3188ce8cdcc54cd59b139256987dbd34","first_seen":"2025-11-28T23:40:32.480146Z","last_seen":"2025-11-28T23:40:32.480146Z","times_seen":1,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":13,"connect":17,"send":0,"wait":19,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"myroledance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/zaiti.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/zaiti.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3070\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"bfe-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTeiB4J%2F4WadC8hI%2F6CDw2ZrUCfpm1asL0cvpfW%2B8w01WfdfXxhUmzHQqCCZ3ZazCHTupJmMSl63J8gI0O1xk6WQ2T3Wm511KIYE%2Bsbg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a5db53c18d03181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3070,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 99 x 30","md5":"9815ec4cdd376b7d71df61b74a7ce6c6","sha1":"962c557ce627cc0332bc6ee175914946ff4bd2a1","sha256":"a1d3e2383ecd387242844341a7200834f5cf3517ab846f17d276a2adc0286421","sha512":"ec65c616a7adeb7b7c48d0c2ddcf2facde5c6ad0f67541a46c31a2ffbec424df42b468d9d7095959529eb9ce4694b89625f94e3cd78cdeb77413bc4c2fd0c036","ssdeep":"","tlshash":"d5515ec8a47b26dff21c467c5e95cbb51fe514c016b9ccb0a0d5371748560ec1129715","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-05-17T13:36:43.20975Z","times_seen":310,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"org.new-rutor.org/parse/s.rutor.org/favicon.ico","fqdn":"org.new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.new-rutor.org","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:24:15 GMT","end":"Sat, 27 Dec 2025 19:24:14 GMT"},"fingerprint":{"sha1":"31:3C:47:E4:76:18:C1:E1:62:0E:AD:52:80:B7:0E:8C:07:88:E2:3E","sha256":"7F:60:C9:74:7E:AF:6C:AB:AD:BC:B4:9B:E7:14:02:A6:EA:FA:1B:00:B9:D1:68:A4:87:5C:7D:5B:B0:84:2E:6B"}}},"request":{"raw":"GET /parse/s.rutor.org/favicon.ico HTTP/1.1\r\nHost: org.new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nCookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1764373200; crackers_views=1; t_e4719dd21a=1; rocketteam_counter=1; pokemoky_counter=1; jassyandjames_rand=2; poke_counter_up=Sat%2C%2029%20Nov%202025%2011%3A40%3A01%20GMT; poke_counter=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.1\r\nDate: Fri, 28 Nov 2025 23:39:28 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 894\r\nConnection: keep-alive\r\nLast-Modified: Fri, 30 May 2014 11:59:48 GMT\r\nETag: \"37e-4fa9cc83b1500\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"ab55f59a775976829d8352a7a0584d3e","sha1":"e4b29ec4ac46d97ea15c582d61d02c523dd0485b","sha256":"e68d4b7f22b5027fef4672cc5ba884fb52ac248fd1ca4648c9ac89d95b0e58f4","sha512":"1dae2e3cdf25e072174d2289ce96c423095e4fa8095a7ac33b319f389d1add9ba2f7f7280f4c8cc70351342a324a6bbeaa526381dd4125a3d3594557535b09ab","ssdeep":"","tlshash":"fa118ac555d10e0cfc4595fcb363462511e6cceb2e8092574d53491f3cb128669a4a45","first_seen":"2023-05-06T09:54:57Z","last_seen":"2026-05-17T13:36:43.226392Z","times_seen":540,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"org.new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kllastroad.com/surface/night.js?24469\u0026v=3\u0026u=null\u0026a=0.39528957528058284","fqdn":"kllastroad.com","domain":"kllastroad.com","tld":"com"},"ip":{"addr":"193.200.65.68","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kllastroad.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 25 Nov 2025 11:13:35 GMT","end":"Mon, 23 Feb 2026 11:13:34 GMT"},"fingerprint":{"sha1":"2D:16:4E:9D:02:59:22:04:2F:92:2F:A6:92:13:96:BA:23:6E:62:6A","sha256":"FA:9F:3C:18:47:91:C9:24:2B:F4:FE:08:1D:08:5B:61:C6:06:AC:E1:D5:13:C9:46:0A:8B:5C:8F:DC:DE:15:89"}}},"request":{"raw":"GET /surface/night.js?24469\u0026v=3\u0026u=null\u0026a=0.39528957528058284 HTTP/1.1\r\nHost: kllastroad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 28 Nov 2025 23:40:01 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"NON DSP COR CURa TIA\"\r\nSet-Cookie: uuid=17643732011421081176; expires=Sun, 28-Nov-2027 23:40:01 GMT; Max-Age=63072000; path=/; samesite=None; domain=.kllastroad.com; secure\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36100,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (362)","md5":"d4a676073ddb0479954b04fabdb84b18","sha1":"bd2443b8dadbb01731486cf100633f7ffb876d51","sha256":"093f2a6195335dac05c991f822b5af25234ef672fbe4d0eb3d98f949c9e0499a","sha512":"a044451d647ccbd0085b60c1eed840e1e7668b4ed9d50fac92f49b435f0f8ba6f37f03b1795a65af32d6cc6b56a70b96c02a35264b2b9eb2c5e3bdca004ed524","ssdeep":"768:xwT/7d3VZb+mtjfptkwIL9HBlyQQwMs3NEaWlcb3z:xwT/7d3VZb+mtjxtkww9HBlyQQwMCNE4","tlshash":"abf2934e66e710320197a43f6fdf81487670c1873148e91cbdac46486f58e29cafabde","first_seen":"2025-11-28T23:40:32.484565Z","last_seen":"2025-11-28T23:40:32.484565Z","times_seen":1,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":71,"dns":14,"connect":17,"send":0,"wait":39,"receive":1,"ssl":37},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-28","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/pluso-like-small.js?10","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/pluso-like-small.js?10 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 972\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Sat, 24 Jun 2023 16:08:50 GMT\r\netag: \"8da-5fee25541e880-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IHZOpHXq5bR9ouWrXCk0DTkWBF%2B4DgR74x%2BcTLgBaO21TOkqcn1NXhA4zeekXi2zfcDWIiMijxvxCNaNdlWflCJP5K2pScDbCxiEPckr\"}]}\r\ncf-ray: 9a5db5379f7d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2266,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"dae4b00893641d10303a88837aa5c45f","sha1":"a7514fb190fa8ba489b2dde5dbee92dd0fe7ecb7","sha256":"e786f1e87ef6054b4aab3d26780d3525a14975b8d4de5bae54f095fa07ed5b08","sha512":"f42bd1cf7edca40d2d1bcdbd35c6f36bee9c62172dea1afcc9b0db07139a94cb9d4ead6f3401f7d0ba34d66ab08a5a2be88786def635d2809ef1110d646669f3","ssdeep":"","tlshash":"67411d78bf29722e4172106ff50f744ac0b4842ac4596c8f5f75a1be2da1b6b736c638","first_seen":"2023-07-07T18:06:31Z","last_seen":"2026-05-13T07:52:24.832606Z","times_seen":75,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":82,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/m.png","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/m.png HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 656\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"290-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TdgIMfH9WQNlVOeeoBwwdOX96GF%2FtPWXunDMb%2BycF3Arv%2B81V8SCAXhNNIIL%2BAJ9ysy71DnMWLhijlMxv7AkuRacuzNK32qZ%2BFvErN9t\"}]}\r\ncf-ray: 9a5db5379f860731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":656,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 13 x 13, 8-bit/color RGBA, non-interlaced","md5":"1c923e4247dd2fbbc7e407beecf6028c","sha1":"37a7cd424c135206071cad59df92511df4fb6e5e","sha256":"efb2d84b9882f1e58d07b358cb77ad0b67fcce154bc7dc70086532abe8f57fff","sha512":"6d9182c919c300bd2f27908ef356c5ae73e40dbc10052038cf275261c77a4333bde3c3467a992f0efea28ffbf3db3665e78fc1fcf907ea656e0c2a5bcfd15a52","ssdeep":"","tlshash":"55f0fea3eec70375eaa0098d8f6285645c47098524a601db61a24eec28fcb0096bae90","first_seen":"2023-05-13T07:55:03Z","last_seen":"2026-05-17T13:36:43.204951Z","times_seen":272,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:02.255Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /safeframe-bundles/0.83/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 8878\r\ntiming-allow-origin: *\r\nexpires: Mon, 29 Nov 2055 06:15:24 GMT\r\netag: \"f80882bf67cf261aa08d636da095149a\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncontent-encoding: br\r\nlast-modified: Wed, 03 Nov 2021 13:42:58 GMT\r\ncache-control: public, max-age=946708560\r\nx-strm-log-split: 6\r\nx-request-id: 1d82c5a5d2c5d5c3\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33703,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33703), with no line terminators","md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-05-23T17:16:10.515424Z","times_seen":26938,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":73,"dns":1,"connect":32,"send":0,"wait":26,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/css.css?27047","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/css.css?27047 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 2749\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Sun, 29 Jun 2025 21:18:46 GMT\r\netag: \"22a5-638bc74de5980-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HXJ5dgLDu6G06nbLuE21lyW1ZQT6zgj2XAhFzBp08Qdp%2FrLxdx3PyJTjLmuSx9vEQ1FNwVDfaWy5grJ4lkoPei1igQDx7bb4fotPm0I\"}]}\r\ncf-ray: 9a5db537afae0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8869,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a30a1bf9f5a23d25dc8a564c1d479de1","sha1":"fc5eebb9f8d2083ef211126a64c17d66c535846e","sha256":"75d0c69972f189d1516b0794007eb554e3c01ee926e5d51189e36acb589d9647","sha512":"c08c6986ef1bd449714d65a372f12794d83e7a2db79ad4990cfbad86eacec2e9a9daa70735d2f6e837a147f44a75dcf9334bf5e0ea94a488aabe606c9e6cf283","ssdeep":"96:8sOdlxjgpdtUj2BBNhwOAptCe1oBojIo7ml7HAId1K1+FWo9Rd4JbOZHy:8pj2hra8e1oijIo7ml7HAIft/lHy","tlshash":"0a029711b2843449701fc1babc76a339673f4017a6446f7da6b97978c78d0a780b33ad","first_seen":"2025-07-09T19:13:06.335697Z","last_seen":"2025-11-28T23:40:32.490071Z","times_seen":9,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":109,"dns":49,"connect":1,"send":0,"wait":109,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/arrowdown.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/arrowdown.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 51\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"33-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YETX1D7VQX4GoTBDadzYVElVdqPXPA2VoG43gHK%2Bz8pistczxt9y9kWwnLAQ007f9tJCJOSybWjfuCVAOqMRsOp8s7SrL%2Fq27%2Bv4h7C7\"}]}\r\ncf-ray: 9a5db537af9d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 5 x 8","md5":"fe98a58fe6509fb7cb897d25228329d3","sha1":"34d9e63fe61d4b543f84003c70d0473b6893926f","sha256":"a045e7b1f5ceaefbab2ef782b86b12de0a41fc2ca34c43cbf6b8b8a107d339ff","sha512":"dc044c6b3160559db9d448285bc87db4fd0f75e0dd1844346fb72ebef81eeb83a9ef8fb7cc558902695cdce14dde14a0561ed638749594f1f4b61ee1024f0e15","ssdeep":"","tlshash":"e4900470ddccc401c131d4f4457d43d53754d14f05dd0707117510055c5c31743030d5","first_seen":"2023-05-13T07:55:03Z","last_seen":"2026-05-17T13:36:43.205631Z","times_seen":342,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/bbackgr.png","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/bbackgr.png HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/parse/s.rutor.org/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 2859\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"b2b-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUVgt8uqw0Ff%2Bqbsb3YlH917VVIhVBfn7MyoTR%2FwXqzcHUEQnn7BzFBbxNZ2une0%2BDRPI4P%2BltaOse%2BtMrJnWemLQyKqUEgOI2OJgFm5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a5db53b4f263181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2859,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 30, 8-bit/color RGB, non-interlaced","md5":"556ed9fbc3543fde2370f99c737be049","sha1":"420c334349f796ee85f261bed6753719221a2fe9","sha256":"a682fdf55d12206673fd39d71e37893badd8286e7c511dfa95e05c0b509b9618","sha512":"c2d94bfae7bc0ab871aeec53c18df1920d14985c28fb85a7ba3871c727ff5660cb5be4a5624168ee16998a7213c9bcd6a907c1fee32bdacacaa3161621c2afb1","ssdeep":"","tlshash":"a7518caf8970b08f78dd79520dcd4202e36c227c8a67373890c269cf4492e47af2a0b5","first_seen":"2023-05-21T11:00:05Z","last_seen":"2026-05-17T13:36:43.211343Z","times_seen":117,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"psyduck-beak.yotor.ru/inc/sisjoy/wf.jpg?5","fqdn":"psyduck-beak.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:01.595Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /inc/sisjoy/wf.jpg?5 HTTP/1.1\r\nHost: psyduck-beak.