{"report_id":"38cf3119-4557-4ef6-8948-2714b3fdeb45","version":6,"status":"done","tags":[],"date":"2025-10-31T12:25:54Z","url":{"schema":"http","addr":"new-rutor.org/torrent/532554","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":0,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"final":{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"title":"new-rutor.org :: City Car Driving (2016) PC | Лицензия","dom":{"size":1713,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"df580313535a2bd7a0e44f861a3d5255","sha1":"93ebfb03f11126890d3201011d36cc8dfbdda2e4","sha256":"37b84b492c1cf0b16fc8f1d92b1188e3eae62611def2fa4f143069dab31473ad","sha512":"da40334e4f7d4c9a331eaea020d8499996320dfe4563f30af582fda24f367903fcfa70a03839873d5fa7f45115cba6fad67fe9145d81d0d86366ab53e56709d1","ssdeep":"","tlshash":"a83196377f15f04496269ce5c1e5369ce957000fd6a0c932e6fe8aa5dfd03d08d11a5d","dom_hash":"domhasheb791831ee5e6c2d3bce10e39cb46e3e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":"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"}},"submit":{"url":{"schema":"http","addr":"new-rutor.org/torrent/532554","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":0,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-05T12:25:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"myroledance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"data.24smi.net","ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2011-12-12","domain_rank":384276,"first_seen":"2017-01-29T20:20:42Z","last_seen":"2025-10-23T02:00:29.282973Z","alert_count":0,"request_count":2,"received_data":1935,"sent_data":1239,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"psyduck-beak.yotor.ru","ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-28","domain_rank":0,"first_seen":"2025-07-07T22:56:18.281573Z","last_seen":"2025-10-29T19:24:57.81651Z","alert_count":0,"request_count":2,"received_data":114702,"sent_data":1015,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ads.digitalcaramel.com","ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2017-09-17","domain_rank":589179,"first_seen":"2019-02-17T17:30:06Z","last_seen":"2025-10-29T13:27:41.549552Z","alert_count":0,"request_count":1,"received_data":503,"sent_data":465,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yandex.ru","ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2025-10-27T06:11:13.329691Z","alert_count":0,"request_count":2,"received_data":586326,"sent_data":971,"comment":"","tags":null,"fingerprints":null},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2025-10-27T03:48:28.265126Z","alert_count":0,"request_count":7,"received_data":1003951,"sent_data":3495,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-26T22:12:37.824968Z","alert_count":0,"request_count":5,"received_data":44015,"sent_data":2340,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"libbb.yotor.ru","ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-10-28","domain_rank":0,"first_seen":"2024-12-02T23:31:00.787899Z","last_seen":"2025-09-26T16:36:06.627125Z","alert_count":0,"request_count":31,"received_data":645224,"sent_data":13952,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"all-poster.ru","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2020-11-19","domain_rank":0,"first_seen":"2012-11-13T19:53:54Z","last_seen":"2025-07-17T20:36:28.064194Z","alert_count":0,"request_count":5,"received_data":0,"sent_data":2035,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vak345.com","ip":{"addr":"87.242.110.165","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2019-07-11","domain_rank":49508,"first_seen":"2019-07-12T05:59:47Z","last_seen":"2025-10-23T17:29:00.557634Z","alert_count":0,"request_count":2,"received_data":25517,"sent_data":908,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"jsn.24smi.net","ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"domain_registered":"2011-12-12","domain_rank":453069,"first_seen":"2017-01-29T15:57:51Z","last_seen":"2025-10-25T22:21:16.601709Z","alert_count":0,"request_count":2,"received_data":180124,"sent_data":864,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"i2.imageban.ru","ip":{"addr":"62.109.31.142","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2009-03-11","domain_rank":1655827,"first_seen":"2012-07-22T11:31:02Z","last_seen":"2025-10-30T00:01:04.57977Z","alert_count":0,"request_count":1,"received_data":55171,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"matchid.adfox.yandex.ru","ip":{"addr":"93.158.134.118","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":151817,"first_seen":"2015-02-24T08:38:47Z","last_seen":"2025-10-31T02:30:33.856344Z","alert_count":0,"request_count":1,"received_data":370,"sent_data":722,"comment":"","tags":null,"fingerprints":null},{"fqdn":"myroledance.com","ip":{"addr":"193.200.64.24","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-03","domain_rank":109832,"first_seen":"2024-10-07T17:52:04Z","last_seen":"2025-10-29T04:15:57.701084Z","alert_count":1,"request_count":1,"received_data":1726,"sent_data":421,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"i5.imageban.ru","ip":{"addr":"62.109.5.15","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2009-03-11","domain_rank":1714491,"first_seen":"2012-10-24T00:28:16Z","last_seen":"2025-10-22T18:41:45.833327Z","alert_count":0,"request_count":1,"received_data":116250,"sent_data":440,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"counter.yadro.ru","ip":{"addr":"88.212.202.52","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"domain_registered":"2000-12-19","domain_rank":65087,"first_seen":"2014-09-09T18:41:17Z","last_seen":"2025-10-24T20:49:44.608253Z","alert_count":0,"request_count":1,"received_data":347,"sent_data":625,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.17.9","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"mc.yandex.com","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1998-09-24","domain_rank":45494,"first_seen":"2014-03-01T13:57:52Z","last_seen":"2025-10-27T15:19:38.682273Z","alert_count":0,"request_count":6,"received_data":7676,"sent_data":7597,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"kllastroad.com","ip":{"addr":"193.200.65.68","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-10-03","domain_rank":221362,"first_seen":"2024-10-08T03:17:02Z","last_seen":"2025-10-30T12:56:47.859723Z","alert_count":2,"request_count":1,"received_data":36452,"sent_data":456,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"new-rutor.org","ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"domain_registered":"2013-09-04","domain_rank":172754,"first_seen":"2013-09-07T07:12:28Z","last_seen":"2025-10-12T10:38:20.760194Z","alert_count":14,"request_count":7,"received_data":139054,"sent_data":4483,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"mc.yandex.ru","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":16498,"first_seen":"2012-05-21T09:38:30Z","last_seen":"2025-10-29T15:43:58.850881Z","alert_count":0,"request_count":1,"received_data":243087,"sent_data":413,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"188260b891da4613c0830ad1dee57af1","sha1":"1c8cc42a4792f0682525d0d5881a6636eb29f0a3","sha256":"dfcff3ab0d78d96adec87ce4aa5d5fec2c2bec90cfcb7c5fb3a4ea8ad1f62088","sha512":"554edb324667f366af29724b83a9b870a2442c27c54093e43f36449eaba12cdb862a40c765e723f98b11c4d81fc067916f326d7f9e258f072ac54df89219a016","ssdeep":"","tlshash":"348000223c02c80e003aab32222ba20e2320b80b3080b0c028a2a00020a038b3c000a0","size":29,"data":"","first_seen":"2025-10-31T12:26:07.005224Z","last_seen":"2025-10-31T12:26:07.005224Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myroledance.com/services/?id=146839","fqdn":"myroledance.com","domain":"myroledance.com","tld":"com"},"ip":{"addr":"193.200.64.24","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"591a30b4d219b41912bb41aea3ed9e2a","sha1":"6248deb0210f857281f20ccdba41616a01eea78c","sha256":"7e43b716431e13c6bc178246881278240c1e1041f9800f52b509f7fe04cf751d","sha512":"dd2e8503442c985f1c091e6785689bb2dfa32d05942f2f856ec9cd082eeed912f3e1dc09fdcd886c5a063d3d9503cdec842a3e4bc94f709eb0911e0bc5e98bd1","ssdeep":"","tlshash":"313135ec789e95e896d02697b800f688ff1f98eace1249b14400956673b0d2d8e7fc30","size":1563,"data":"","first_seen":"2025-10-31T12:26:06.96526Z","last_seen":"2025-10-31T12:26:06.96526Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"eval","is_inline":false,"md5":"11c98fdff049772472661b8d8c1ab989","sha1":"72f82b83e75e4c40e450c593c7c3b452a48aa534","sha256":"7338b521b323a138b6d5b779e683821700ce93ba3b7371a1e04eb8ef853ab78c","sha512":"3d2a58c64940c2ef7e4d80d733cae186d3c429b8c019d6932dde42b3448c7d502e429e2f078c9d861f8f3dc2ffc4887040bba40b6428d503b92eebcf3aaf5ea4","ssdeep":"","tlshash":"edd0c9e111a83893cefb8aa4c706a70778824437394530161941d32022fd78384a1cb8","size":205,"data":"","first_seen":"2025-10-31T12:26:07.007407Z","last_seen":"2025-10-31T12:26:07.007407Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/header-bidding.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"522ef152c43578040c6b919142439b6d","sha1":"ff79f5c38da4342a2d6a2cb5ca76894062947d72","sha256":"a8e1687fda67a057fa7958f26aceca9731e55935c725a0f648b640d3d89e5f27","sha512":"ea1e2cd12effbf5133e3fd49731b80fc917b304a8194889a35a30faf05243594ad9f5eadbdcb57462ea3bb8867793b399d19284162ce1f0ac3edea68665ca5ed","ssdeep":"3072:77aHFrFb5RjwziPWnd24LSGTjc2jRGKQUFB5mTUn+OAU6GP7nUBb5asbCGafS5h:77gSPdldi5aY5h","tlshash":"76e3199d7aa1f4b6439360e4843f260ef23f5929a41d44a0fa27d4e66c35d5e8223f3d","size":145052,"data":"","first_seen":"2025-10-31T12:26:06.9157Z","last_seen":"2025-10-31T12:26:06.9157Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/jquery.cookie-min.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","size":732,"data":"","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-04-04T14:40:59.388024Z","times_seen":1755,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vak345.com/csn/202510311525.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336\u0026_t=1761913532213.213","fqdn":"vak345.com","domain":"vak345.com","tld":"com"},"ip":{"addr":"87.242.110.165","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"10b7db767d4b5ccf7b673f0c1fcea8bf","sha1":"78db4b32f0129eb2859285fc0efaa8441b57e791","sha256":"34a6ad2a4b67d5910f3ca2c673e78fc1782e89b2dc8964fc2a84eec2be5e9b62","sha512":"ba1bb90def084bd7ad562c23c18b38857b653f3118845c5efce68c54ceeb629688bdcfb5b3cc9f2de2430de7be1e8279bff2411f7cc5df03feea7e1a0056632a","ssdeep":"","tlshash":"6480000a2cbc22ba22280c208e2020c3b2800c20c800a0ece020aa2c00afc0882a8c2a","size":31,"data":"","first_seen":"2024-11-04T11:23:18.039022Z","last_seen":"2025-11-28T23:40:32.531113Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kllastroad.com/science/laugh.js?24469\u0026v=3\u0026u=null\u0026a=0.23885617357280697","fqdn":"kllastroad.com","domain":"kllastroad.com","tld":"com"},"ip":{"addr":"193.200.65.68","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"a6883a004873995617ce2a19aa2dfcbd","sha1":"1dc10458da1f9a704d9915c29eeb624f2aa824e1","sha256":"6b01a2e5be7465777b23665de8ee5338dfe17d55e7f14542692585f0f7d3d589","sha512":"22a98a336f99a440372f566a77f0e9f78de9e696fdb2fa1bf04a1fd03e9d72bc114caa91023c2af2c3817ba935bdbc49cccde057c24e7b1b28fa26c7fd9c3bfe","ssdeep":"768:xwT/7d3VZb+mtjfptkwIL9HBlyQQwMs3NEaWlcb3Y:xwT/7d3VZb+mtjxtkww9HBlyQQwMCNET","tlshash":"58f2944e66e710320197643f6fdf81487670c1973148e91cbd9c46486f98e29cafabde","size":36100,"data":"","first_seen":"2025-10-31T12:26:06.909512Z","last_seen":"2025-10-31T12:26:06.909512Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.24smi.net/informer?psw=1280\u0026psh=1024\u0026pow=1280\u0026poh=1024\u0026pdpr=1\u0026pdt=1761913532\u0026ptz=0\u0026pl=en-US\u0026object=24832\u0026template_id=15500\u0026num=4\u0026ref=https%3A%2F%2Fnew-rutor.org\u0026output=json\u0026chash=pQcSTyjeyy\u0026extids=\u0026page=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026yhb_price=0\u0026formats=1\u0026show_id=6f716258-7c9f-4775-8432-c79af22d467c\u0026callback=__smiCb1761913532546","fqdn":"data.24smi.net","domain":"24smi.net","tld":"net"},"ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"c670d49ce95cf65327b9f5749343c780","sha1":"6ee576aedc4960ad54f4374079487e73da0e9169","sha256":"ea5f182141e68547a6df769eacef30aa8aba11c8d64d5186a8553ca39e4bed76","sha512":"93d60bbf778329b323e28b35480a1d1b69a2889b14d7f42788554f50770c2cfc806daa6472eb25db972114071ee394957c6b565f6a62b5eeea071f32c41becb5","ssdeep":"","tlshash":"9cb01240142158b810a9c03182066b0a4ac0a52b2110a40865b08198437700319a244f","size":87,"data":"","first_seen":"2025-10-31T12:26:06.924737Z","last_seen":"2025-10-31T12:26:06.924737Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"62acac9003f2c8ab0671b176683b08b3","sha1":"c8161ab8de23e9cc80ff68bd2757ad46a739a09e","sha256":"6f51278f17f155207462de4b440ccbf858d93df4df8bc08882a88fb6e1f40814","sha512":"cf63bcef9a7cbfde94df702e14439a5c52d7f921f5972c2a346ccd8bb5bbb2d8eadd8bac248eca66ac77e7e20ce96a43b448b4724bc2d95ea89cbd27ef1f05d2","ssdeep":"6144:JCn7o4ML3R4SGq8MU9jFl4PYfmzwj0T1mxO:JCn7olLYMUXl4PYfamg","tlshash":"3194f7e975a1b4f203e391e5843f160fe33b5a29741d91a1b722d8d1ac29d4f5223f3a","size":438215,"data":"","first_seen":"2025-10-31T12:26:06.90753Z","last_seen":"2025-10-31T12:26:06.90753Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"01aeda25cc612ac6fd77f18bba5041e0","sha1":"27eaf3c12999caa5c29a7591377756d6d7d35459","sha256":"8f6e59b4280f7b6855ac1a246568b4f412db956026ccf366ad7f4c698d9b8f6b","sha512":"a4335cefb02c3bdc8f6ec07084b23f0b61f502005365b2b522a6c100fbc768e9db4e6f40841ab5d7a92a8692ec8a35c05e8b4104bdc71646292f9a182cd54f15","ssdeep":"","tlshash":"f1e026b01c4348ac98430c73b9a085a529f4a5713b217322208e323928d0f70366aa74","size":305,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.411925Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"2744a37ceaa29e760f738c3a74a83a7d","sha1":"06f0589bb234822a0471beefce05c5dbf58b6966","sha256":"d94db2a1c37a7ee75c603192f99b27222bc0f84dd082197fc5e634fdf3545286","sha512":"eaf4daf3482621744942cb0fbd68cef2a711399a9f2c49e43a94ac21dae08d58fcb730cfdf03c82fe8a368cf3f6f4cff02be47ea7d5489e1f6503c93428c0eda","ssdeep":"","tlshash":"67f0dcaa3cc88139433612227233f29872693a28284dac24c55d88a228a6cec087f50c","size":468,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.418388Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"ace9db13a7dd020090d7137c2003ea20","sha1":"4eb635fc5ec72ed6ab636fe35265f195b80bf281","sha256":"c3f7251bae9ebb1a7cfdc617b3f683e59ae1c3db71651e3aa0cbeca72c24e13b","sha512":"1368d72925705d8d71b89c855a51924e5f4f2bccef41aff76ec2ccdc35c691483877b101af03ea2ee471db5a8eea175bc8ef328081f8498509587e62811383a2","ssdeep":"","tlshash":"d39002576259954827d4e64168811d23a4f48a64500e5206d154185405520066f148ab","size":54,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.419486Z","times_seen":49,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vak345.com/s.