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 76861\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Mon, 07 Jul 2025 16:17:35 GMT\r\netag: \"12c3d-639592e7bc5c0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3JHAO51SKX2zynrO9ElrItCaSk4m5nCn2h746ui1v8C5CpxJam6M6yw6YpXr9pZY8Sh427t7Vi22jxGvr3G4k4mwHY%2FxMAAIlSIhnVXRFYc7rrWKeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a5db53ded143181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76861,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 728x90, components 3","md5":"e45044ebc32d3ba6da52f851a5898802","sha1":"26cf00eb2f499b51abf575bdee71f6db7b5b3728","sha256":"61eb564576e22000f4d6fd170646fc00e0dca8f7a3370c8c4d6921e24828c06e","sha512":"d5b7813bdf2589e5279ccf3e1ae1c5cc59d778e8aa1049c5b4c0dda07db39221da88f98a6dac303cb3b5b65ae86f7239ad52ae2d00524ae57988c2d95bc24b4e","ssdeep":"1536:BKdml8LKqMySf4QXYeDRiRO9ANffi2rtEYXofVIo+Z7b8hLXMMdg/g2U2:UmQKqMya9XYeYjBkNKtUJMMio2U2","tlshash":"4d731207a29f743d46e7a9ed336f4c4f8785fd9c350914a3e668de42e034d10a8a4779","first_seen":"2025-07-18T09:21:09.244263Z","last_seen":"2025-11-28T23:40:32.499521Z","times_seen":4,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/ic24.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/ic24.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2362\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"93a-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jwd69RoPYlVqe47Q4VcH6n9fa1XgM%2FI1ZQbMGhJLeMF2wgSg5aru0DmCfJhlS3VLO1A9FP4ioA9DjYTgChgdGvD%2BomNu7nXOa8EW2Pt%2B\"}]}\r\ncf-ray: 9a5db5379f810731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2362,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 60 x 41","md5":"976d75e1c6afb21afa4241fca3aa0aaf","sha1":"8da3af404aad55e592caecbb640936facba38856","sha256":"8cebaa55f91e1628a7b4729ef423d6947dd2efad0d0bf06bd0371912cdd21404","sha512":"1bc97907135353c0d6be9918eb816b953059f3ebe1b30f076c39a0348961e60c41286f15861b9766b6ceb2aa1d494edbe2c44dbecc0a7eea87ffa2f80ee55526","ssdeep":"","tlshash":"1e411ad9e9e2ef08d157933b495aa17aa12481248113088b67dee870a3d47cb4309112","first_seen":"2023-05-21T10:05:04Z","last_seen":"2026-04-01T09:23:20.243844Z","times_seen":75,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":78,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/news_line.jpg","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/news_line.jpg HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/parse/s.rutor.org/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 815\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"32f-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0Vq3etATYuAzkyXzLjnr0XBuZNliauQ1UFKn8W%2FLM5LpjPUxsxAIWGgMo6SltAjpHj4dxQh2MgtP4CTWW5EMeWx9toBqLrtjUPR2n5BZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a5db53b4f1f3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 400x1, components 3","md5":"0ae0cab0ed0d41e3dd26ccbb8c17b4d9","sha1":"c539f0433f976b2509490fc5b5fa9f358b10fa2b","sha256":"8b9592e1f87ca0409266d4b98fd553dec8c9905ec2782f1c0526db1178e48757","sha512":"940d5ba88d0229daac27d0d5289507dea8e8e7d6ecb262b1f52194bdb045ad01d5101f8d603d13d91d93b142d2a07e14693f686443d91738954c58c62f3f1f1e","ssdeep":"","tlshash":"1a01feda570f72d09f33b4b61d15e1a79289798e3dd477301aa142a5cde0ff48048a4c","first_seen":"2023-05-12T09:34:13Z","last_seen":"2026-05-17T13:25:11.1Z","times_seen":86,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/c4714f2841c33a556de6.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:02.250Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303076/c4714f2841c33a556de6.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5747\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Mon, 29 Nov 2055 06:10:21 GMT\r\ncontent-encoding: br\r\ncache-control: public, max-age=946708560\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\netag: \"9f3a376316a417b6523d9967b1f7693b\"\r\nlast-modified: Thu, 27 Nov 2025 18:37:48 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 5\r\nx-request-id: 1326c672ee415aee\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16372,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16338)","md5":"69e089ea9a5e358092d61f6511fe0d0b","sha1":"d07f29146f438f2b3514caa7f1e8d832e92e7aee","sha256":"e0fc60bda4b90e6e5e3fe696f11d44f96e4fde03a71e0bff749c767b49b3c4cf","sha512":"176047cbedaaadb56fdc466b7616ca4bd27be3108952dbfee2764a6805ddd47c121fd439137b81cb921f3b7e8ff20f4c08fcfc5c59f5eb364340e673e1a5df61","ssdeep":"192:/wMyHK7SO2dyacdF6mmPyZeBbJVttdANkzmiWiN8XNVVpohQniuv0bbjLIFTcue9:/wMyHKOOkypvU/Vtodi3hyhvADhl","tlshash":"8d72f8fd7520b0605bdb30b5627f191ff378292e644cc4a06706edfa297491e5193fa8","first_seen":"2025-11-28T08:48:47.140122Z","last_seen":"2025-12-01T11:00:56.942133Z","times_seen":333,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":72,"dns":5,"connect":17,"send":0,"wait":28,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vak345.com/s.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336","fqdn":"vak345.com","domain":"vak345.com","tld":"com"},"ip":{"addr":"87.242.110.167","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.518Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vak345.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:55:09 GMT","end":"Sun, 04 Jan 2026 14:55:08 GMT"},"fingerprint":{"sha1":"F5:80:DE:45:76:80:46:4F:70:74:3E:B2:48:0F:6A:C7:F4:9C:4B:87","sha256":"60:FA:92:1C:D5:7A:C8:5D:3E:35:6F:F0:3F:A1:D1:9B:0F:1A:25:26:4C:2D:94:26:0F:76:11:AF:30:A0:D9:11"}}},"request":{"raw":"GET /s.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336 HTTP/1.1\r\nHost: vak345.