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336","fqdn":"vak345.com","domain":"vak345.com","tld":"com"},"ip":{"addr":"87.242.110.165","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2582ad7f7ce4591fc776721875ae0f08","sha1":"69c32c7a0245b6c1b3ef09374996e9fa90b05f95","sha256":"37c40ef9fb7a93d57dd8cc6c93ad4dde23367b0e00a909534ea0c0fb9f6cd057","sha512":"cbd4c1d1d181861609d0e45ce10c59aee286c52f98b55528a8cfb379c1007656ad6d24736b297db36f0158fc751d636c3d17ffea002c9e7dc8d5eaffbc26d018","ssdeep":"768:E4gj8m4M2LpG+9BTl1OvaF/0a+EbFKm7awn8uPmcbeS05FI8x2WM4dPxUofG5wiH:NFEDdFIeDZFiHjKxo","tlshash":"86b2509225d4b4a947b317b7220ef2c6e02a5cede4440edeb30cf9a4f198503fba9571","size":24878,"data":"","first_seen":"2025-10-31T12:26:06.941705Z","last_seen":"2025-10-31T12:26:06.941705Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/d1d55580c621b9f51ffc.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c5c2dbb18e0e26e206e12580116637c","sha1":"97355918140bf678a83b3fc1ba5855879f143854","sha256":"3a1a57f193549dbc82d144aec0be1580f175b312d1c185d264cf5242ef875d4a","sha512":"2c6148fdda0aae770f749b56bc3d4c6423f002ab49472db59abe5bbc13f968b861faa46a817496d459688b8e7fce8010a7a66ffa7f92846ded83648ad1a8129d","ssdeep":"192:kw+9u4FdHN3vgfye/K1T3m7Ip4k2spjlpQ7YX0lQsm+24Q2BTXV3UGmcLe7tr2vV:kw+9P6fyHKsR2+lpQMXZ+2b2BTqcQNI","tlshash":"ea62f7a97495b4a513db20bb413f150ff3b9a879684d80a0f212d8e97efc85c8167f6c","size":14937,"data":"","first_seen":"2025-10-30T07:36:50.741847Z","last_seen":"2025-11-01T07:44:05.890034Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","size":33703,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-04T17:41:08.898849Z","times_seen":22883,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/js/video.js?6844","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"916ef7055f72f61805607b111f9934fa","sha1":"dd63cbeb56eed300c7c6ae22882103b4792a203a","sha256":"9fa670d9f104549e3dcbd53c3cb451eb253cb1354b94af96143a14d6f76b6abc","sha512":"592fa5c5932321b055e480ad94429656fc324aee2ed3c5c36bce0ce556ae6d1cae7736fc8024b9dec7ffd0b52d6f3f7aa4c1d5b0816bca3c490018825a7519a3","ssdeep":"384:51nftCfu/K0YhE+yuMg+Bue9oGiqV+AY6IOsYrnVhb14p7f:5VfgfuocPPBueJrGUVhb1Gf","tlshash":"bab2b6b893118cb9ec17b2fbc915b396607b8f87b9a502d0799972400bbd0fcd05d68e","size":25603,"data":"","first_seen":"2025-10-31T12:26:06.927925Z","last_seen":"2026-01-06T22:11:58.274294Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/jquery.tablesorter.new-rutor.min.js?1","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6de84298187380f0dd15bfa17ace1a7d","sha1":"8dadf1532d9651d168bfbd73ff139e8494198e4e","sha256":"fb736e8586695a5db7c37884ebfd5860cb016a3a587b00b17fcc3053b5681048","sha512":"2e7edeeba1afebe8b9fe0703c59ff8f108d48ee9782a924a3c65bcf9c6f9a09371f0aecbe9333c880dc00ef7202a4bd0c0f21438a345ada598d672254ad9b5bc","ssdeep":"384:RGyqkRzzWBYEfmHtYyR0GPr4h6I/uaa6TYWAZVszlEAWhS5b:Rg+zWBVfmHtYt6+UuQh4","tlshash":"4282c69573ad346390dab4b0886e0859bd315fa39908c435ad35e4872df4e8cc6bbf78","size":18623,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.374043Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"348cec49376fb3c15569c9d6df404eaf","sha1":"97d9ebac60a6a5140647c81db6f2f1e7bce94ff5","sha256":"15bc72c526f5d3d5d1fbdbfd0218a135070925b7b414eae39ca38a8e5cd3165f","sha512":"f09ef08e0d607a59c3f06f286d5d857ca7b705b923ac84767a3692592ed634e7232915e30816a4b1328595b2dec4fc47e8cfe397a1394d2de3ed3858b937fdaf","ssdeep":"","tlshash":"7b019e26d1ecc62723d6aaa1f94b3d5cd8873216d15a4a01f0fa22d8f007f8c8ac3810","size":683,"data":"","first_seen":"2024-12-11T10:01:53.153509Z","last_seen":"2026-03-29T07:13:34.421442Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/kimjongun/under_desc/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"c46293aa285ba7aa107978a1d1819a9a","sha1":"4fa0b1817ba39ca83e458b9781e011132977ae94","sha256":"868306ed744f3c485e29048571a5bdeb209404643df14f02797004c990dc567e","sha512":"0bf342f2a84f3639e6d54a5b6b366079a08fe34415e5ddbbabf69108f309e727f5e20ca0347c6a7dd968e57c3bf1d0690fb164e92a343e38ca10b392d9f65cbd","ssdeep":"","tlshash":"a69002116025001a803050441326320a79430a1600d2341006450420703104b9a9a084","size":43,"data":"","first_seen":"2023-03-07T01:39:52Z","last_seen":"2026-04-04T17:41:09.018191Z","times_seen":591,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"6ed5f24030527b233bfe4972d891c85a","sha1":"6463b94ece30792f6fbefead1a85ab64eaafff2f","sha256":"bbe07d3d476e13f3a3208edf38fab3d0fb0a80a98e2f4b6eee6e77e5e15912ee","sha512":"0f11e45baa8401b0e0f444c54e7653386e8ce08ce9ae902d3aa4b679b044d4944c8f12b94ba526f7210d7681d26520216766415c35a226446bd317fdbc79799f","ssdeep":"","tlshash":"5cd097287b5ce38d0421300028fac8ea301699b24f1687402b4cb022f84032b7d4cebd","size":247,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.425064Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"038b07bc5bf7a09e3785702b4dba46b4","sha1":"dba46d242a5c86e92f7d4bb50df67dfdd07c2304","sha256":"ba24a03d5a21d556fb00101f33c7652e83bb7b85fe5070ad18bf74af199d57a0","sha512":"5d502b52e6a40be14d7a1b9be4b984d4ff0ab9069056aa546994928212f5a22c0bfe71d7b06ef5c5976d4972524d4c8bf1352c9902d81088dac7a0185bb3ce74","ssdeep":"","tlshash":"81b012c75002616a1a630019059b32503bfb89ab00085004c54450903269f4fd217d8c","size":93,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-04-01T09:23:20.283723Z","times_seen":253,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/kimjongun/under_desc/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"4e24d409c999f0223dcd6203452fedb1","sha1":"d70fc4f6de4ebf16782bd9add3f59345ecc6e08a","sha256":"92560cf9d262c2cba4a5f61e4147d760abaf7640d5b1b3f8f0dd3e67014f7323","sha512":"986906e59ab5d56a69ae0bf2c0842feb10d89dbcaa1d43780b20e5f504ace22b9e95e692159a57c5794bca464a4d846808b9c544982b2fbdbe5cedadb4175e4e","ssdeep":"","tlshash":"1a31e4af20a2183949ef667f657d538d3937401bbb8364023c7c1b698f54d51887aa50","size":1829,"data":"","first_seen":"2025-03-09T19:46:16.108142Z","last_seen":"2026-03-29T07:13:34.443136Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"9746fee96e71372dfcf2469706766e64","sha1":"3d343f2bec9a87bb7e06ff4602403ed7d8159745","sha256":"96a5061bcb6b961514705a44d52a6c60334de407eea279a2c237441d501c813f","sha512":"cf54d5bde6bd157d9a5f939aa64e328e347e76bcf5949151992eff388aa2275beea0d5f556bfeee93e07293f6f45668557185bc52ead6d124222e10ee66772e0","ssdeep":"","tlshash":"3ff0274290048d0272fe7aacd5966b0460f611ab2633804429064cb82b66bfdcbadea4","size":444,"data":"","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-03-29T07:13:34.429346Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"f8c722c29c106deffac333373bee3f1a","sha1":"3b22e04a56c59a1944aa4eefad04c21dffc7cf54","sha256":"eda58a9eed09189c9201bf769b9611f226c20ee9035f92944cc1b8a063bc18dc","sha512":"00e27cb36c92c04cd7674b2d0f1b29ac726a7daad89d831021deee82ff070c83517b33f8d8bc9b1c3170ff553d3f8ff2b53d19210fb0ea0173a3d217de3961fa","ssdeep":"","tlshash":"bc8000a080beb008880200a22000a2b0e00a20cae08200000200083b88002f0b0882cc","size":26,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.438096Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/chimichanga/galets.js","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"37607a50e5c3055c37745b8a8523f5fe","sha1":"b65d14449e609c6ecffbc73e17aa2f05b0acf210","sha256":"7462330295488346f30edebf0a6d2e847eb2cc135e7d735310504e128217db6a","sha512":"0a652beb49d0e1bf408a0f7428ecc0bc793ed261a18acc641b7deda39226133cb67fa2978b9fc5329d5bd2f8f85a9eb07c66608a1e1e639c170c2ea04a0ae0f8","ssdeep":"","tlshash":"31318e98359e701d918423467a7510deac3ce7b102db91bce5deb472609081b8e3d9f6","size":1537,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.367557Z","times_seen":59,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9feab8347346cd568a157489324aeb1","sha1":"45c07e53bdc1a5c961480251438ff9106ee5063b","sha256":"b6bf34b0c0063143cfdc7977334b53e6aaad68a29aa25162defa0be10afc3cce","sha512":"3f94f77ccb583d2a4691c96723e4977822bc1964de8fa45bf7c59c6ea0fa1fb1d5bcab63e47a9077b94dd7322baf75e945634c7b28c1da71812de3ba2429e0b4","ssdeep":"","tlshash":"01b02238f828a88882bb00a3202b8b000c0ab203a082e008038828a0cab80280c00f2e","size":121,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-04-01T09:23:20.274924Z","times_seen":254,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"c202292fe573271b1244fafad2e73dbf","sha1":"1eff5d3199f6058d1b9afbd5020e3ba13c97e1fa","sha256":"309e3fb5a0c57cd08034721a10db4c3a41ee43661b7e459275a446975df8eedf","sha512":"97088564ff6c8dea897ac0ec54f133b7444ef8e07f89a3b313697014ff669a65c86a6fbf2d297066fad51a63decd8266ff185745c387abff05117d6b6e3aefdb","ssdeep":"","tlshash":"53800082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":35,"data":"","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-03-29T07:13:34.448263Z","times_seen":61,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.24smi.net/cfg?object=24832\u0026ver=84\u0026pio=true\u0026pps=true\u0026callback=__smiCb1761913532545","fqdn":"data.24smi.net","domain":"24smi.net","tld":"net"},"ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"63f38ab2771febf46c0a183412913624","sha1":"42af44ccc7df5ffef5de0129e494a13e24a1d5c5","sha256":"82b8d550ad33da76dcb7cb09e000dfe64df9822edd0ca01814e4410c8151a9e2","sha512":"705359dec91419d40b8ece3b87b6b03b16fc254d20319837c02fbecb816d28007dfe76bc0cf9c28874d24e8cf15e375b435d0c1e731e2d28fa92616410072c3c","ssdeep":"","tlshash":"a221c37e6701f8fcd107af4bd05376694c6df529470aa544a3cc660cf87955d393680a","size":1120,"data":"","first_seen":"2025-10-31T12:26:06.939748Z","last_seen":"2025-10-31T12:26:06.939748Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsn.24smi.net/6/5/24832/15500.js?t=1701324258","fqdn":"jsn.24smi.net","domain":"24smi.net","tld":"net"},"ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b333fb37ab7853633b4d49ae200f0ddc","sha1":"b5685803ebd54bf43b9f87a8863324e0590e5afe","sha256":"bd4343661544c27548817e0450edce453088c5dfec9f5f5b2d3d590a5ca387ae","sha512":"9e1bbdb625a30a072b668f90ba4bc1e4d5d8497557fc362e001d14deb748390fa47bd47f7bc09750be98052f9e43cf2156c417ba59856ecf50c5bd3feb30791b","ssdeep":"1536:o2ixk34H8puTMUsvErZQtMUsvErZQLUsvErZQW:o2ixkoH8uMU2yKtMU2yKLU2yKW","tlshash":"3063b5334a5e71b72a38783782d9bc4ca10de3824dd29755e6ab5cd4c41b2672a073fe","size":69758,"data":"","first_seen":"2023-12-04T19:34:56Z","last_seen":"2026-01-10T20:38:16.578672Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/functions.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1807e6a8009ef9a06b54a0586ee8884","sha1":"2691a68a2209485cbe526d8914c54113daf773df","sha256":"d47ad6a2c2fa3bbd326ea77e4a328ea45e13f67593684237859ef21ed594222d","sha512":"99bde3ae5264e92d6288bf01bda8cf48eac02d7e2c9d51ddaeceaeaaec439f61bec916355253a29eb18c614bfc66080dae36f19910cca9027825600c4e87280b","ssdeep":"","tlshash":"82613219b9c1502a872710353def364a34b90573d085da62b86cb9606f64e34577eef8","size":3392,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.406875Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/pluso-like-small.js?10","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dae4b00893641d10303a88837aa5c45f","sha1":"a7514fb190fa8ba489b2dde5dbee92dd0fe7ecb7","sha256":"e786f1e87ef6054b4aab3d26780d3525a14975b8d4de5bae54f095fa07ed5b08","sha512":"f42bd1cf7edca40d2d1bcdbd35c6f36bee9c62172dea1afcc9b0db07139a94cb9d4ead6f3401f7d0ba34d66ab08a5a2be88786def635d2809ef1110d646669f3","ssdeep":"","tlshash":"67411d78bf29722e4172106ff50f744ac0b4842ac4596c8f5f75a1be2da1b6b736c638","size":2266,"data":"","first_seen":"2023-07-07T18:06:31Z","last_seen":"2026-03-29T07:13:34.407757Z","times_seen":73,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"75d02574b4d2b91d421c6202503d703f","sha1":"047f71a00802fd9ed91878bbaeebda68521e77fc","sha256":"840ad758733c0966b5e57b85fa86884e75ed85947b265648edec34b2a75236e1","sha512":"da644d793c77dec134483bb8f9abf181b79d0e7aeb77bf4bf77c8fe2496aba03c5379a330150ac6f5e7205fe09c73b5f0ca43b0ef8b4b26c4c46ee2c1a5e53c1","ssdeep":"","tlshash":"1fa0013a8423193c09800ac9212ef2c2be37f06138aaa6029108021811d9a9e8842c08","size":75,"data":"","first_seen":"2024-01-30T23:48:35Z","last_seen":"2026-03-29T07:13:34.444125Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"f13f5dc047435a2ea7bde51fd8352b66","sha1":"5d99e88f7367c4224db4560c8a406e729ed1b0ad","sha256":"0f037315de45ddc3ac1055d5fc35f60ca7bdd357c91bc777c795444936cba1d0","sha512":"9f2ae5bb8be4ca4471a863107abc55c45c0fbfe7659965fb4708fce7e01749636645eae51837614ba6656000cea88ba9e9ea9bb30c008b8a489b84630338811b","ssdeep":"","tlshash":"ddb012c464ed417063cf1c536c0e934a10301fb3d3d0d1ad79276d30888591acc144fc","size":112,"data":"","first_seen":"2023-06-17T11:09:51Z","last_seen":"2026-03-29T07:13:34.445017Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d44f52402d880e3d56f05cd8bb00dcff","sha1":"6ce388903e0c4a14fbae450f2ca048d53e6c9b50","sha256":"e9b37bb86b7c81bd87d41b9d3ae945478eef870dc36bf7d900495f8fe98b779b","sha512":"59b95fe874231f5552cccc0a023a004f63b308b4fefdc555a9c35953eebf0246db61c6df7868dadbde7a6b5802a906b9509156104a211b72b66a89598ebf2f79","ssdeep":"3072:Cj2VixUuw6+4ONcXW8usOPD6maLpYobA7T8OfsgWq6ZAP3eqBbTCXJl:O2VixtANc3usW+maLyn8Ou/ZAPnTcl","tlshash":"0b34e8d976827472537334b4a03f004bb2be7896f14c8964f186e9d57e789a89237f2c","size":242247,"data":"","first_seen":"2025-10-27T16:57:08.555205Z","last_seen":"2025-11-05T14:32:31.007163Z","times_seen":623,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/e076e7bad9a3caacf010.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e3d5914c614b770fe2825f1a732e0fe","sha1":"2af9003be6f70a1ad72cb3a8609f652c3442c2b2","sha256":"5cce9e7a7852d3a57ad1a4d2aafa58bc12d7fc12d215fab524518d2129bf45cb","sha512":"b27ab1782e2b1bfc9f38c326607b6547001cdabcfe981a7faf1eeb156566dc2ce032852f2d8d5d4bca14eae7d6ae3161cb07304c776c004ea42100dbc8050b41","ssdeep":"192:LwEu3I4CJlLrSO2dyacdFxzyZnBzJVA0ANkUmiMHkNVXNVVpobQn2FASueJlbhpq:LwPpCJp+OkyQZvVwkisbyeQ","tlshash":"fc7209fd3520b0205bdf7076627f191ff378292e644884a0670aedf629b491e9193fac","size":16339,"data":"","first_seen":"2025-10-30T07:36:50.818713Z","last_seen":"2025-11-01T07:44:05.881551Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"5682a628167ffabe0a947435b59b44c7","sha1":"66e2b79a0f57b43ad7621ea5128297262689c60a","sha256":"f237ac29c0e28d72f2df39e982cc8dd5bb2b6eed9501c2478876882a2277bc4e","sha512":"b43fa7e40d9ac3699556fdf6f03647cbbb4c712c0e2e12ad86c1f494dc1377cea09e4d7c756de5bf65d6da56a93449f27e2545333e2fba32ab7e3f51a21f7504","ssdeep":"","tlshash":"fcc092bc1f280c3d44d41c1d337fcbe03d27a182a0273c81916c7d4046b0a1909c4a00","size":133,"data":"","first_seen":"2023-06-17T11:09:51Z","last_seen":"2026-01-06T22:11:58.330683Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/js/check.js?100500","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d61a419574aecbe3b0ff9e130958ac8","sha1":"9217d73e87f12fc0c1de4d2b1aca89bb757852d9","sha256":"0d6fd0e4a74606c8c0f1385b2761f0390869b07159e5bff4bf7814ecc6a90c7b","sha512":"da8a8069eba6e5556a6117f27f8f63aa3191e28d6f15925ed4f4ab01369da246a3e46a8a6080021d9bb020e7a4d4cf1b7c23bbb187ab0e665834fbe5a50b74e4","ssdeep":"","tlshash":"bff02729254d21ec63e24317427a5b01d8bc8d37d75374aa58ca3516b044d068512cee","size":481,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.426054Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"81774d54aa944d3bd0afc3f98e052623","sha1":"ad2c136b4ebf24853a38ea9e120d169b71407ea5","sha256":"17dd49f17d360b866fff190bba425a204b9e3cc880798cfacb693f4b77bb88b7","sha512":"5f4568b27c30cff8ec069a1994bd407434374e4afb939ddabd86ba0f63fd435f1c7ef57b6a76a00aef040d27a36f3088226511823a55fbafbbad9c91a0e8a5eb","ssdeep":"","tlshash":"9a619cc7ff0ed1e64ef904086599919f783c62735a5358aa7c8c28b521804ebc8fd978","size":3456,"data":"","first_seen":"2025-06-23T14:43:08.47892Z","last_seen":"2026-03-29T07:13:34.44582Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/pokemoky.js?48d","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5eefc1f7d0796d34520a56f42baf2c1a","sha1":"10f69fb4a0e2f51a757c3e425777a2c75cd09cb9","sha256":"bcd273007ad9efb689cf0cd2beaf6b211569720a7971425f2db177506d87af14","sha512":"f82cd40427772f582366dd84d0a1579f1ecb8c4e828d2b9c60de05356e3baf0f9602176fa51ea9ccabe79bb667f304b6edc156f73a32ce7812ae945694ee9fa2","ssdeep":"768:N/EgW8iCORMC7g2ZIbCCLG/qPdVBMcv/k7N5R:hEg1CCLIpcv/k73R","tlshash":"9383c5a9dfad0259d1e3004baea15aca647d83777214dc12bc1c1a5873c1dde8b7a3bc","size":86848,"data":"","first_seen":"2025-07-18T09:21:09.181733Z","last_seen":"2026-03-29T07:13:34.375973Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsn.24smi.net/smi.js","fqdn":"jsn.24smi.net","domain":"24smi.net","tld":"net"},"ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"6288aa2613f87af1f77c2911ada5a5e8","sha1":"bc98e0ccf954a61f9d11b6f437d3abf1c345911e","sha256":"397f959ef256f474a0d86ae92a505921b93e8fc3b551150a9a5c47546d79292f","sha512":"5e9a27718707e7c82be89eeea2b7a145a95b7faa03b2cffd0ace0eda3bc7c7e0d62f4bb558e7a00d0ab96cd204a6340c56cdf5aa3f72aad8a8f749e1de198376","ssdeep":"1536:nePC23Lbb5suuitmkR5MgiQzTKrEKMjfb00sH0JYjDSd5I6Nns:neBw6D00sH0GjDC5ns","tlshash":"41b3d88c7d85f42a83d361f1807f054bb2372e1d688d6550e2bad8e53eb844d612bfad","size":109602,"data":"","first_seen":"2025-10-16T08:53:12.703925Z","last_seen":"2025-11-02T23:38:38.66559Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/southcentral/js.js?08","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48f15eb2a5b8ee7b68b032c16d4f9ee8","sha1":"8797e04b9c5a05dc71c8aac4cc8b145ae6bde3e2","sha256":"6ede838c510b030a60f27b0e3466376607a480c6d0cab4e0d2f2f19d92d16af9","sha512":"2832b9fe25e789c3552227ac05c1c4672c27833784f468920a5f3520d6802bfb3302661cea000ec709e13dcf32ce0f52cd16e12109ddd3a9a41776047c1b82e3","ssdeep":"","tlshash":"2c510d4cf75de11c94d603857ead02ee387ca5233242852dfd5d6e606278c3a8a3cdb5","size":2898,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.373332Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/zax/jquery.min.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"10092eee563dec2dca82b77d2cf5a1ae","sha1":"65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b","sha256":"e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59","sha512":"cc92cf5a9b3a62a18af432fdffb81b76da84e2f43ce3c7800a919c10809118d0611e29a47f103ff3df18a54d5331bc5f06ef4771dc406cc763b30ff2a66a3e81","ssdeep":"1536:Du98G2ltZMNWnDr7doqPp07HVDTLGbY9TGA7zEcbnkb17jQq3nPRefqvpsz:DuJItn6qepq15nUfqvpsz","tlshash":"5063e9c9b2c67273c3e730b824af510af136a8aaa44c4854f06ce8e5bd74a55447bf7d","size":72174,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-04T17:41:05.706216Z","times_seen":7586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":false,"md5":"8dee2e24bf1dc9818749f224977c8552","sha1":"5be50ffabb483d7cc356b108945fbcae4db9cc4d","sha256":"c49563a65265f8916e554370e619c0b461a7ff584927ddd2023afd3d079edd7b","sha512":"24d931716de78ab266b5c6a2bd19af849c574fe97d10b95aea9baa35cbf76218e675caa9d5b8ff2ff3c8563be66c74dbe6840ce9c30f0c4ff6368aa489b820ad","ssdeep":"","tlshash":"3a700000f22802388208280a00000020000ac00803030200b222288828080202282080","size":19,"data":"","first_seen":"2025-10-31T12:26:07.030632Z","last_seen":"2025-10-31T12:26:07.030632Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"40c285ecafbab3c198fe55d004ed193c","sha1":"0b8c649c60572d1c55a562a10f6ef29ff34c2d4b","sha256":"c254f709ce4002f8f1e356caf60ef4fd7abff2c25960af5c65b315fe6d52fbde","sha512":"7bfd11e98fcf16e611abd27513a568475b68911a9fc5de1d8b99def6f05d27e3d3b63c570ba0a8401e7a7cd3b9b82df7417a67ce99eaeaae9e7258486b8a7bf4","ssdeep":"","tlshash":"e1e0d867008100d267f38753663a9f55a4b61e27ab63754164db3822f551c06d503cee","size":373,"data":"","first_seen":"2023-06-17T11:09:51Z","last_seen":"2026-03-29T07:13:34.448995Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb561b1dbec6ddf6a142eb06e79af969","sha1":"90305d2a80283b3409fedc49e24d41b494d93696","sha256":"863c2000de20988107ec4deb2df0863750f7e805542ee779fd88849b7efc0783","sha512":"3679dc885400edbddaaef6e710e4d0c4f5d23b6555479814e3cc54dd7220d5e8d0cae55137824d7786ba74456bf831be2ab59d81be2b3e16a04261ad3a2355f2","ssdeep":"","tlshash":"6ff0dd87d1cd5e1723a27523de17170d7ca41266ac100c2e8cb1e238a9b4f29cf22a5e","size":625,"data":"","first_seen":"2025-10-31T12:26:07.033387Z","last_seen":"2026-01-06T22:11:58.332757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"7c9145b67500424eece80f3f58e7f81c","sha1":"5548e4c813bde06d5e0eac6aaed4a6a59af1ebcc","sha256":"a5ac5e2abb597dccadd437d3ede14814c0a0973b6ec09197b9c2f2c59e954990","sha512":"499db08b133791833d822d152a2d2ed31c3966db0ff6d95bb8d5366c5011cb497b9d38880e6caf9b0c07f2e3fe04bb9b35d7cea2af8b392777367d64c22153ae","ssdeep":"","tlshash":"d4c08c8b622a0320028de1110cda0b9934354cbc16002149be3cc2f540becd4740d8ed","size":160,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-23T02:51:21.532585Z","times_seen":200,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/613e06c4454e830b10e3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"721b4ace1fa4604bbd81f6d3c80388a8","sha1":"3e2337f3c2c83b4b6dcfafefdb4e5c22e2ecc7da","sha256":"91d27995ba62d8bbc9913a52f894138801e8f807d007dadf9816b9148b86605b","sha512":"21f8c020d48d1a7b083753a02d8f5def57ca2ae2bef4834fe29b993274f0b3b136a548b76a157b3ad7f0fb0e59e429c37e1c34a5b2d763ae483fdbdfdd6e6491","ssdeep":"1536:IrKno8waV1n4bFM6yQFtPabgugTE1T1519Biim3OXm29:iY6yefTE1Tv19B5vXx9","tlshash":"d5c30788f55174b502e790f8913f660eb33b6469b01588e4b76deef1ae7490e4122fbc","size":126962,"data":"","first_seen":"2025-10-30T07:36:50.861709Z","last_seen":"2025-11-01T07:44:05.840979Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"54148b75883c607506ce407620212c51","sha1":"7f7f748a1cfc1d0a74c59fa06bbd61ccdd66b7e4","sha256":"4592e554ed7a37ff520a398759267caf88c81750ae1bd1422d69212eea0949aa","sha512":"22b708366a0e37114e593a5f8c336e45b04662490090e5257e68adb31aafe0d03d2ad7f54911641cd276a09e7de129e3794cee51ae7392d1652254e0200f09fe","ssdeep":"","tlshash":"74e0c023101d20da30371121e4cb394c55d9973f2b05081005502cbfb5fb133c7596d8","size":355,"data":"","first_seen":"2023-06-17T11:09:52Z","last_seen":"2026-01-06T22:11:58.3342Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"415b725d78e014bba5fbc9e6f786fd90","sha1":"3853a81251dfb51dd59df6704cf8a2c98612e1d1","sha256":"a23d8740b0ebfe52814db62be639eb256c8595cc297d775cf71656c7802e832d","sha512":"832ef4d75d785793bc333e819609849a836a35d7495ca383af4568fc32a50595a8cef7b9c0376e0214655ef8c46e6007b23926d76f7059a92bacb8f4d437d75b","ssdeep":"","tlshash":"39b09b5b04798ab1cb9a4245451855455015b83957176cc3600cc54d9cf0cc6fd77552","size":127,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-23T02:51:21.535215Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"8b917a592f672bb04337fea42fddac65","sha1":"f817a8844e8251a3a4abf6add75f949c6d5e1b7f","sha256":"5e197f08187a7ee01c45fb621f409d945969e1f3a2538c4d590b8489694c655d","sha512":"36ce97dd18c910d5b927f5aaf83965beab3ceefc51fa78bc2d6a5b82c7cf8436d7849184192453211efdfd1b232c7f95ab005991c3719034fc425d3283ff98be","ssdeep":"","tlshash":"5a210111fbbe054e7b3b656f574f3a093da012f22984dea5b09828a8b86d32c4480d39","size":1328,"data":"","first_seen":"2023-06-17T11:09:52Z","last_seen":"2026-01-06T22:11:58.336283Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"psyduck-beak.yotor.ru/inc/sisjoy/gen.php","fqdn":"psyduck-beak.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ea3422cf15e911843a6aca4efd61496b","sha1":"a6b2a4aae248f1bbf075e0780f98298409a89385","sha256":"da161eb9d3244315008244b2e1a2c4e0393887dcdfce21e16423e2277c2a3720","sha512":"26d71df83013894e21023a821670121a71bddfe07e3754cbaa6210ae7b28969ec9c6373c9179039022c94a861bebcd92cb2db84600090fa5bcc775a58624cb34","ssdeep":"","tlshash":"31d023165ffd5130c17616cd30f5435c6562145834d6d137a7cdc9346460fd15e5f845","size":211,"data":"","first_seen":"2025-07-09T19:13:06.350919Z","last_seen":"2026-03-29T07:13:34.420498Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"domTimer","is_inline":false,"md5":"4222b9a4d4c5cc3bfba46162ff27920e","sha1":"e21e35caa9b1abe4b86fe0dc4c2ed01c1b9a3401","sha256":"b584a8883d3a824c38f0d8b564903966face733a6cddd78b4eb878e4d418e00a","sha512":"bd780fc371a4e8d12cf7a0547ee660f66d40af707e29a928547c301c77d6b1b0900287e15e631a1dd166ca7b956ab2a83fe7dff15b5c015cc757651f33a811f2","ssdeep":"","tlshash":"a3f00082c02020c023e3823282020c0080a80c03cb23000300c23802a000c00000288a","size":517,"data":"","first_seen":"2025-10-31T12:26:07.014614Z","last_seen":"2025-10-31T12:26:07.014614Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/24f7593086fee38e923d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f241c550b3efbba63752c56c2a4a39e","sha1":"f632af131ee5710dad990ea4ccea201e8854427d","sha256":"f6646e9d993373b80f8f4ed88f8a1615f2569afc2d2c6ea90753405c97611a36","sha512":"ecdc2b660c281795728f5adfbaa965c29a4b18cf36d84647a95a73d4016b983689935a69ddc6abe056ac3b0394b49a12f2eb48edd2bcac11c4d7e99d78d28679","ssdeep":"768:7RNu+NSW/JFBPA+vq4gDY5JZrDVZnuh8aq3ynSPa0SiNEX:R7BP3gDY5JZfnuWP+OSVX","tlshash":"7673e9d97595b9fa02c3d4f1043f320fa37b9655712a6580b322dac1ec25a9f5223e3e","size":75262,"data":"","first_seen":"2025-10-30T07:36:50.824808Z","last_seen":"2025-11-01T07:44:05.848005Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"introduction_type":"scriptElement","is_inline":true,"md5":"78253987d1ae4fb700ee25930862d01a","sha1":"8444fc1c715b1cd7802ad0cba22c51b177719c08","sha256":"70da5a13185210307b77b460814cd59a45c5b1e93362a7b701d804218ea578f9","sha512":"4cf42e56d9663ae29476b2ba618ac774bdc7214e992c0cc156e38e160139288a459cc995526ae88302cfa14cbc83a7115661be1cf2ef2564ba20c0087f94495b","ssdeep":"","tlshash":"83c012097da254758440219f5db9c59064fc7122d855a90c51caccfca57cee45c0d744","size":192,"data":"","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-01-06T22:11:58.337129Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"psyduck-beak.yotor.ru/inc/sisjoy/gen.php","fqdn":"psyduck-beak.