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\nx-raw: \r\nx-build: c4417436\r\nx-host: nginx7\r\nx-movieads-country: NO\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24878,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24878), with no line terminators","md5":"a3c768ca91fdad8f56e6309dcdc5c533","sha1":"313aef1902a3336c3cf88a9783d4f4502f8e6857","sha256":"28eb420cc872b5b7a4e37278a4b602f9dc117da020e2340afe39259280dfc087","sha512":"a1792623756f82e95cc4491e141dd152872b7676259290cdb9fe23586b03d9cb1a9cddc970a343a360dd85b70522cae90d2df6e055135e9a192cc1c42e81e0c1","ssdeep":"768:E4gj8m4M2LpG+9BTl1OvaF/0a+EbFKm7awn8uPmkbeS05FI8x2WM42GxUofG5ZiH:NFELdFIeDPoiHjKxo","tlshash":"81b2529225d4b4a943b317b7620ef2c6e02a5cede4440edeb30cf994f198503fba9571","first_seen":"2025-11-28T23:40:32.51032Z","last_seen":"2025-11-28T23:40:32.51032Z","times_seen":1,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":44,"connect":43,"send":0,"wait":50,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/backgr.png","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.175Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/backgr.png HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/parse/s.rutor.org/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 2869\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"b35-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ij5oFbhCUVRDAbgZvtC6GlIOz6hp93JV6zheKslJdIg6eu4qau%2FFIiboqDGXpYjsKS0rb81ljLxg%2BEcsVk8fE6nK%2BM3rYF0WX%2BMvp6fy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a5db53b5f4c3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 40, 8-bit/color RGB, non-interlaced","md5":"c3ce2bb8d4c132e9de2119357cc9996a","sha1":"a9852953a234009e3f2269bd8b2cc4f2f2c432c9","sha256":"169a94c46ca015567d2a42296bc93f41bbf6251b46ddbe476d6843da2a1360d6","sha512":"108eb584f9d6f13f4e76778a80dc4d241caa91390dd62105e938a9f7efcb40c2ef0fdee4b7e6af4233fa838f02214da94c6421b270af03c08f546c3a9ff749c3","ssdeep":"","tlshash":"60516bafc9b0a48f6ced75810dcd0202e768327c9a67363894c265de1055e077f25075","first_seen":"2023-05-21T11:00:05Z","last_seen":"2026-05-17T13:36:43.202781Z","times_seen":106,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/web-mirror.css?2","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/web-mirror.css?2 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-length: 83\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MjzXsS65hM7%2F52rxhVDtkxV8W5qOjh8flyXHiqyYwPggjs3g11iOjSTLdsHv%2B1KJ9ggwDngZCpEKExCB0Pok9CbGJYUTYDD6A%2Fdes29t\"}]}\r\ncf-ray: 9a5db5379f700731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"d408fe886be98e8f774d6f47a3157a8b","sha1":"2a25fd6f2822a6b158cfec4116284996e2d55078","sha256":"b8388dd9cf762de7fb6dbcc5191fb91666cb5f477fee21779bf576ac9180a026","sha512":"5b4d1c5148c3fb306a4c96ccdd678e7c3c83cadd10dc909178becb981e939c1bfe629bd153adcac4459ada81af88431ee8a1e36de872a21a043a9561a400bc91","ssdeep":"","tlshash":"c4a0020374d703616227c5150d8b737aa87eb14253048e8dcd4052363eef2d30dc2e91","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-05-13T07:52:24.829412Z","times_seen":37,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":93,"dns":45,"connect":6,"send":0,"wait":129,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/com.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.508Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/com.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 295\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"127-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N7Q6A7aX7eU1442s4EocqXwiNrqlEDrP8OdyyHMmUNglvm0ljWpZQZoM8rKj0XBRAS0e0L3DxVuIKqRyux0bZeqRj%2BksT0QaCuIPT4yI\"}]}\r\ncf-ray: 9a5db537af980731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 11 x 9","md5":"e91f48c29a8f6285ade898585e58f8ad","sha1":"c171b970bbdb33210c1e9714bc7fa96e42bdb0bf","sha256":"30bacf9c5db02b0b5fdbe670c15301ec8231d2e526ab20ea5f8dfb8692e02f17","sha512":"43844fd130cb484f8641493014e56fd8aa45077b53def7f2d516341e54633b590923f599e4d76e088be6f546dc8796b4f2afba7cbe4292915ec4ed60b9ef9aa7","ssdeep":"","tlshash":"7fe023018346904ed4c5c0fd0c6cf3182f823582927c55cbe608200c03020204040741","first_seen":"2023-05-13T07:55:03Z","last_seen":"2026-04-01T09:23:20.263351Z","times_seen":322,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":75,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/img/pluso/sprite.png?1","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/img/pluso/sprite.png?1 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/css/pluso.css?12s5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 259091\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Tue, 14 Apr 2015 04:47:19 GMT\r\netag: \"3f413-513a7eced63c0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mm3GxJhSxc4ymbol7S3IbdwPca%2F%2F4m1KlFHjWGvH3MqAX%2FEdEW%2FmcC41EZOywIQx95SfDDZfUTASwHsoTfyzcwt0aK%2Bf99oKkLuHlGGf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a5db53b4f1b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1120 x 520, 8-bit/color RGBA, non-interlaced","md5":"b41edc2ebadcc210059384019530364b","sha1":"53bf7e638084d5d3edb78be83d3a8dd8b318562b","sha256":"59dd7e1dce6b861ded439efde90acabebbe955f48f96c990abdd471af1b5f026","sha512":"42c90b4aa24f7ec95780ffcff3c70143dd38f19bb983591149cf9e4f8e9e1d70dab090a5df37f2becc12cc6a8a2b9f6312712272e7e6de7c5dafbfb3b3b0c43f","ssdeep":"6144:xTbFOPiFwrmO8FTYw8sb/RIbDygZKd29m7/+je9G:xTb46Fwr+38s/RU+a","tlshash":"884422ce2c5c690c3fbc76051b9b5798a6d9981bb02089b2e4beb1b3d122f5d3d131d5","first_seen":"2023-06-17T11:09:52Z","last_seen":"2026-03-29T07:13:34.346326Z","times_seen":48,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":84,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/header-bidding.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:01.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /ads/system/header-bidding.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ntiming-allow-origin: *\r\ncache-control: private, max-age=3600\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\nx-yandex-req-id: 1764373201944725-17668005753182209564-balancer-l7leveler-kubr-yp-klg-131-BAL\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nexpires: Sat, 29 Nov 2025 00:40:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nset-cookie: i=QzUsZPEWcwrtL6GOiPm3h0kxObfEDtdNjYgM0hSJBzsR8Z54xfCz3L4QWNaQKySU/vR/TNKePBMB9k1F+NwafA/oQd0=; Expires=Sun, 28-Nov-2027 23:40:01 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=5822095641764373201; Expires=Sun, 28-Nov-2027 23:40:01 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=2570739401764373201; Path=/; Domain=.yandex.ru; Expires=Sat, 28 Nov 2026 23:40:01 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YNHlqMkGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sat, 02 Jan 2027 23:40:01 GMT; SameSite=None; Secure\r\ncontent-encoding: br\r\netag: \"380a0b3be6969450067ad047e3e1b0cb-1303076\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":144821,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65478)","md5":"a11946efb9a17caf6d6bde07d9399c22","sha1":"5d1c55a1cafa1e5b2319c2d929f3bceec9bf1039","sha256":"7cbfc5b4e67c632c558adfe5f421f6d8634100c9e859b67f90611add286cb70c","sha512":"3691b832b788ab975be9e0df7087a8d9cea2dfa61c3c3f94708365049b06245f17f7dd1735b57515178a1c86148a12df7812b898dc42c5979c5f8a7535f299bf","ssdeep":"3072:wGP7nOhf6WX7TiPQvxmTUSMEnd24LSGH5asbrFb5RjwQ+OXjc2j4HvKQUFCUthyC:GTRxSt5asRXpyy3h","tlshash":"7ee30a9d7aa1b4b6439350e5843f260ef33f5929a41d84a0fb27d4e26c3595e8223f3d","first_seen":"2025-11-28T23:40:32.515666Z","last_seen":"2025-11-28T23:40:32.515666Z","times_seen":1,"resource_available":true,"data":null}},"time_used":416,"timings":{"blocked":161,"dns":35,"connect":47,"send":0,"wait":58,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/rutor-logo.jpg","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /rutor-logo.jpg HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40987\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Sun, 06 Oct 2013 21:18:39 GMT\r\netag: \"a01b-4e819144909c0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lFzgSrp32%2BG7euKu%2BgK2md5kL%2Fra%2Bv99B%2BxB6oc2GdIdHFYOrCM20I9ttPlMD%2B1VAN7wREAhG015bDeXLKfSEw9qkePcsB1s%2FsSe6DKR\"}]}\r\ncf-ray: 9a5db5379f800731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40987,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 420x110, components 3","md5":"dfc84b0055c981234dd3f48bb8ea7ec2","sha1":"43124eced811630622b81e968590e11071c31040","sha256":"c22baf90cbd403ab7d173f6fa65999a6246d71612d6859181ea7642e98a75279","sha512":"4aa9f868d4cfa7f798429b206763ef9e5680e0f6ee46f790f5002fd2219242802445bb54de02a691b62ca5b7521aa3326e471a38b4952d67485a85aaed389fde","ssdeep":"768:Gsy1cuV6mpkH1V6YDDI15+sV1gemJvCk8dpKZvijAsNwlFwKftTR:Gs3joi6YA1J1gemJvVsGv2KzwK3","tlshash":"8103f278f171948595a49894c7e2e78fc2414c4bc8f9b3a2a3d24f919052072edfcbdd","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-05-02T08:30:51.172767Z","times_seen":67,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":79,"dns":0,"connect":0,"send":0,"wait":134,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/css.css","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/css.css HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 2055\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Fri, 13 Mar 2015 12:51:21 GMT\r\netag: \"1c0f-5112af50b2440-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rg1YwVfQATIi%2BUjwCxqYPNxqSzaqD3hUByG2v%2FMm8E7p9AjZ72bNmG3cnyGP%2FGdzbO4k4%2F4G4wo4A3M7LOE80%2FOn57B976DfY8Pan4V8\"}]}\r\ncf-ray: 9a5db537afab0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"212a2bc682ef7adee0a380aefce98638","sha1":"82dd244f1a0decdf011b4775b94c4296ff67c460","sha256":"aa3d36b7b649920bc8419fee4edece4f5801a9fbd828dab2fdf4179935af1b2a","sha512":"420e7341fe5806b7eb909cd4759a092d93b7406f63fd1e52ea2fafc10fcef65d161e159795d821b9b07203cdb75b8b00db27bef5205487a27ef7d372d004744b","ssdeep":"192:n2/21hLTynEWAYJ6jjIuYV0rY1lHI1wiY+6U9ZgI8:ncShinEW96jMu3cHI19SU9mJ","tlshash":"0ce1412367862cc6b14b90adeeb4db10662f1442fe1f5fb9f67a766ce3500d1227624c","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-05-13T07:52:24.914379Z","times_seen":53,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":110,"dns":48,"connect":1,"send":0,"wait":130,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/arrowup.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/arrowup.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 52\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"34-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2hySH%2BH6DZ38vszbcaTUsP5Q97%2Br3TS%2FAsY2FuWxHufHEmOkWAm%2Bs1JcXLhSFOa54P5JXuxedOG5Y0nDKFzQ5SZARO%2FJupnzktEmOQLn\"}]}\r\ncf-ray: 9a5db537af990731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 5 x 8","md5":"7cbfc089fd0b0d261187a0c1ef0826af","sha1":"1583fd0ccdd6a7dcb24ef670761ab01387cf87cf","sha256":"b88cfd011c972f65586f207621005b8b3336773a252e2a309ddbd9b7dda7b8b9","sha512":"0cab267c42446b8d4fcf6d660e4e538c891a45c4e19592dd2048e803d1b5b22b07a644ec1d7828b6c05a0ce58e0dbf756c106fd63c9ccc737cee16131c063d7d","ssdeep":"","tlshash":"1d900400f5d4d001d0377075477f43703d07c307051503431035110c5f541753143571","first_seen":"2023-05-13T07:55:03Z","last_seen":"2026-05-17T13:36:43.210391Z","times_seen":344,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/lupa.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/lupa.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3079\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"c07-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUlA5Zg6dSr1NXyZnd0LtIX0ZHsC0kFoEJjbuzQ42aYWWmieN%2FvaMqkbNxGc0Ul6X7BXXvHxZwAw9A%2F8z1rlDCoxhAHsT3d9Yuh7zWXE\"}]}\r\ncf-ray: 9a5db537afa60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3079,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 55 x 56","md5":"e2c8f8537818f7880be3ae505852b9ff","sha1":"2a1f5572e6f4c9efc1700f34d6c6969bedbd8535","sha256":"6946c64a41b61a1e8708b7bcf8274274c71cdc23932aab32da5b868d19212b3a","sha512":"02e22d3a890ca47d0235655094ed35b13dc32a0add2454ce4ae9630b7bd4f9e37f966827143e59f5312cbad5c383892069a741d45824457613aab2c0dc301cbc","ssdeep":"","tlshash":"e151299ab8ec472acaab7834f5879fc81da5661c844366ca490b4d27153c8d94c3ba51","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-05-17T13:36:43.213913Z","times_seen":360,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:01.774Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /ads/system/context.