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0bef5d85ac5e1807113bdd4bc12a0b3f","sha1":"1f6977f25a4ae34145ba1cff0ded6a56e752c51a","sha256":"b6a0b8a1a3a65994a30934c12ef315a9ef7ba9c616a6fc26549519bf7a3fed7e","sha512":"92ad12d27cfd9aa9677b0cd081f302c0ebbec6701855cc6aace6e96ebff99b53eafce32bdb4171cbc7c3106504dade12f78f8dad3665ce7119a24fdaa8e78efb","ssdeep":"","tlshash":"ab9000a8320000c0a220a0222b0eb288b2320032a0f082200e00200ce0e00038b200f8","size":46,"data":"","first_seen":"2023-03-08T08:12:15Z","last_seen":"2026-04-02T23:26:45.601064Z","times_seen":953,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/f1fada75d6a6efe3df47.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a71f0c3f3a01f0f3b955fe5901cdeb0e","sha1":"fc929987da58bf473188a54fa4285dfa87bcaff2","sha256":"789a7d3fd8bc5412b7d1762820900c2d7a26e1c0f466588b6741c159c71fa69a","sha512":"a9aa7e00e47aa6020fc5ee555fca5378ed54b95e793676b7e15c029896fd5be16fa3c18ba89dfa83299f5258b00cfba82984b8035f0d9ef84f92137e5459331a","ssdeep":"12288:wNrA6s5AenhBNnzBL2ryBIiMYK4OO4I60oBSEZbjiINbf:wNrMaC2ryBIiMYK/O16ZBSEZbjiINbf","tlshash":"3ce4f8c9fa5170b542e790e9c03f560ea23f751a700984e4b72aede16c74a8e6123f7d","size":704463,"data":"","first_seen":"2025-10-30T07:36:50.752505Z","last_seen":"2025-11-01T07:44:05.882086Z","times_seen":124,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"libbb.yotor.ru/css/css.css?27047","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/css.css?27047 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 2749\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Sun, 29 Jun 2025 21:18:46 GMT\r\netag: \"22a5-638bc74de5980-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XB6hBurAXYnXuGPsIHFhrA3mnZCIb1TuCPMJvvDpCcpiBPQ8%2F5ifVgyUaqgxTXgDWSY9TwR5CoZDr%2BLh6m1cLti0qwDi%2BifNal3tvRj8\"}]}\r\ncf-ray: 997322b37f8e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8869,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a30a1bf9f5a23d25dc8a564c1d479de1","sha1":"fc5eebb9f8d2083ef211126a64c17d66c535846e","sha256":"75d0c69972f189d1516b0794007eb554e3c01ee926e5d51189e36acb589d9647","sha512":"c08c6986ef1bd449714d65a372f12794d83e7a2db79ad4990cfbad86eacec2e9a9daa70735d2f6e837a147f44a75dcf9334bf5e0ea94a488aabe606c9e6cf283","ssdeep":"96:8sOdlxjgpdtUj2BBNhwOAptCe1oBojIo7ml7HAId1K1+FWo9Rd4JbOZHy:8pj2hra8e1oijIo7ml7HAIft/lHy","tlshash":"0a029711b2843449701fc1babc76a339673f4017a6446f7da6b97978c78d0a780b33ad","first_seen":"2025-07-09T19:13:06.335697Z","last_seen":"2025-11-28T23:40:32.490071Z","times_seen":9,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":218,"dns":181,"connect":1,"send":0,"wait":129,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/lupa.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/lupa.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3079\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"c07-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fyi5wLMarfc2ace5y1HQ2YtYIbsNPdFibB9cOEVdMnFKX9mCQQ9WwqKHBeoffd2AtA878X1HcX%2F8ozNqRu9z4tm6ZxFo7s1tIILjOGDr\"}]}\r\ncf-ray: 997322b37f88783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3079,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 55 x 56","md5":"e2c8f8537818f7880be3ae505852b9ff","sha1":"2a1f5572e6f4c9efc1700f34d6c6969bedbd8535","sha256":"6946c64a41b61a1e8708b7bcf8274274c71cdc23932aab32da5b868d19212b3a","sha512":"02e22d3a890ca47d0235655094ed35b13dc32a0add2454ce4ae9630b7bd4f9e37f966827143e59f5312cbad5c383892069a741d45824457613aab2c0dc301cbc","ssdeep":"","tlshash":"e151299ab8ec472acaab7834f5879fc81da5661c844366ca490b4d27153c8d94c3ba51","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-04-01T09:23:20.25054Z","times_seen":356,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/zax/jquery.min.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /zax/jquery.min.js HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 24606\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Mon, 25 Apr 2016 17:14:40 GMT\r\netag: \"119ee-531524fd52000-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kD%2FStmmElrh1tHVAjm%2F0TaHurjiOE3BF8B0XgpeomOFxON6TpCVgnxEty8eDYBm%2Bz0BeZkj3Auum3SH08wImIvq6IN4HvTZ2IesMEqlt\"}]}\r\ncf-ray: 997322b37f9e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72174,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (820)","md5":"10092eee563dec2dca82b77d2cf5a1ae","sha1":"65cbff4e9d95d47a6f31d96ab4ea361c1f538a7b","sha256":"e23a2a4e2d7c2b41ebcdd8ffc0679df7140eb7f52e1eebabf827a88182643c59","sha512":"cc92cf5a9b3a62a18af432fdffb81b76da84e2f43ce3c7800a919c10809118d0611e29a47f103ff3df18a54d5331bc5f06ef4771dc406cc763b30ff2a66a3e81","ssdeep":"1536:Du98G2ltZMNWnDr7doqPp07HVDTLGbY9TGA7zEcbnkb17jQq3nPRefqvpsz:DuJItn6qepq15nUfqvpsz","tlshash":"5063e9c9b2c67273c3e730b824af510af136a8aaa44c4854f06ce8e5bd74a55447bf7d","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-04T17:41:05.706216Z","times_seen":7586,"resource_available":true,"data":null}},"time_used":618,"timings":{"blocked":217,"dns":179,"connect":8,"send":0,"wait":113,"receive":42,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/agrrr/img/star.png","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /agrrr/img/star.png HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/css/css.css?27047\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 804\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IEtUCxMafFPRY%2BQlSPLL0PlxvMVmwDMBMg%2FwFp9QFsFObpz8kTCBQQoJM9OsNSkzz9iXXXBYEM0Uu6mHUHsa92bPZlWcp0Ga7iDZKA%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Thu, 16 Mar 2017 17:14:22 GMT\r\netag: \"324-54adc312f5780\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b8fa737130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":804,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"6776065477867f151562cfa57a131d82","sha1":"e4f63dba014c6be1eaef919389f2dc8ae5a08e19","sha256":"c58ad482e75127b2dd0fe9e0d15e84b7eb51e16b09208b7b1b46cb6cb5aed999","sha512":"df6bfa1bc457674151db9588eb5c7ac136ffd56d1a35c15fcf140702f64ef8468513665c6ebdfac692c048183c64cde29087eba83c982164e69d9f7aec9ba16a","ssdeep":"","tlshash":"70018693285538fdbda4c410c6ee053fca5217d211fa6a040ba7ab44420590ceadc505","first_seen":"2023-06-17T11:09:52Z","last_seen":"2026-01-06T22:11:58.289505Z","times_seen":8,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/90533905?wmode=7\u0026page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122532%3Aet%3A1761913532%3Ac%3A1%3Arn%3A534778209%3Arqn%3A1%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1576%3Awv%3A2%3Ads%3A0%2C0%2C70%2C30%2C225%2C0%2C%2C1282%2C13%2C%2C%2C%2C1655%3Aco%3A0%3Acpf%3A1%3Ans%3A1761913530532%3Arqnl%3A1%3Ast%3A1761913532%3At%3Anew-rutor.org%20%3A%3A%20City%20Car%20Driving%20(2016)%20PC%20%7C%20%D0%9B%D0%B8%D1%86%D0%B5%D0%BD%D0%B7%D0%B8%D1%8F\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952128)ti(1)","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/90533905?wmode=7\u0026page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122532%3Aet%3A1761913532%3Ac%3A1%3Arn%3A534778209%3Arqn%3A1%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1576%3Awv%3A2%3Ads%3A0%2C0%2C70%2C30%2C225%2C0%2C%2C1282%2C13%2C%2C%2C%2C1655%3Aco%3A0%3Acpf%3A1%3Ans%3A1761913530532%3Arqnl%3A1%3Ast%3A1761913532%3At%3Anew-rutor.org%20%3A%3A%20City%20Car%20Driving%20(2016)%20PC%20%7C%20%D0%9B%D0%B8%D1%86%D0%B5%D0%BD%D0%B7%D0%B8%D1%8F\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952128)ti(1) HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://new-rutor.org/\r\nOrigin: https://new-rutor.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nstrict-transport-security: max-age=31536000\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-origin: https://new-rutor.org\r\npragma: no-cache\r\nset-cookie: yabs-sid=654129661761913532; Path=/; SameSite=None; Secure\ni=KJThynirJTtNyJ4oNRenYCJWOa//vHhBs4uauipotnD6e+rgXM+Xk6LkPVZiPEDUfWTawMvazqbXQPl1/L/tpC036xQ=; Expires=Mon, 29-Oct-2035 12:25:31 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=884259581761913532; Expires=Mon, 29-Oct-2035 12:25:31 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None\nyuidss=884259581761913532; Expires=Sat, 31-Oct-2026 12:25:32 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nymex=1793449532.yrts.1761913532#1793449532.yrtsi.1761913532; Expires=Sat, 31-Oct-2026 12:25:32 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure\nbh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Sat, 05 Dec 2026 12:25:32 GMT; SameSite=None; Secure\nbh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Sat, 05 Dec 2026 12:25:32 GMT; SameSite=None; Secure\r\nexpires: Fri, 31-Oct-2025 12:25:32 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nx-xss-protection: 1; mode=block\r\nlocation: /watch/90533905/1?wmode=7\u0026page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122532%3Aet%3A1761913532%3Ac%3A1%3Arn%3A534778209%3Arqn%3A1%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1576%3Awv%3A2%3Ads%3A0%2C0%2C70%2C30%2C225%2C0%2C%2C1282%2C13%2C%2C%2C%2C1655%3Aco%3A0%3Acpf%3A1%3Ans%3A1761913530532%3Arqnl%3A1%3Ast%3A1761913532%3At%3Anew-rutor.org%20%3A%3A%20City%20Car%20Driving%20%282016%29%20PC%20%7C%20%D0%9B%D0%B8%D1%86%D0%B5%D0%BD%D0%B7%D0%B8%D1%8F\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1\r\nlast-modified: Fri, 31-Oct-2025 12:25:32 GMT\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":665,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:32.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /ads/system/context.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nCookie: bh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: private, max-age=3600\r\nx-content-type-options: nosniff\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ncontent-type: text/javascript; charset=utf-8\r\nset-cookie: i=SQtuwm6muiBF0rC5WnLXz2U2tzTjn92nlrYs5UsX2FgZWLK8tmfKsfmBLzrDkF7eC507wIQaWHoBnkej6SUV3sxWseo=; Expires=Sun, 31-Oct-2027 12:25:32 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=8016949731761913532; Expires=Sun, 31-Oct-2027 12:25:32 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=5167962961761913532; Path=/; Domain=.yandex.ru; Expires=Sat, 31 Oct 2026 12:25:32 GMT; SameSite=None; Secure; HttpOnly; Partitioned\r\netag: \"8b7cf3433f785779d1946ee3af7b725e-1302556\"\r\ntiming-allow-origin: *\r\nx-yandex-req-id: 1761913532648867-13395914256401694973-balancer-l7leveler-kubr-yp-klg-187-BAL\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nexpires: Fri, 31 Oct 2025 13:25:32 GMT\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":438215,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65491)","md5":"62acac9003f2c8ab0671b176683b08b3","sha1":"c8161ab8de23e9cc80ff68bd2757ad46a739a09e","sha256":"6f51278f17f155207462de4b440ccbf858d93df4df8bc08882a88fb6e1f40814","sha512":"cf63bcef9a7cbfde94df702e14439a5c52d7f921f5972c2a346ccd8bb5bbb2d8eadd8bac248eca66ac77e7e20ce96a43b448b4724bc2d95ea89cbd27ef1f05d2","ssdeep":"6144:JCn7o4ML3R4SGq8MU9jFl4PYfmzwj0T1mxO:JCn7olLYMUXl4PYfamg","tlshash":"3194f7e975a1b4f203e391e5843f160fe33b5a29741d91a1b722d8d1ac29d4f5223f3a","first_seen":"2025-10-31T12:26:06.90753Z","last_seen":"2025-10-31T12:26:06.90753Z","times_seen":1,"resource_available":true,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":44,"send":0,"wait":59,"receive":0,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/d1d55580c621b9f51ffc.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:33.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302556/d1d55580c621b9f51ffc.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5022\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nexpires: Sun, 31 Oct 2055 18:52:03 GMT\r\nlast-modified: Wed, 29 Oct 2025 16:03:39 GMT\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\netag: \"f9c4619cecaa38ddfcdb607a70f523a8\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncache-control: public, max-age=946708560\r\nx-strm-log-split: 7\r\nx-request-id: c5ee8879968b8ff5\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14937,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (14903)","md5":"9c5c2dbb18e0e26e206e12580116637c","sha1":"97355918140bf678a83b3fc1ba5855879f143854","sha256":"3a1a57f193549dbc82d144aec0be1580f175b312d1c185d264cf5242ef875d4a","sha512":"2c6148fdda0aae770f749b56bc3d4c6423f002ab49472db59abe5bbc13f968b861faa46a817496d459688b8e7fce8010a7a66ffa7f92846ded83648ad1a8129d","ssdeep":"192:kw+9u4FdHN3vgfye/K1T3m7Ip4k2spjlpQ7YX0lQsm+24Q2BTXV3UGmcLe7tr2vV:kw+9P6fyHKsR2+lpQMXZ+2b2BTqcQNI","tlshash":"ea62f7a97495b4a513db20bb413f150ff3b9a879684d80a0f212d8e97efc85c8167f6c","first_seen":"2025-10-30T07:36:50.741847Z","last_seen":"2025-11-01T07:44:05.890034Z","times_seen":124,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":43,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/southcentral/js.js?08","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /southcentral/js.js?08 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 1131\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4CAkCxNa9zRuvwzDeM4vY0IulMNluCUy8n3X0bHy84ST7BhwDf3FORf%2FucHkCJGQ%2BTLHgKdI34KCaNGPrDdv3B3eHBGoq63iVeGr%2FOi\"}]}\r\ncf-ray: 997322b36f68783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2898,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (869)","md5":"48f15eb2a5b8ee7b68b032c16d4f9ee8","sha1":"8797e04b9c5a05dc71c8aac4cc8b145ae6bde3e2","sha256":"6ede838c510b030a60f27b0e3466376607a480c6d0cab4e0d2f2f19d92d16af9","sha512":"2832b9fe25e789c3552227ac05c1c4672c27833784f468920a5f3520d6802bfb3302661cea000ec709e13dcf32ce0f52cd16e12109ddd3a9a41776047c1b82e3","ssdeep":"","tlshash":"2c510d4cf75de11c94d603857ead02ee387ca5233242852dfd5d6e606278c3a8a3cdb5","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.373332Z","times_seen":74,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":201,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kllastroad.com/science/laugh.js?24469\u0026v=3\u0026u=null\u0026a=0.23885617357280697","fqdn":"kllastroad.com","domain":"kllastroad.com","tld":"com"},"ip":{"addr":"193.200.65.68","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kllastroad.