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nset-cookie: i=n0H3U4wWQTvvjf7idpcJoEjEplLoe1sfrnyPTR3VM4Xqr9bo5IirCFyDR+xTWYE365cY2CNmTNY8CxtpDFsxlHYKV9g=; Expires=Sun, 28-Nov-2027 23:40:01 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=2043846141764373201; Expires=Sun, 28-Nov-2027 23:40:01 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=436123581764373201; Path=/; Domain=.yandex.ru; Expires=Sat, 28 Nov 2026 23:40:01 GMT; SameSite=None; Secure; HttpOnly; Partitioned\nbh=YNHlqMkGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sat, 02 Jan 2027 23:40:01 GMT; SameSite=None; Secure\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\ncontent-type: text/javascript; charset=utf-8\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-yandex-req-id: 1764373201970701-16378102653404384614-balancer-l7leveler-kubr-yp-klg-131-BAL\r\nexpires: Sat, 29 Nov 2025 00:40:01 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\netag: \"a7b61b5dc1b3e88993edcaaca95ac50d-1303076\"\r\ncache-control: private, max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":446251,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"661ebb215e7c519657a4af1e834577eb","sha1":"8e534ffc9a0f1c2fb888d2628ec30cfa481128ad","sha256":"8f74c7012d6f835598e27c1eae7e88f1ccfa7d3aa81c1017aac8fb165c754392","sha512":"9b4727dc7efcaa274d1003a300b5938fefaba8edd085ac65b472724898fd904606bd34bed4137a6b79b3dc9cbd6e8e357480b14e51b609a62d87b1f15349377b","ssdeep":"6144:dE413h19jGGyyCl4PYXdCn7o4yGKzt4GhZRRyW:rR1QFl4PYXdCn7omWH","tlshash":"6794f8e975a1b4f203e391e5843f160fe33b5a29741d94a1b722d8d1ac29d4f5223f3a","first_seen":"2025-11-28T23:40:32.519621Z","last_seen":"2025-11-28T23:40:32.519621Z","times_seen":1,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":185,"dns":29,"connect":44,"send":0,"wait":111,"receive":0,"ssl":142},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/5f9960c41cea84ce2eb3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:02.246Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303076/5f9960c41cea84ce2eb3.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 17562\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"294e3f16fb21b36ffe894e164f77ab78\"\r\ncontent-encoding: br\r\nlast-modified: Thu, 27 Nov 2025 18:37:45 GMT\r\ncache-control: public, max-age=946708560\r\nx-robots-tag: noindex, noarchive, nofollow\r\nexpires: Mon, 29 Nov 2055 06:10:21 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 1\r\nx-request-id: 4d14bf2bc900e5a5\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75241,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"5bad6ff2d867a5cef30ba0725207b073","sha1":"09aa929c7c43d9f58c986701d113e7384380e522","sha256":"cb46636fa17a3a30726db627410195a3a9a318d34a1d15d094d3b49d863ade50","sha512":"3e498411decf14229eeb7a7a0bd5410fc44d36ba939d3a63466df6bd738efaaedc336e152f81487e2f85dcce665778d79a70a27d0f0bd2443b209efcf62afbd7","ssdeep":"768:7syoxBshVVNu+NSW/lQSuZqyWEDVP8BD93yjDUSp0Bpnr2nAY17h8q:gyoxBqy7ZqrXBDNhBF6AYxWq","tlshash":"e073ead97595b9ba02c3d8f1443f220ee37b9611711a6580b323dac1ec25adf5223e7e","first_seen":"2025-11-28T08:48:47.151953Z","last_seen":"2025-12-01T11:00:56.932623Z","times_seen":333,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":83,"dns":0,"connect":17,"send":0,"wait":29,"receive":3,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/grannypatries/s.css?9912s37","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /grannypatries/s.css?9912s37 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 2742\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Fri, 13 Jun 2025 17:53:56 GMT\r\netag: \"22e9-63777baddd500-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D4CHYtgcaxiR0AJwd4V4XNaCyc8cGY0JViSxpq625gNmsXSjibSHYFUfL5Tgi6JecIbOPSMmpr5VEghWXs9GyP3nRdndpawm7e4Otbhk\"}]}\r\ncf-ray: 9a5db537afa80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8937,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"be5ffe5dcc2204b0de7154d859cd0349","sha1":"bfba1e2846755a90d2d313acbb7ea0d2d6c0738f","sha256":"648f3c45e59890c6a50825f8b4ea58e48abc5e7fa711850b1c9700545f69817a","sha512":"c65549f360307e5106e2c52df64ba674709fff6a11df9ffd1757b161eb9a23fe960abd4000854c241909de92c7d83d8e7dfb40ada5fb670a35ff5dcb0f775ce7","ssdeep":"192:Um1mWiWrzRXf64h4XPsWbPK49cFYhLoiWNWN5NPM9EQcbaa:Um1mNcz5f684UAPNaFYhUiaWN5NPMeQW","tlshash":"c0025542a7502189b11b81aabeee73f9363f40039f075dbb8a543678a74e39281751df","first_seen":"2025-06-23T14:43:08.389299Z","last_seen":"2026-05-13T07:52:24.887501Z","times_seen":21,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":104,"dns":46,"connect":6,"send":0,"wait":109,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/zax/jquery.min.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /zax/jquery.min.js HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24606\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Mon, 25 Apr 2016 17:14:40 GMT\r\netag: \"119ee-531524fd52000-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cpzPI91W3AA7cIa5%2FdcxFl%2FsB6AToFzhZ6oaReiMTDk2rNgELvdDolm8agBF9wHrzLKUNYeAgr%2BRy%2FAXACmQGhG00rjuTfJASlJ6TcMO\"}]}\r\ncf-ray: 9a5db537bfb90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72174,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (820)","md5":"10092eee563dec2dca82b77d2cf5a1ae","sha1":"65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b","sha256":"e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59","sha512":"cc92cf5a9b3a62a18af432fdffb81b76da84e2f43ce3c7800a919c10809118d0611e29a47f103ff3df18a54d5331bc5f06ef4771dc406cc763b30ff2a66a3e81","ssdeep":"1536:Du98G2ltZMNWnDr7doqPp07HVDTLGbY9TGA7zEcbnkb17jQq3nPRefqvpsz:DuJItn6qepq15nUfqvpsz","tlshash":"5063e9c9b2c67273c3e730b824af510af136a8aaa44c4854f06ce8e5bd74a55447bf7d","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-05-23T17:33:30.986286Z","times_seen":8829,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":103,"dns":43,"connect":6,"send":0,"wait":113,"receive":40,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/functions.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/functions.js HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1327\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"d40-4f8f8b3aed540-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyRe9nDckPMr53hgdK8%2FhPV9N4e68Aw7CQdFtzDd3qGLJt9fXoRGRLT%2BWpto4cRsC4OH7eDldJn%2B0H8ycHRyV2HvBUrY7n%2F46duY8L8x\"}]}\r\ncf-ray: 9a5db5379f780731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3392,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"e1807e6a8009ef9a06b54a0586ee8884","sha1":"2691a68a2209485cbe526d8914c54113daf773df","sha256":"d47ad6a2c2fa3bbd326ea77e4a328ea45e13f67593684237859ef21ed594222d","sha512":"99bde3ae5264e92d6288bf01bda8cf48eac02d7e2c9d51ddaeceaeaaec439f61bec916355253a29eb18c614bfc66080dae36f19910cca9027825600c4e87280b","ssdeep":"","tlshash":"82613219b9c1502a872710353def364a34b90573d085da62b86cb9606f64e34577eef8","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.895574Z","times_seen":75,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":84,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/jquery.cookie-min.