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 10:00:31 GMT","end":"Mon, 01 Dec 2025 10:00:30 GMT"},"fingerprint":{"sha1":"15:4C:46:72:98:6A:1F:CA:CB:D4:F3:68:D5:96:38:08:71:C0:D3:5E","sha256":"BB:F2:4B:7F:29:2D:4E:FC:D9:56:4F:CE:91:44:72:FA:37:C0:35:2A:AC:4F:B9:00:CB:EE:9B:94:CD:B2:F6:C6"}}},"request":{"raw":"GET /science/laugh.js?24469\u0026v=3\u0026u=null\u0026a=0.23885617357280697 HTTP/1.1\r\nHost: kllastroad.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 31 Oct 2025 12:25:32 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nP3P: CP=\"NON DSP COR CURa TIA\"\r\nSet-Cookie: uuid=17619135326802637176; expires=Sun, 31-Oct-2027 12:25:32 GMT; Max-Age=63072000; path=/; samesite=None; domain=.kllastroad.com; secure\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36100,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (362)","md5":"a6883a004873995617ce2a19aa2dfcbd","sha1":"1dc10458da1f9a704d9915c29eeb624f2aa824e1","sha256":"6b01a2e5be7465777b23665de8ee5338dfe17d55e7f14542692585f0f7d3d589","sha512":"22a98a336f99a440372f566a77f0e9f78de9e696fdb2fa1bf04a1fd03e9d72bc114caa91023c2af2c3817ba935bdbc49cccde057c24e7b1b28fa26c7fd9c3bfe","ssdeep":"768:xwT/7d3VZb+mtjfptkwIL9HBlyQQwMs3NEaWlcb3Y:xwT/7d3VZb+mtjxtkww9HBlyQQwMCNET","tlshash":"58f2944e66e710320197643f6fdf81487670c1973148e91cbd9c46486f98e29cafabde","first_seen":"2025-10-31T12:26:06.909512Z","last_seen":"2025-10-31T12:26:06.909512Z","times_seen":1,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":81,"dns":21,"connect":17,"send":0,"wait":40,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"kllastroad.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"jsn.24smi.net/6/5/24832/15500.js?t=1701324258","fqdn":"jsn.24smi.net","domain":"24smi.net","tld":"net"},"ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"24smi.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 06:04:47 GMT","end":"Tue, 27 Jan 2026 06:04:46 GMT"},"fingerprint":{"sha1":"FF:68:DF:88:3D:FE:01:DF:69:2D:0D:10:AD:97:4A:3F:C2:4F:20:03","sha256":"9E:D3:61:D8:CF:E0:08:CF:D1:C0:1C:C0:6F:5B:1B:B1:55:B9:A6:94:CC:36:5C:84:36:EF:A0:66:EC:84:46:7D"}}},"request":{"raw":"GET /6/5/24832/15500.js?t=1701324258 HTTP/1.1\r\nHost: jsn.24smi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nCookie: smi_uid=ViyAMXrjl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Jan 2025 14:56:34 GMT\r\netag: W/\"679258a2-1107e\"\r\nexpires: Fri, 31 Oct 2025 12:35:32 GMT\r\ncache-control: max-age=600\r\nstrict-transport-security: max-age=0\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":69758,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (65485), with no line terminators","md5":"b333fb37ab7853633b4d49ae200f0ddc","sha1":"b5685803ebd54bf43b9f87a8863324e0590e5afe","sha256":"bd4343661544c27548817e0450edce453088c5dfec9f5f5b2d3d590a5ca387ae","sha512":"9e1bbdb625a30a072b668f90ba4bc1e4d5d8497557fc362e001d14deb748390fa47bd47f7bc09750be98052f9e43cf2156c417ba59856ecf50c5bd3feb30791b","ssdeep":"1536:o2ixk34H8puTMUsvErZQtMUsvErZQLUsvErZQW:o2ixkoH8uMU2yKtMU2yKLU2yKW","tlshash":"3063b5334a5e71b72a38783782d9bc4ca10de3824dd29755e6ab5cd4c41b2672a073fe","first_seen":"2023-12-04T19:34:56Z","last_seen":"2026-01-10T20:38:16.578672Z","times_seen":48,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/24f7593086fee38e923d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:33.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302556/24f7593086fee38e923d.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 17412\r\nvary: Accept-Encoding\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"09974d8f71aa30eef43fa7ee8109964d\"\r\ncache-control: public, max-age=946708560\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nlast-modified: Wed, 29 Oct 2025 16:03:37 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Sun, 31 Oct 2055 18:52:58 GMT\r\ncontent-encoding: br\r\nx-strm-log-split: 6\r\nx-request-id: 5726bcc65fc00662\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":75262,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"0f241c550b3efbba63752c56c2a4a39e","sha1":"f632af131ee5710dad990ea4ccea201e8854427d","sha256":"f6646e9d993373b80f8f4ed88f8a1615f2569afc2d2c6ea90753405c97611a36","sha512":"ecdc2b660c281795728f5adfbaa965c29a4b18cf36d84647a95a73d4016b983689935a69ddc6abe056ac3b0394b49a12f2eb48edd2bcac11c4d7e99d78d28679","ssdeep":"768:7RNu+NSW/JFBPA+vq4gDY5JZrDVZnuh8aq3ynSPa0SiNEX:R7BP3gDY5JZfnuWP+OSVX","tlshash":"7673e9d97595b9fa02c3d4f1043f320fa37b9655712a6580b322dac1ec25a9f5223e3e","first_seen":"2025-10-30T07:36:50.824808Z","last_seen":"2025-11-01T07:44:05.848005Z","times_seen":124,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":62,"dns":1,"connect":13,"send":0,"wait":41,"receive":5,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/90533905/1?page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026hittoken=1761913532_801eed8c582052cfc5e905d574878d83d766059b235a4e438acfebab4b7e2579\u0026browser-info=nb%3A1%3Acl%3A174%3Aar%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122547%3Aet%3A1761913547%3Ac%3A1%3Arn%3A762502166%3Arqn%3A4%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2878%2C2878%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1761913530532%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1761913547\u0026t=gdpr(14)mc(p-2)clc(0-0-0)rqnt(4)aw(1)rcm(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:47.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/90533905/1?page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026hittoken=1761913532_801eed8c582052cfc5e905d574878d83d766059b235a4e438acfebab4b7e2579\u0026browser-info=nb%3A1%3Acl%3A174%3Aar%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122547%3Aet%3A1761913547%3Ac%3A1%3Arn%3A762502166%3Arqn%3A4%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2878%2C2878%2C0%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1761913530532%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1761913547\u0026t=gdpr(14)mc(p-2)clc(0-0-0)rqnt(4)aw(1)rcm(1)cdl(na)eco(83952128)oms(0)prs(1)w2s(0)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new-rutor.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nCookie: yabs-sid=654129661761913532; i=KJThynirJTtNyJ4oNRenYCJWOa//vHhBs4uauipotnD6e+rgXM+Xk6LkPVZiPEDUfWTawMvazqbXQPl1/L/tpC036xQ=; yandexuid=884259581761913532; yuidss=884259581761913532; ymex=1793449532.yrts.1761913532#1793449532.yrtsi.1761913532; bh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccess-control-allow-origin: https://new-rutor.org\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-credentials: true\r\nexpires: Fri, 31-Oct-2025 12:25:47 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-type: image/gif\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nlast-modified: Fri, 31-Oct-2025 12:25:47 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-04T17:41:08.870811Z","times_seen":91662,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-31T12:25:30.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-rutor.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:23:20 GMT","end":"Sat, 27 Dec 2025 19:23:19 GMT"},"fingerprint":{"sha1":"60:97:BD:6C:42:F5:6E:1D:D3:DB:85:25:CC:50:5D:FE:C0:61:AB:3C","sha256":"7B:F2:AF:B7:F5:63:6E:3A:4E:72:26:50:2F:28:D8:2C:15:99:70:2B:42:A2:08:E3:BF:FD:A0:36:75:A9:2A:D2"}}},"request":{"raw":"GET /torrent/532554 HTTP/1.1\r\nHost: new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 301 Moved Permanently\r\nServer: nginx/1.12.1\r\nDate: Fri, 31 Oct 2025 12:25:10 GMT\r\nContent-Type: text/html\r\nContent-Length: 185\r\nLocation: https://new-rutor.org/torrent/532554/\r\nConnection: keep-alive\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":51342,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":149,"dns":44,"connect":30,"send":0,"wait":30,"receive":0,"ssl":73},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/web-mirror.css?2","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/web-mirror.css?2 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/css;charset=UTF-8\r\ncontent-length: 83\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kv4IxmD%2FsZkyDj%2F2GXjduIK63hFb9mh9BCIWBmNlG1gnUPq8u12SpDUZlnb1oPe2IOjB5ch7ISdRNU39JOyWLM%2BcF8DHwWDptN5i7574\"}]}\r\ncf-ray: 997322b37f91783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"d408fe886be98e8f774d6f47a3157a8b","sha1":"2a25fd6f2822a6b158cfec4116284996e2d55078","sha256":"b8388dd9cf762de7fb6dbcc5191fb91666cb5f477fee21779bf576ac9180a026","sha512":"5b4d1c5148c3fb306a4c96ccdd678e7c3c83cadd10dc909178becb981e939c1bfe629bd153adcac4459ada81af88431ee8a1e36de872a21a043a9561a400bc91","ssdeep":"","tlshash":"c4a0020374d703616227c5150d8b737aa87eb14253048e8dcd4052363eef2d30dc2e91","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-03-29T07:13:34.399846Z","times_seen":35,"resource_available":false,"data":null}},"time_used":594,"timings":{"blocked":217,"dns":181,"connect":1,"send":0,"wait":133,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/pluso-like-small.js?10","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/pluso-like-small.js?10 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 972\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Sat, 24 Jun 2023 16:08:50 GMT\r\netag: \"8da-5fee25541e880-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HtButKioqO24Y1IBFgzOdeTFk86Fsifd2g5KU3eQLPNL%2BH7%2BKtPv93L1t0vYOrFTfbB9PxqlqKEwWglT7Fbp1K5407g8NpOgnDafelKx\"}]}\r\ncf-ray: 997322b36f6c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2266,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"dae4b00893641d10303a88837aa5c45f","sha1":"a7514fb190fa8ba489b2dde5dbee92dd0fe7ecb7","sha256":"e786f1e87ef6054b4aab3d26780d3525a14975b8d4de5bae54f095fa07ed5b08","sha512":"f42bd1cf7edca40d2d1bcdbd35c6f36bee9c62172dea1afcc9b0db07139a94cb9d4ead6f3401f7d0ba34d66ab08a5a2be88786def635d2809ef1110d646669f3","ssdeep":"","tlshash":"67411d78bf29722e4172106ff50f744ac0b4842ac4596c8f5f75a1be2da1b6b736c638","first_seen":"2023-07-07T18:06:31Z","last_seen":"2026-03-29T07:13:34.407757Z","times_seen":73,"resource_available":true,"data":null}},"time_used":313,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/down.png","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/down.png HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4603\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"11fb-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7Gml72qkjaWdQfZ0F9ucK%2FTicF%2BSzjs7h7pOQkjpvwjl%2ByqwqxHszQd1VYCJFq53gCDeuycF9YuWXlHuvOGNfCwc%2B1Uw32EfyEOnYTP\"}]}\r\ncf-ray: 997322b37f7b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4603,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 27, 8-bit/color RGBA, interlaced","md5":"7c13d91e67d4debe5cc1469495197d9d","sha1":"e58a04673dd493302d7e6f1198b68ffdce39ebc2","sha256":"d2e05bd0c1f904da109ba2558bcc76c84c48e3de9a2cece178ceba790c6d2bb4","sha512":"c551585c8b8e82cf4ffe570ceece1925a2edc79c1bb5ed66c4e7422165dc193fe7eef5240c3ab7309f92b5d6da87958e48a8702f7235062ee5dfaa65b51c51a3","ssdeep":"96:2SDZ/I09Da01l+gmkyTt6Hk8nTlu8lOckA2C/juYTt1c9vD:2SDS0tKg9E05TM8lO1A/juYx1c9vD","tlshash":"3d91ae6b09a0fcaeedc634611c8c4602bb60119cea5b3abca1d394dd40dad07ab660a5","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-03-23T02:51:21.428088Z","times_seen":264,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":198,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i2.imageban.ru/out/2016/11/05/4ab01ea92cde5c4c93a8e1a6de7583a8.png","fqdn":"i2.imageban.ru","domain":"imageban.ru","tld":"ru"},"ip":{"addr":"62.109.31.142","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imageban.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 17 Oct 2024 19:17:04 GMT","end":"Tue, 18 Nov 2025 19:17:03 GMT"},"fingerprint":{"sha1":"43:B2:B3:1E:65:EA:27:05:79:6F:F9:61:E0:F9:F3:9E:8A:60:46:5E","sha256":"1C:04:CA:80:5C:A3:8D:0E:00:B7:E4:36:B0:75:2E:C2:E7:52:AF:CC:BE:A3:D7:ED:9B:CE:26:EE:82:3B:54:F8"}}},"request":{"raw":"GET /out/2016/11/05/4ab01ea92cde5c4c93a8e1a6de7583a8.png HTTP/1.1\r\nHost: i2.imageban.