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/jquery.cookie-min.js HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 421\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"2dc-4f8f8b3aed540-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zzWmZyN1f%2B%2BSpc%2BQ0Asihj2yUTrzpM6lSN8aTEcb4yr0qdhg%2FS1HQnKR8IgJHOKosnFaVZ6IBZWTkneRVEWUS2IZR%2B8ALpphJLezo%2FCK\"}]}\r\ncf-ray: 9a5db5379f750731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (732), with no line terminators","md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-05-20T19:53:54.618075Z","times_seen":1838,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":85,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/d.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.502Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/d.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: image/gif\r\ncontent-length: 359\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"167-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jIE708onOvT2eY%2BztLJlIxvYB2uV3W3z32KXFUyxT0iwH0tqnApz742qVVLToDDPZgizb2y8B5moqTGOhDtguFzwyKqrc%2BofuIX31Ca2\"}]}\r\ncf-ray: 9a5db5379f840731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 13 x 13","md5":"3def66024a583b6ca763e249acb3c426","sha1":"82f2f897d3e2746181b889811ac675565dcaf0fa","sha256":"7d4fb7d5a9e681b2313ca88338e3255364aa452f243d6397aa905783e98bfca0","sha512":"ced956d62e7e8e57633cafed83041bca728181a026178bea0277e5b92ebdf5fcb17211709486c5e4be7c7ace81488fa02bd0cd1bfad64cedb6e0e1a824f525c7","ssdeep":"","tlshash":"7be07d55326aa9d1cd01d1f008a1a0a10055b9a4b85a025f3c34112d5e6846f4c80c1e","first_seen":"2023-04-27T14:24:27Z","last_seen":"2026-05-17T13:36:43.234749Z","times_seen":396,"resource_available":false,"data":null}},"time_used":188,"timings":{"blocked":74,"dns":0,"connect":0,"send":0,"wait":114,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/agrrr/img/movies_btn.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /agrrr/img/movies_btn.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/css/css.css?27047\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3036\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Sun, 15 Mar 2015 23:32:06 GMT\r\netag: \"bdc-5115c243a0980\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TMSZFrN2wu5icsKNeZcWsgts2f9yIwabdndRYTaox%2B3vcknh%2Fy6IHO0unQ3DIOloEA4J3sSiVw4MPHsl4WS2NiqHt%2BMxf3ADlRBg6MSw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a5db53b5f4b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 170 x 34","md5":"986dea298e550985fea4a222d746a9f0","sha1":"eaaa5ecb37610c35ca8516f909158d39d5059524","sha256":"00568b506987f6412fbceb9b5880521a0212706d7e392eb48c315dabc7a900e5","sha512":"8ef07daa68374e9f6439346ed16db1c5c62e50176f160db59744365860748d3458b9200374dcf4c33905d3ca1330633c0fc5e0e564e81dc18009c27af345e0e1","ssdeep":"","tlshash":"9d514d0ab855cea03c7807b3c570bb4aef53cb0c8bc4151a024f56a8639963e4136e27","first_seen":"2023-05-21T11:00:05Z","last_seen":"2026-05-13T07:52:24.900763Z","times_seen":66,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/jquery.tablesorter.new-rutor.min.js?1","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/jquery.tablesorter.new-rutor.min.js?1 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5693\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Sat, 14 Jun 2014 10:27:07 GMT\r\netag: \"48bf-4fbc93c6394c0-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=11YO%2FjJIAbc2HqMv2jRi%2FExxtl4aoSW%2B9lrgQxtKGXJTx4laDedAdRdZXyrLmqnwnhTRN0AEz8uzQ4HPj%2Bc6EzXIibwFP126n59qBk9t\"}]}\r\ncf-ray: 9a5db5379f7c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18623,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11120)","md5":"6de84298187380f0dd15bfa17ace1a7d","sha1":"8dadf1532d9651d168bfbd73ff139e8494198e4e","sha256":"fb736e8586695a5db7c37884ebfd5860cb016a3a587b00b17fcc3053b5681048","sha512":"2e7edeeba1afebe8b9fe0703c59ff8f108d48ee9782a924a3c65bcf9c6f9a09371f0aecbe9333c880dc00ef7202a4bd0c0f21438a345ada598d672254ad9b5bc","ssdeep":"384:RGyqkRzzWBYEfmHtYyR0GPr4h6I/uaa6TYWAZVszlEAWhS5b:Rg+zWBVfmHtYt6+UuQh4","tlshash":"4282c69573ad346390dab4b0886e0859bd315fa39908c435ad35e4872df4e8cc6bbf78","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-05-13T07:52:24.911535Z","times_seen":76,"resource_available":true,"data":null}},"time_used":217,"timings":{"blocked":83,"dns":0,"connect":0,"send":0,"wait":131,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/pokemoky.js?48d","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:00.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /pokemoky.js?48d HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:00 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 16392\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vvTRIVFQqBCKmyM1QolLh0Kze3eXdQLqw7%2BGBkuUbVPgk3%2FwaQUxHAj%2FzGSKrQ%2BqUmHO295kVBB%2B1hdLk1LEr3uWWqS7XK71c6zx4eDK\"}]}\r\ncf-ray: 9a5db5379f7e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86848,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2045)","md5":"5eefc1f7d0796d34520a56f42baf2c1a","sha1":"10f69fb4a0e2f51a757c3e425777a2c75cd09cb9","sha256":"bcd273007ad9efb689cf0cd2beaf6b211569720a7971425f2db177506d87af14","sha512":"f82cd40427772f582366dd84d0a1579f1ecb8c4e828d2b9c60de05356e3baf0f9602176fa51ea9ccabe79bb667f304b6edc156f73a32ce7812ae945694ee9fa2","ssdeep":"768:N/EgW8iCORMC7g2ZIbCCLG/qPdVBMcv/k7N5R:hEg1CCLIpcv/k73R","tlshash":"9383c5a9dfad0259d1e3004baea15aca647d83777214dc12bc1c1a5873c1dde8b7a3bc","first_seen":"2025-07-18T09:21:09.181733Z","last_seen":"2026-05-02T08:30:51.216032Z","times_seen":14,"resource_available":true,"data":null}},"time_used":258,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":149,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"psyduck-beak.yotor.ru/inc/sisjoy/gen.php","fqdn":"psyduck-beak.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.324Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /inc/sisjoy/gen.php HTTP/1.1\r\nHost: psyduck-beak.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QVjr6Rh5%2B5AcvdZCCtPcVcnsscpopEAuxUZagbKcUZar2Y5%2B8NBwJa6dAq9HB8MGrhiPPabJ4ckpl4acbxaqvP71p5gr08dFzuKPv6DXkY6I%2FJp%2B2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9a5db53c69863181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"59c641133eb13cb58ded1d68288e4969","sha1":"7aad9843b100b476adc6fc18f18d0db3d6d7661e","sha256":"0fbec673c47024452ca5d35d4ead903961a4ad75aa69169b91eacc6ebc1cc8cd","sha512":"ef515127f23cd4fd08455671cb782b49f57e71286cbc9bc753332e993e340c4209857c42e64a918da0e4fb7a0be56ba304740c1762b708f9824cb4ccabcd4165","ssdeep":"","tlshash":"fa01ce7aaf559c5c8231e0b4e1b5a7cca1b201119b928533e5e828a7a8c06d18e239e8","first_seen":"2025-08-12T06:34:34.447573Z","last_seen":"2025-11-28T23:40:32.528502Z","times_seen":2,"resource_available":false,"data":null}},"time_used":161,"timings":{"blocked":21,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1303076/e625ebc1f79dd770b245.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-11-28T23:40:02.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 05 Nov 2025 12:46:11 GMT","end":"Tue, 05 May 2026 20:59:59 GMT"},"fingerprint":{"sha1":"BA:B8:C9:5D:AD:9E:A2:E4:3B:39:29:BA:EB:5B:C7:E5:05:B5:AF:82","sha256":"49:88:7B:7E:11:ED:24:22:87:2A:1A:23:E1:D6:37:AC:5C:14:DC:32:A8:13:3F:ED:35:6B:B8:E4:BB:8D:36:E4"}}},"request":{"raw":"GET /partner-code-bundles/1303076/e625ebc1f79dd770b245.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 134970\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=946708560\r\ncontent-encoding: br\r\nexpires: Mon, 29 Nov 2055 06:10:21 GMT\r\nlast-modified: Thu, 27 Nov 2025 18:37:49 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"92a2ddc9605e2bc06c8c5f815e0692a2\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\nvary: Accept-Encoding\r\nx-strm-log-split: 1\r\nx-request-id: c12d0f30fdeb2920\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":708953,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"5e76567e9240ef902cc8753745f62544","sha1":"4f45afca767db26cacee7ee2503da1cffc4bcd32","sha256":"b760d625d540b5eb4ed099b6d335c44bfd0c87460b127b3779013f9eabac2fbf","sha512":"6e0997b0455951f85079176452711fe3ace12f20323efa7093d53967499ee16652657616821f68fd551b19c66c616e6240d2c7960cae7db576a8190d4b7e6036","ssdeep":"12288:InzBNKPWd1EUHbjiIN0V2pTklRo8OOsuEnHbnhBrqZBP:fPe1EUHbjiIN0V2pco8OOsuEnHCZBP","tlshash":"8fe408d9fa5170b542e790e9c03f150ea23f751a700984e4b76aede16c38a8e6123f7d","first_seen":"2025-11-28T08:48:47.142433Z","last_seen":"2025-12-01T11:00:56.928128Z","times_seen":333,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":77,"dns":1,"connect":19,"send":0,"wait":31,"receive":17,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/menu_b1.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/menu_b1.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/parse/s.rutor.org/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2487\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"9b7-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pSGgwcHgNLoNjtEIzfJ9ShNqdNPMSXWDA8h6aGMpt9ShkXmI7ZYmuy2NkHez98q7dQe6MConorb0x5w%2FeuJ27vvf%2BNAAgJYqzSFxI8RF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9a5db53b5f4a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2487,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 81 x 30","md5":"e6e60f34a712eb50e8783b7d5798cd19","sha1":"edd102808f38d2c3e2d980bb903ee07f2d932150","sha256":"f04b184eb5417b9a81ab455fc07378efa326bbed2a5c74869b3d876b287307d8","sha512":"e6da396de37314a42dc4a9974998ec73059eace453e7414909083930279089ea67a57bc8cd7c3efe7bed73ee356b791fd7defd9834b64ebcf547ab3e03f869ae","ssdeep":"","tlshash":"3f512ba3bc1456e7f6571f38a561042c88d59f41af96e1b431402f24e0f221bbaaad55","first_seen":"2023-05-21T11:00:05Z","last_seen":"2026-05-13T07:52:24.90001Z","times_seen":60,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":5,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vak345.com/csn/202511290240.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336\u0026_t=1764373201346.346","fqdn":"vak345.com","domain":"vak345.com","tld":"com"},"ip":{"addr":"87.242.110.167","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://org.new-rutor.org/","date":"2025-11-28T23:40:01.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vak345.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:55:09 GMT","end":"Sun, 04 Jan 2026 14:55:08 GMT"},"fingerprint":{"sha1":"F5:80:DE:45:76:80:46:4F:70:74:3E:B2:48:0F:6A:C7:F4:9C:4B:87","sha256":"60:FA:92:1C:D5:7A:C8:5D:3E:35:6F:F0:3F:A1:D1:9B:0F:1A:25:26:4C:2D:94:26:0F:76:11:AF:30:A0:D9:11"}}},"request":{"raw":"GET /csn/202511290240.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336\u0026_t=1764373201346.346 HTTP/1.1\r\nHost: vak345.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://org.new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 28 Nov 2025 23:40:01 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\nx-build: c4417436\r\nx-host: nginx6\r\nset-cookie: sky_uuid=94ca3e9e-f24e-87c3-3127-127d58db9183; max-age=157680000; path=/; HttpOnly; secure; SameSite=None\r\nx-movieads-country: NO\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"10b7db767d4b5ccf7b673f0c1fcea8bf","sha1":"78db4b32f0129eb2859285fc0efaa8441b57e791","sha256":"34a6ad2a4b67d5910f3ca2c673e78fc1782e89b2dc8964fc2a84eec2be5e9b62","sha512":"ba1bb90def084bd7ad562c23c18b38857b653f3118845c5efce68c54ceeb629688bdcfb5b3cc9f2de2430de7be1e8279bff2411f7cc5df03feea7e1a0056632a","ssdeep":"","tlshash":"6480000a2cbc22ba22280c208e2020c3b2800c20c800a0ece020aa2c00afc0882a8c2a","first_seen":"2024-11-04T11:23:18.039022Z","last_seen":"2026-04-20T06:54:24.971279Z","times_seen":11,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}