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.2\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 54937\r\nlast-modified: Thu, 31 Jul 2025 20:58:25 GMT\r\netag: \"688bd8f1-d699\"\r\naccept-ranges: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54937,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 95, 8-bit/color RGBA, non-interlaced","md5":"f6e78289b39dde408a4d2a53fa66c1b8","sha1":"2ccc65ba43dd9fbc947deba85acce15040d3936f","sha256":"30ff61139ce694a12ce4962d76ddbb9a9700d0e14f0923dde479757e5b7bc9ca","sha512":"43acd222a614761cdbe35c9f2bd2516a848a30a03c75c0b465ba9425af7fac00fdfc7c0d8dae57b851dbb753bfb23c4218edf3d4f805719709ff126d76b4ae0e","ssdeep":"1536:m/M+EAxEzn7ltfX6RDI7pc3ibvmiBSwAyHpM:oEfzn7XF7W8HAyHO","tlshash":"7833f2935e42649bfd737d4260dc1368325e97ce6e638c2e9f7a4b2106dc464b7228a1","first_seen":"2025-10-31T12:26:06.914186Z","last_seen":"2025-10-31T12:26:06.914186Z","times_seen":1,"resource_available":false,"data":null}},"time_used":827,"timings":{"blocked":304,"dns":1,"connect":26,"send":0,"wait":28,"receive":59,"ssl":406},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-poster.ru/thumbs/rn14feca.jpg","fqdn":"all-poster.ru","domain":"all-poster.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.266Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /thumbs/rn14feca.jpg HTTP/1.1\r\nHost: all-poster.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":297,"dns":126,"connect":1075,"send":0,"wait":0,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/agrrr/img/movies_btn.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /agrrr/img/movies_btn.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/css/css.css?27047\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3036\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HofiaG1fEfoFir5lou7PVLTdUwylhUenyx91G2pn%2BUuxCy87ghqxu1WdkJGZoNks1a5%2FakF3lco0tdI4opQhGmDps4QnyDur1ChZ2A%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Sun, 15 Mar 2015 23:32:06 GMT\r\netag: \"bdc-5115c243a0980\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b73a477130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3036,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 170 x 34","md5":"986dea298e550985fea4a222d746a9f0","sha1":"eaaa5ecb37610c35ca8516f909158d39d5059524","sha256":"00568b506987f6412fbceb9b5880521a0212706d7e392eb48c315dabc7a900e5","sha512":"8ef07daa68374e9f6439346ed16db1c5c62e50176f160db59744365860748d3458b9200374dcf4c33905d3ca1330633c0fc5e0e564e81dc18009c27af345e0e1","ssdeep":"","tlshash":"9d514d0ab855cea03c7807b3c570bb4aef53cb0c8bc4151a024f56a8639963e4136e27","first_seen":"2023-05-21T11:00:05Z","last_seen":"2026-03-29T07:13:34.358134Z","times_seen":64,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/header-bidding.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:32.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 26 Aug 2025 08:03:35 GMT","end":"Mon, 23 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"7B:FF:02:81:48:EF:11:E9:F6:FD:BE:76:15:A5:57:2F:B5:AB:4D:B8","sha256":"CB:F2:F4:82:42:0E:5A:DA:F9:FA:58:F7:47:D8:16:57:DF:1D:5D:62:E0:76:47:38:38:20:65:93:68:B1:24:F8"}}},"request":{"raw":"GET /ads/system/header-bidding.js HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nCookie: bh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-encoding: br\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\nexpires: Fri, 31 Oct 2025 13:25:32 GMT\r\nx-yandex-req-id: 1761913532655983-1275296037683984441-balancer-l7leveler-kubr-yp-klg-187-BAL\r\naccess-control-allow-origin: *\r\ncache-control: private, max-age=3600\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\nx-content-type-options: nosniff\r\netag: \"abe54d83b09bea38304a3d64d6ef76cd-1302556\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nset-cookie: i=2ikjYKMgbTYpb81OQzu1qX7kakkCahAPmjHlmJ9hFvA+tr411f9H0/jd/+gmeYojD4beKC/B385BHROxqaMRfaqtt2w=; Expires=Sun, 31-Oct-2027 12:25:32 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=4839844411761913532; Expires=Sun, 31-Oct-2027 12:25:32 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyashr=2968155631761913532; Path=/; Domain=.yandex.ru; Expires=Sat, 31 Oct 2026 12:25:32 GMT; SameSite=None; Secure; HttpOnly; Partitioned\r\ncontent-type: text/javascript; charset=utf-8\r\ntiming-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":145052,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65478)","md5":"522ef152c43578040c6b919142439b6d","sha1":"ff79f5c38da4342a2d6a2cb5ca76894062947d72","sha256":"a8e1687fda67a057fa7958f26aceca9731e55935c725a0f648b640d3d89e5f27","sha512":"ea1e2cd12effbf5133e3fd49731b80fc917b304a8194889a35a30faf05243594ad9f5eadbdcb57462ea3bb8867793b399d19284162ce1f0ac3edea68665ca5ed","ssdeep":"3072:77aHFrFb5RjwziPWnd24LSGTjc2jRGKQUFB5mTUn+OAU6GP7nUBb5asbCGafS5h:77gSPdldi5aY5h","tlshash":"76e3199d7aa1f4b6439360e4843f260ef23f5929a41d44a0fa27d4e66c35d5e8223f3d","first_seen":"2025-10-31T12:26:06.9157Z","last_seen":"2025-10-31T12:26:06.9157Z","times_seen":1,"resource_available":true,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":2,"connect":43,"send":0,"wait":58,"receive":0,"ssl":103},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/rutor-logo.jpg","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /rutor-logo.jpg HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 40987\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Sun, 06 Oct 2013 21:18:39 GMT\r\netag: \"a01b-4e819144909c0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ezs5BC73hO4djqFE1XV4RinkqNco%2FVrDr6oKffUNK8qVzHAteyOC%2BoroTxhv%2FWZV64RISTsC1IJbtyFGZ6najExdIOWYxsBHl3e5pHP%2B\"}]}\r\ncf-ray: 997322b36f74783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40987,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 420x110, components 3","md5":"dfc84b0055c981234dd3f48bb8ea7ec2","sha1":"43124eced811630622b81e968590e11071c31040","sha256":"c22baf90cbd403ab7d173f6fa65999a6246d71612d6859181ea7642e98a75279","sha512":"4aa9f868d4cfa7f798429b206763ef9e5680e0f6ee46f790f5002fd2219242802445bb54de02a691b62ca5b7521aa3326e471a38b4952d67485a85aaed389fde","ssdeep":"768:Gsy1cuV6mpkH1V6YDDI15+sV1gemJvCk8dpKZvijAsNwlFwKftTR:Gs3joi6YA1J1gemJvVsGv2KzwK3","tlshash":"8103f278f171948595a49894c7e2e78fc2414c4bc8f9b3a2a3d24f919052072edfcbdd","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-03-29T07:13:34.402288Z","times_seen":66,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":130,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/smilies/thankyou.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/smilies/thankyou.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 451 Unavailable For Legal Reasons\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B0cpF3wirEhuKmuFh9Rtn%2F%2FhDSmGXMLN4w02X5bcNPaLT41XeghwpgQtciEF5iS0P9J8HyWmIdSWjdQ3FO8PA%2FfmVhltg8AKybzEIUBe\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 997322b37f7d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":327,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/pokemoky.js?48d","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /pokemoky.js?48d HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-length: 16392\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=98CyekYDgWvPbqtaQMIOv3%2FGu7YPSnRUUS2BFJDfCZaXURIxzxNE6OrCYh%2B9zTcVr5%2FjyhA1EsZGqy0wqCY0TZ7abeRBOujwPz22fX44\"}]}\r\ncf-ray: 997322b36f6d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86848,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2045)","md5":"5eefc1f7d0796d34520a56f42baf2c1a","sha1":"10f69fb4a0e2f51a757c3e425777a2c75cd09cb9","sha256":"bcd273007ad9efb689cf0cd2beaf6b211569720a7971425f2db177506d87af14","sha512":"f82cd40427772f582366dd84d0a1579f1ecb8c4e828d2b9c60de05356e3baf0f9602176fa51ea9ccabe79bb667f304b6edc156f73a32ce7812ae945694ee9fa2","ssdeep":"768:N/EgW8iCORMC7g2ZIbCCLG/qPdVBMcv/k7N5R:hEg1CCLIpcv/k73R","tlshash":"9383c5a9dfad0259d1e3004baea15aca647d83777214dc12bc1c1a5873c1dde8b7a3bc","first_seen":"2025-07-18T09:21:09.181733Z","last_seen":"2026-03-29T07:13:34.375973Z","times_seen":13,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":189,"dns":0,"connect":0,"send":0,"wait":133,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-poster.ru/thumbs/kyw4ol4s.jpg","fqdn":"all-poster.ru","domain":"all-poster.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.270Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /thumbs/kyw4ol4s.jpg HTTP/1.1\r\nHost: all-poster.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":1551,"timings":{"blocked":293,"dns":126,"connect":1074,"send":0,"wait":0,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/tag.js","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/tag.js HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 80980\r\nlast-modified: Fri, 24 Oct 2025 13:09:09 GMT\r\ntiming-allow-origin: *\r\nset-cookie: bh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Sat, 05 Dec 2026 12:25:32 GMT; SameSite=None; Secure\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\netag: \"68fb7a75-13c54\"\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 31 Oct 2025 13:25:32 GMT\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: application/javascript\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":242250,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"d44f52402d880e3d56f05cd8bb00dcff","sha1":"6ce388903e0c4a14fbae450f2ca048d53e6c9b50","sha256":"e9b37bb86b7c81bd87d41b9d3ae945478eef870dc36bf7d900495f8fe98b779b","sha512":"59b95fe874231f5552cccc0a023a004f63b308b4fefdc555a9c35953eebf0246db61c6df7868dadbde7a6b5802a906b9509156104a211b72b66a89598ebf2f79","ssdeep":"3072:Cj2VixUuw6+4ONcXW8usOPD6maLpYobA7T8OfsgWq6ZAP3eqBbTCXJl:O2VixtANc3usW+maLyn8Ou/ZAPnTcl","tlshash":"0b34e8d976827472537334b4a03f004bb2be7896f14c8964f186e9d57e789a89237f2c","first_seen":"2025-10-27T16:57:08.555205Z","last_seen":"2025-11-05T14:32:31.007163Z","times_seen":623,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":30,"connect":44,"send":0,"wait":89,"receive":76,"ssl":99},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/zaiti.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/zaiti.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 3070\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WElaOC%2B%2FyCzbRyGyDm4z6m3coYzVM75rdaM8n3YlYgeqkBZR5V%2FFJOHFlzjKhINgbjgkDjM2SBhTa33xpUJmd6xupsgIrtJEQ5vQtA%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"bfe-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b86a6c7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3070,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 99 x 30","md5":"9815ec4cdd376b7d71df61b74a7ce6c6","sha1":"962c557ce627cc0332bc6ee175914946ff4bd2a1","sha256":"a1d3e2383ecd387242844341a7200834f5cf3517ab846f17d276a2adc0286421","sha512":"ec65c616a7adeb7b7c48d0c2ddcf2facde5c6ad0f67541a46c31a2ffbec424df42b468d9d7095959529eb9ce4694b89625f94e3cd78cdeb77413bc4c2fd0c036","ssdeep":"","tlshash":"d5515ec8a47b26dff21c467c5e95cbb51fe514c016b9ccb0a0d5371748560ec1129715","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-04-01T09:23:20.232838Z","times_seen":306,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/90533905/1?wmode=7\u0026page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122532%3Aet%3A1761913532%3Ac%3A1%3Arn%3A534778209%3Arqn%3A1%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1576%3Awv%3A2%3Ads%3A0%2C0%2C70%2C30%2C225%2C0%2C%2C1282%2C13%2C%2C%2C%2C1655%3Aco%3A0%3Acpf%3A1%3Ans%3A1761913530532%3Arqnl%3A1%3Ast%3A1761913532%3At%3Anew-rutor.org%20%3A%3A%20City%20Car%20Driving%20%282016%29%20PC%20%7C%20%D0%9B%D0%B8%D1%86%D0%B5%D0%BD%D0%B7%D0%B8%D1%8F\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/90533905/1?wmode=7\u0026page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122532%3Aet%3A1761913532%3Ac%3A1%3Arn%3A534778209%3Arqn%3A1%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A1576%3Awv%3A2%3Ads%3A0%2C0%2C70%2C30%2C225%2C0%2C%2C1282%2C13%2C%2C%2C%2C1655%3Aco%3A0%3Acpf%3A1%3Ans%3A1761913530532%3Arqnl%3A1%3Ast%3A1761913532%3At%3Anew-rutor.org%20%3A%3A%20City%20Car%20Driving%20%282016%29%20PC%20%7C%20%D0%9B%D0%B8%D1%86%D0%B5%D0%BD%D0%B7%D0%B8%D1%8F\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952128%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new-rutor.org\r\nReferer: https://new-rutor.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: yabs-sid=654129661761913532; i=KJThynirJTtNyJ4oNRenYCJWOa//vHhBs4uauipotnD6e+rgXM+Xk6LkPVZiPEDUfWTawMvazqbXQPl1/L/tpC036xQ=; yandexuid=884259581761913532; yuidss=884259581761913532; ymex=1793449532.yrts.1761913532#1793449532.yrtsi.1761913532; bh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 665\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://new-rutor.org\r\npragma: no-cache\r\nlast-modified: Fri, 31-Oct-2025 12:25:32 GMT\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nexpires: Fri, 31-Oct-2025 12:25:32 GMT\r\nstrict-transport-security: max-age=31536000\r\ncontent-type: application/json; charset=utf-8\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":665,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"989232aa75284d562eff5eccf08f4be8","sha1":"e05a6da92919cdef61c9b4785fc38e3ed00993fd","sha256":"b4f45ead0bf7faf141f22060449eb10f18eef89eb5afb68e73d087ef5b3d076f","sha512":"783837db4cba3967f14a8b1f4dce8e6e6583fda78d493a0f519fa7b854b134bf4de54c7abc34349cf2276b9bccb06016da1021bb0a3eac4cef5886aa37f4adfd","ssdeep":"","tlshash":"1801d38860160dfd4f03cb9849df3256f04c34449ed57acd749297e29adfd65b3006b1","first_seen":"2025-10-31T12:26:06.92118Z","last_seen":"2025-10-31T12:26:06.92118Z","times_seen":1,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira%20Sans:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Fira%20Sans:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 31 Oct 2025 12:25:32 GMT\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7364,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6064e905293d40a161a5ac30ce885705","sha1":"07e61b1f38970cae041749fb96e0a5aab2371ec9","sha256":"8de776a81f74471c8e41b558968c861179e20b2810b48423a8b6af1f9edf27fc","sha512":"20c04a6b19acdda9d886250a61ab0c490d3e9f3c431a8c41c0d12a4117c306e79d85c20137303cd7bf27668910f72d3bbb5fec58ec0a2fc5bec00b36dea3d1e4","ssdeep":"192:iMS3Sx3LYj07ABP6R3kH7b67vo9O3uew9F:xJYIdp2","tlshash":"88e1e190006aa548ea971cc173cf7e335d5ea1162061c5ba6ffe2c88eddac361374b5e","first_seen":"2025-09-22T15:48:41.850067Z","last_seen":"2026-03-30T20:51:04.232253Z","times_seen":97,"resource_available":false,"data":null}},"time_used":389,"timings":{"blocked":177,"dns":1,"connect":14,"send":0,"wait":35,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/jquery.tablesorter.new-rutor.min.js?1","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.229Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/jquery.tablesorter.new-rutor.min.js?1 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 5693\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Sat, 14 Jun 2014 10:27:07 GMT\r\netag: \"48bf-4fbc93c6394c0-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pIgSA4WlA7KBf52YPOpnfHitZ2ANyN0gyiA0rypbVYP%2BfGjxbGFJfFxidaEq3tQKH%2Blm03L4QMvPaOj3ViU%2Bb4xMcH39tOusuiXffniB\"}]}\r\ncf-ray: 997322b36f6b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18623,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (11120)","md5":"6de84298187380f0dd15bfa17ace1a7d","sha1":"8dadf1532d9651d168bfbd73ff139e8494198e4e","sha256":"fb736e8586695a5db7c37884ebfd5860cb016a3a587b00b17fcc3053b5681048","sha512":"2e7edeeba1afebe8b9fe0703c59ff8f108d48ee9782a924a3c65bcf9c6f9a09371f0aecbe9333c880dc00ef7202a4bd0c0f21438a345ada598d672254ad9b5bc","ssdeep":"384:RGyqkRzzWBYEfmHtYyR0GPr4h6I/uaa6TYWAZVszlEAWhS5b:Rg+zWBVfmHtYt6+UuQh4","tlshash":"4282c69573ad346390dab4b0886e0859bd315fa39908c435ad35e4872df4e8cc6bbf78","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.374043Z","times_seen":74,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":199,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/forum.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/forum.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 6049\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"17a1-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nBvzzrs3scTWyyzdq%2FqKJFa50FTBWWOE3tK6%2FazC75S3m5tKrZa9Rg6X8jq9%2FV2on0t6pPjKiFfTxMh%2BDx0do%2Fyer1dfCbhoyrJEyAqH\"}]}\r\ncf-ray: 997322b37f85783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6049,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 250 x 42","md5":"6ed3646afac817366089cc05d97bc358","sha1":"0c27adfd80ae76f705fe1c6093ea92c720124e15","sha256":"d9fd75312b80aa988432407952a1fa963f6a6ca7496d5a7533242475b20c600e","sha512":"eabd29f64c64eee9287f0efdc06b2037889cd075f99df1dae05f053917f38ad45799c9e498ee1fdc8e099625031a78869163982bdd792ebfed63333ba297f9f0","ssdeep":"96:f19JPLJ0kz1EUFu8anogZUmhPHnxTR2ci21YSCOBy0DosckEup9uCAnTMzbWySOd:99NLJ5flaoaUgPHnx92ciIYSCOMKosNF","tlshash":"d8c17d45ec39f7a7fc136878553f362ede15ea2db0471a6691063ec90306e6049718b5","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-03-29T07:13:34.387322Z","times_seen":62,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":197,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/bbackgr.png","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.036Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/bbackgr.png HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/parse/s.rutor.org/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2859\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sIOitvxbf2Zhg3Pml0oy0pPSIqztanYDuNTDMXbbCdASb2iVOBFmNzy0%2FRU1eTFBnMOJTy86OxnlHLGLOaFs8Ep1jfcmdvrV4%2Bwj2g%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"b2b-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b73a457130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2859,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 30, 8-bit/color RGB, non-interlaced","md5":"556ed9fbc3543fde2370f99c737be049","sha1":"420c334349f796ee85f261bed6753719221a2fe9","sha256":"a682fdf55d12206673fd39d71e37893badd8286e7c511dfa95e05c0b509b9618","sha512":"c2d94bfae7bc0ab871aeec53c18df1920d14985c28fb85a7ba3871c727ff5660cb5be4a5624168ee16998a7213c9bcd6a907c1fee32bdacacaa3161621c2afb1","ssdeep":"","tlshash":"a7518caf8970b08f78dd79520dcd4202e36c227c8a67373890c269cf4492e47af2a0b5","first_seen":"2023-05-21T11:00:05Z","last_seen":"2026-03-29T07:13:34.378846Z","times_seen":113,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"jsn.24smi.net/smi.js","fqdn":"jsn.24smi.net","domain":"24smi.net","tld":"net"},"ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"24smi.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 06:04:47 GMT","end":"Tue, 27 Jan 2026 06:04:46 GMT"},"fingerprint":{"sha1":"FF:68:DF:88:3D:FE:01:DF:69:2D:0D:10:AD:97:4A:3F:C2:4F:20:03","sha256":"9E:D3:61:D8:CF:E0:08:CF:D1:C0:1C:C0:6F:5B:1B:B1:55:B9:A6:94:CC:36:5C:84:36:EF:A0:66:EC:84:46:7D"}}},"request":{"raw":"GET /smi.js HTTP/1.1\r\nHost: jsn.24smi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 16 Oct 2025 07:09:57 GMT\r\netag: W/\"68f09a45-1ac22\"\r\nexpires: Fri, 31 Oct 2025 12:35:32 GMT\r\ncache-control: max-age=600\r\nstrict-transport-security: max-age=0\r\ncontent-encoding: gzip\r\nx-cache: HIT\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109602,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"6288aa2613f87af1f77c2911ada5a5e8","sha1":"bc98e0ccf954a61f9d11b6f437d3abf1c345911e","sha256":"397f959ef256f474a0d86ae92a505921b93e8fc3b551150a9a5c47546d79292f","sha512":"5e9a27718707e7c82be89eeea2b7a145a95b7faa03b2cffd0ace0eda3bc7c7e0d62f4bb558e7a00d0ab96cd204a6340c56cdf5aa3f72aad8a8f749e1de198376","ssdeep":"1536:nePC23Lbb5suuitmkR5MgiQzTKrEKMjfb00sH0JYjDSd5I6Nns:neBw6D00sH0GjDC5ns","tlshash":"41b3d88c7d85f42a83d361f1807f054bb2372e1d688d6550e2bad8e53eb844d612bfad","first_seen":"2025-10-16T08:53:12.703925Z","last_seen":"2025-11-02T23:38:38.66559Z","times_seen":11,"resource_available":true,"data":null}},"time_used":256,"timings":{"blocked":98,"dns":5,"connect":30,"send":0,"wait":57,"receive":0,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.24smi.net/informer?psw=1280\u0026psh=1024\u0026pow=1280\u0026poh=1024\u0026pdpr=1\u0026pdt=1761913532\u0026ptz=0\u0026pl=en-US\u0026object=24832\u0026template_id=15500\u0026num=4\u0026ref=https%3A%2F%2Fnew-rutor.org\u0026output=json\u0026chash=pQcSTyjeyy\u0026extids=\u0026page=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026yhb_price=0\u0026formats=1\u0026show_id=6f716258-7c9f-4775-8432-c79af22d467c\u0026callback=__smiCb1761913532546","fqdn":"data.24smi.net","domain":"24smi.net","tld":"net"},"ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"24smi.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 06:04:47 GMT","end":"Tue, 27 Jan 2026 06:04:46 GMT"},"fingerprint":{"sha1":"FF:68:DF:88:3D:FE:01:DF:69:2D:0D:10:AD:97:4A:3F:C2:4F:20:03","sha256":"9E:D3:61:D8:CF:E0:08:CF:D1:C0:1C:C0:6F:5B:1B:B1:55:B9:A6:94:CC:36:5C:84:36:EF:A0:66:EC:84:46:7D"}}},"request":{"raw":"GET /informer?psw=1280\u0026psh=1024\u0026pow=1280\u0026poh=1024\u0026pdpr=1\u0026pdt=1761913532\u0026ptz=0\u0026pl=en-US\u0026object=24832\u0026template_id=15500\u0026num=4\u0026ref=https%3A%2F%2Fnew-rutor.org\u0026output=json\u0026chash=pQcSTyjeyy\u0026extids=\u0026page=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026yhb_price=0\u0026formats=1\u0026show_id=6f716258-7c9f-4775-8432-c79af22d467c\u0026callback=__smiCb1761913532546 HTTP/1.1\r\nHost: data.24smi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nCookie: smi_uid=ViyAMXrjl\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\nset-cookie: smi_uid=ViyAMXrjl; max-age=31536000; domain=.24smi.net; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"c670d49ce95cf65327b9f5749343c780","sha1":"6ee576aedc4960ad54f4374079487e73da0e9169","sha256":"ea5f182141e68547a6df769eacef30aa8aba11c8d64d5186a8553ca39e4bed76","sha512":"93d60bbf778329b323e28b35480a1d1b69a2889b14d7f42788554f50770c2cfc806daa6472eb25db972114071ee394957c6b565f6a62b5eeea071f32c41becb5","ssdeep":"","tlshash":"9cb01240142158b810a9c03182066b0a4ac0a52b2110a40865b08198437700319a244f","first_seen":"2025-10-31T12:26:06.924737Z","last_seen":"2025-10-31T12:26:06.924737Z","times_seen":1,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:33.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://psyduck-beak.yotor.ru/\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:33 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Sat, 31 Oct 2026 18:09:59 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\nx-nginx-request-id: 4804f6e68fc09d7a\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31556952\r\nx-strm-log-split: 5\r\nx-request-id: 842635683931a032\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26004,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-04-04T17:41:08.892102Z","times_seen":21624,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":61,"dns":1,"connect":13,"send":0,"wait":25,"receive":4,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/parse/s.rutor.org/favicon.ico","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:33.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-rutor.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:23:20 GMT","end":"Sat, 27 Dec 2025 19:23:19 GMT"},"fingerprint":{"sha1":"60:97:BD:6C:42:F5:6E:1D:D3:DB:85:25:CC:50:5D:FE:C0:61:AB:3C","sha256":"7B:F2:AF:B7:F5:63:6E:3A:4E:72:26:50:2F:28:D8:2C:15:99:70:2B:42:A2:08:E3:BF:FD:A0:36:75:A9:2A:D2"}}},"request":{"raw":"GET /parse/s.rutor.org/favicon.ico HTTP/1.1\r\nHost: new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/torrent/532554/\r\nCookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1761913530; crackers_views=1; t_e4719dd21a=1; rocketteam_counter=1; pokemoky_counter=1; jassyandjames_rand=2; poke_counter_up=Sat%2C%2001%20Nov%202025%2000%3A25%3A32%20GMT; poke_counter=1; _ym_uid=1761913532858801501; _ym_d=1761913532; _ym_isad=2; chash=pQcSTyjeyy\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.1\r\nDate: Fri, 31 Oct 2025 12:25:13 GMT\r\nContent-Type: image/vnd.microsoft.icon\r\nContent-Length: 894\r\nConnection: keep-alive\r\nLast-Modified: Fri, 30 May 2014 11:59:48 GMT\r\nETag: \"37e-4fa9cc83b1500\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":894,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 16x16, 24 bits/pixel","md5":"ab55f59a775976829d8352a7a0584d3e","sha1":"e4b29ec4ac46d97ea15c582d61d02c523dd0485b","sha256":"e68d4b7f22b5027fef4672cc5ba884fb52ac248fd1ca4648c9ac89d95b0e58f4","sha512":"1dae2e3cdf25e072174d2289ce96c423095e4fa8095a7ac33b319f389d1add9ba2f7f7280f4c8cc70351342a324a6bbeaa526381dd4125a3d3594557535b09ab","ssdeep":"","tlshash":"fa118ac555d10e0cfc4595fcb363462511e6cceb2e8092574d53491f3cb128669a4a45","first_seen":"2023-05-06T09:54:57Z","last_seen":"2026-04-01T09:23:20.228046Z","times_seen":536,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":6,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/pluso.css?12s5","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/pluso.css?12s5 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 6982\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Wed, 27 Mar 2019 07:21:56 GMT\r\netag: \"137a8-5850e4ae34d00-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hhNzIENw1lHxudbYJoLXS8nI4pCejpwPElvPH1UhRAKncFYJj6HrpBIHMwWEmNDVL9mYqmdYQ8IfulrxPiN3Mq4CTtVqw6kJZ%2BeX1kA4\"}]}\r\ncf-ray: 997322b37f92783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":79784,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c2908a25b09fc6863f9549e24f6c846d","sha1":"7f82c7cb6c53b8a9d935755a79a74dc3e8509506","sha256":"9bdc9500d9c5b13f9e5581d12caa13fd71feb0f5c2e61d4de26944b159bad332","sha512":"8c795581dfb50841b49aacf844a1433d7ab29e587ec18d77ead9b3d8fb0c45776639dbc16e24750c6f61607bd0e0f2b44377b59c5083b4ed8e64d39039db741e","ssdeep":"768:AcCh0C1CyacaNG+ReOw2ivyqwueX6K1u6Pe+XSWdy2nUW5QWgiwFKkiUOFEiSwq/:AcnmP","tlshash":"9073e5c299fe322cbd07dd23b650b980da3d3111d5253ebd819d3db9a28a4d8f01766e","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-03-29T07:13:34.391263Z","times_seen":69,"resource_available":false,"data":null}},"time_used":568,"timings":{"blocked":214,"dns":178,"connect":8,"send":0,"wait":113,"receive":1,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"psyduck-beak.yotor.ru/inc/sisjoy/gen.php","fqdn":"psyduck-beak.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.202Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /inc/sisjoy/gen.php HTTP/1.1\r\nHost: psyduck-beak.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v91JfhIVzRUmNn9yTQjwNvYFkjveA6Y6PloHPRwHwJzvM48V7p0qOWayjn0%2Fh5Yal52OeBJicIsUztXu4aBG77bK%2F%2BY8C7T%2F4t6MM0r6qM9JU9E%3D\"}]}\r\ncontent-encoding: br\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\ncf-ray: 997322b86a6b7130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":811,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"59fe9aad673c6d50d2ad226b57259520","sha1":"59676e8ef158805e859072d84f3207d42a274853","sha256":"5dda25c90fd8865872c420c6bc59b3f2447a413e3d107158acdf6270b3546c12","sha512":"4aa7f7e4116a1bf93257311782e6dc28243a1062df415b43baa42aaa1eadecf3a8066870f7bdadc4e67349943aa7e77fe4875bd7efca3651ca4fc308588e7e4c","ssdeep":"","tlshash":"1b01ce6a6f55ac588231e0b4d5b5b3dca1a301119bd28533e5e828a7a8c06d18d239e8","first_seen":"2025-10-29T19:25:09.719908Z","last_seen":"2025-10-31T12:26:06.927288Z","times_seen":2,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-poster.ru/thumbs/oy9z0apc.jpg","fqdn":"all-poster.ru","domain":"all-poster.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.264Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /thumbs/oy9z0apc.jpg HTTP/1.1\r\nHost: all-poster.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":1564,"timings":{"blocked":298,"dns":126,"connect":1075,"send":0,"wait":0,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/js/video.js?6844","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.167Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-rutor.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:23:20 GMT","end":"Sat, 27 Dec 2025 19:23:19 GMT"},"fingerprint":{"sha1":"60:97:BD:6C:42:F5:6E:1D:D3:DB:85:25:CC:50:5D:FE:C0:61:AB:3C","sha256":"7B:F2:AF:B7:F5:63:6E:3A:4E:72:26:50:2F:28:D8:2C:15:99:70:2B:42:A2:08:E3:BF:FD:A0:36:75:A9:2A:D2"}}},"request":{"raw":"GET /js/video.js?6844 HTTP/1.1\r\nHost: new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/torrent/532554/\r\nCookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1761913530; crackers_views=1; t_e4719dd21a=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.1\r\nDate: Fri, 31 Oct 2025 12:25:12 GMT\r\nContent-Type: text/javascript;charset=UTF-8\r\nContent-Length: 7229\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25786,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8668)","md5":"916ef7055f72f61805607b111f9934fa","sha1":"dd63cbeb56eed300c7c6ae22882103b4792a203a","sha256":"9fa670d9f104549e3dcbd53c3cb451eb253cb1354b94af96143a14d6f76b6abc","sha512":"592fa5c5932321b055e480ad94429656fc324aee2ed3c5c36bce0ce556ae6d1cae7736fc8024b9dec7ffd0b52d6f3f7aa4c1d5b0816bca3c490018825a7519a3","ssdeep":"384:51nftCfu/K0YhE+yuMg+Bue9oGiqV+AY6IOsYrnVhb14p7f:5VfgfuocPPBueJrGUVhb1Gf","tlshash":"bab2b6b893118cb9ec17b2fbc915b396607b8f87b9a502d0799972400bbd0fcd05d68e","first_seen":"2025-10-31T12:26:06.927925Z","last_seen":"2026-01-06T22:11:58.274294Z","times_seen":2,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/chimichanga/galets.js","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-rutor.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:23:20 GMT","end":"Sat, 27 Dec 2025 19:23:19 GMT"},"fingerprint":{"sha1":"60:97:BD:6C:42:F5:6E:1D:D3:DB:85:25:CC:50:5D:FE:C0:61:AB:3C","sha256":"7B:F2:AF:B7:F5:63:6E:3A:4E:72:26:50:2F:28:D8:2C:15:99:70:2B:42:A2:08:E3:BF:FD:A0:36:75:A9:2A:D2"}}},"request":{"raw":"GET /chimichanga/galets.js HTTP/1.1\r\nHost: new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/kimjongun/under_desc/\r\nCookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1761913530; crackers_views=1; t_e4719dd21a=1; rocketteam_counter=1; pokemoky_counter=1; jassyandjames_rand=2; poke_counter_up=Sat%2C%2001%20Nov%202025%2000%3A25%3A32%20GMT; poke_counter=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.1\r\nDate: Fri, 31 Oct 2025 12:25:12 GMT\r\nContent-Type: text/javascript\r\nContent-Length: 604\r\nConnection: keep-alive\r\nLast-Modified: Tue, 13 Sep 2022 10:15:43 GMT\r\nETag: \"601-5e88c4b7b71c0-gzip\"\r\nAccept-Ranges: bytes\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1537,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"37607a50e5c3055c37745b8a8523f5fe","sha1":"b65d14449e609c6ecffbc73e17aa2f05b0acf210","sha256":"7462330295488346f30edebf0a6d2e847eb2cc135e7d735310504e128217db6a","sha512":"0a652beb49d0e1bf408a0f7428ecc0bc793ed261a18acc641b7deda39226133cb67fa2978b9fc5329d5bd2f8f85a9eb07c66608a1e1e639c170c2ea04a0ae0f8","ssdeep":"","tlshash":"31318e98359e701d918423467a7510deac3ce7b102db91bce5deb472609081b8e3d9f6","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.367557Z","times_seen":59,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"psyduck-beak.yotor.ru/inc/sisjoy/wot.jpg?5","fqdn":"psyduck-beak.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:32.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /inc/sisjoy/wot.jpg?5 HTTP/1.1\r\nHost: psyduck-beak.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 112538\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BshwEK91Dd2hc3blUukcFEYvEIPFk3iQfFcDua06vt9CATkm0rOLrBm9arA01uzK9pgAQortYwwv4nD5trH7T1FiALrGiOqogXbxWtQ7SRe11ZM%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Mon, 07 Jul 2025 16:07:04 GMT\r\netag: \"1b79a-6395908df7a00\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322ba5a897130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112538,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 600x90, components 3","md5":"0f567cf2d828ed347a4eeae8aeb9c9e3","sha1":"f19873ae7be901e16cf575521098b279beaeb010","sha256":"7145dfa63f7a20e4c2cca500d3f81d31a02ad59b40c033fc086721f46129f9bb","sha512":"95b4702ae7ab2576cddf1ea38d5c0b8b4c5be6853adaa9f2413e2ff7961bcc8e31ece079f975c70c9f1949ef1e7a05ed583f66ff98415d3dd0cd4673dd7f7187","ssdeep":"3072:QBtoqSLICkSY96ESR3AOA4uEn8iSZmULwgdprN4rQa2w4:Qzo50SYkEoAuuwpSZbRN4+","tlshash":"cdb3135bbf35b8001faeb62b97ae863d1d0cee7045d4723305e905a0ed1ade5c84db62","first_seen":"2025-10-29T19:25:09.690258Z","last_seen":"2025-10-31T12:26:06.929316Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@500\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Inter:wght@500\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 31 Oct 2025 12:25:32 GMT\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2591,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f1efa7cc654e80512798e22fb85383c5","sha1":"63027468dba71b0f55e8802bbaabb200fe636030","sha256":"9975b4b5919fa3baf5e26b85afca132f61ea29ae0ba397a5c4946fd39d63020e","sha512":"154081191e84956070424bebc1dea8a2c9ab30c778a47188177b0c924b1fcee0b5bb07db6c1959eea3f98b892de64eef9c485ffcdfe2c095bd66cf97d1298be4","ssdeep":"","tlshash":"2151afd1002f95009a475dc223cf3f39aede21492085c5ba5bfd1dc5acded26436979e","first_seen":"2025-09-11T15:35:52.891354Z","last_seen":"2026-04-03T21:32:18.474337Z","times_seen":276,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":32,"receive":0,"ssl":158},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/functions.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/functions.js HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 1327\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"d40-4f8f8b3aed540-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PgTr2uvxle%2FhLReMEy%2BX%2BEF1GmwYyYumjOmYXXL3ZGe42GN8gsOivkVIV1cuD%2FNT%2BVi56hJi8JiyLXcdXOgMX1mixVi1%2BzTRxyLAQl2B\"}]}\r\ncf-ray: 997322b36f67783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3392,"size_decoded":0,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text","md5":"e1807e6a8009ef9a06b54a0586ee8884","sha1":"2691a68a2209485cbe526d8914c54113daf773df","sha256":"d47ad6a2c2fa3bbd326ea77e4a328ea45e13f67593684237859ef21ed594222d","sha512":"99bde3ae5264e92d6288bf01bda8cf48eac02d7e2c9d51ddaeceaeaaec439f61bec916355253a29eb18c614bfc66080dae36f19910cca9027825600c4e87280b","ssdeep":"","tlshash":"82613219b9c1502a872710353def364a34b90573d085da62b86cb9606f64e34577eef8","first_seen":"2023-03-08T19:46:28Z","last_seen":"2026-03-29T07:13:34.406875Z","times_seen":73,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":203,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matchid.adfox.yandex.ru/getcookie","fqdn":"matchid.adfox.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"93.158.134.118","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:32.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"matchid.adfox.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sun, 24 Aug 2025 21:02:59 GMT","end":"Mon, 16 Feb 2026 20:59:59 GMT"},"fingerprint":{"sha1":"70:E0:FE:65:77:E1:01:BD:A4:11:8F:96:8C:9B:00:45:13:3B:B7:82","sha256":"4B:C0:FD:4F:7A:44:98:A5:9A:CE:93:70:73:5E:D6:7B:FF:0B:19:C3:8C:B7:F5:D3:61:13:27:01:A8:A8:89:1E"}}},"request":{"raw":"GET /getcookie HTTP/1.1\r\nHost: matchid.adfox.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nCookie: bh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; i=SQtuwm6muiBF0rC5WnLXz2U2tzTjn92nlrYs5UsX2FgZWLK8tmfKsfmBLzrDkF7eC507wIQaWHoBnkej6SUV3sxWseo=; yandexuid=8016949731761913532; yashr=5167962961761913532\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 87\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *\r\ndate: Fri, 31 Oct 2025 12:25:33 GMT\r\naccess-control-allow-origin: https://psyduck-beak.yotor.ru\r\ncontent-type: application/json\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":87,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"dcaf91f6ea0b91b030d5246701fcbf6d","sha1":"af058a03a691cf50e6af590bbb405b270746a74c","sha256":"1c943d69f6a991718d5b2c59a198b924fc2d3786f42f3b63f61d9041d7d4f3d0","sha512":"fcadeb43e1a9699c7eea53c21685f8cfded78d3857c8f6859e20ebdfb4382a2abf117b965584d6bb94b5e9cb065abbebdad59b9ca0cd046b1eca18673d7bf101","ssdeep":"","tlshash":"f1b01221c5089b84629003070d3241b1042300900ab0d1020395c02234b58046215140","first_seen":"2025-10-31T12:26:06.931824Z","last_seen":"2025-10-31T12:26:06.931824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":211,"dns":83,"connect":41,"send":0,"wait":50,"receive":0,"ssl":87},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/e076e7bad9a3caacf010.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:33.046Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302556/e076e7bad9a3caacf010.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 5720\r\ncache-control: public, max-age=946708560\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncontent-encoding: br\r\nexpires: Sun, 31 Oct 2055 18:53:55 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 29 Oct 2025 16:03:39 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\naccess-control-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"a509a8396cc2a767a58c3c429660768e\"\r\ntiming-allow-origin: *\r\nx-strm-log-split: 8\r\nx-request-id: 9cad08eb917d4215\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16339,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (16305)","md5":"0e3d5914c614b770fe2825f1a732e0fe","sha1":"2af9003be6f70a1ad72cb3a8609f652c3442c2b2","sha256":"5cce9e7a7852d3a57ad1a4d2aafa58bc12d7fc12d215fab524518d2129bf45cb","sha512":"b27ab1782e2b1bfc9f38c326607b6547001cdabcfe981a7faf1eeb156566dc2ce032852f2d8d5d4bca14eae7d6ae3161cb07304c776c004ea42100dbc8050b41","ssdeep":"192:LwEu3I4CJlLrSO2dyacdFxzyZnBzJVA0ANkUmiMHkNVXNVVpobQn2FASueJlbhpq:LwPpCJp+OkyQZvVwkisbyeQ","tlshash":"fc7209fd3520b0205bdf7076627f191ff378292e644884a0670aedf629b491e9193fac","first_seen":"2025-10-30T07:36:50.818713Z","last_seen":"2025-11-01T07:44:05.881551Z","times_seen":124,"resource_available":true,"data":null}},"time_used":177,"timings":{"blocked":62,"dns":0,"connect":15,"send":0,"wait":45,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-poster.ru/thumbs/2xmho78o.jpg","fqdn":"all-poster.ru","domain":"all-poster.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.267Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /thumbs/2xmho78o.jpg HTTP/1.1\r\nHost: all-poster.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":296,"dns":126,"connect":1070,"send":0,"wait":0,"receive":0,"ssl":63},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"all-poster.ru/thumbs/9m9padbg.jpg","fqdn":"all-poster.ru","domain":"all-poster.ru","tld":"ru"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.269Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /thumbs/9m9padbg.jpg HTTP/1.1\r\nHost: all-poster.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":1554,"timings":{"blocked":294,"dns":126,"connect":1075,"send":0,"wait":0,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/icon_plus_1.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.040Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/icon_plus_1.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/parse/s.rutor.org/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 191\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=snal0Q3nAWaGPAkMW21uT9nmeyOuUwoJWHDiecW7ByAeg%2FWlioxMWKChX0n5yEWYqmjcA1evg75sRUag2KrjHzoFS3IW1JloADrYnw%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"bf-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b73a487130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":191,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 9 x 9","md5":"a80048713675f927b56cb662060fca09","sha1":"0b11a2704361388ef0c7411481600ea47f1cf66d","sha256":"12511c9756a8556182399c6721b442b7a9182622746a6435032e0eb5179f8641","sha512":"30a320dd6592581ec16cab500d37cc69973f3b9cbb5705ba2789f03847aa7b1a7e2748c6be5f11371eeda85e33b453e100f5de7fdaa435bec717960eeeab441a","ssdeep":"","tlshash":"36c0220ec8f38234949852a2cb16ad49b6386d22340c1b2825990805701b5d21080320","first_seen":"2023-05-07T21:57:24Z","last_seen":"2026-04-03T18:01:16.934179Z","times_seen":681,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.695Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 31 Oct 2025 12:25:32 GMT\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16755,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"227c49935c94e2db746d5483119e3eda","sha1":"8698bd6466a7746aefaa8a78ae05feeb2e3db075","sha256":"f30a2f101b045d24748cdbb5e2082e3216ae8ecfcc2f091af638786d3eced120","sha512":"4a7f23e91bff114b72ba6fce5028fbe508f1bc345dd766a3d248746f017c7234a4dadafa6bac9398b2a755205b7539688081b92137bc13dd9384b1049a6a8468","ssdeep":"384:8wfMw1wWw6wyhw/qY4XwNwtwiwfDwOwdwBwyaw/qY4QwGwmw4wfdwkwDw3wyQw/P:8JKBLfhQE8YtCR6UfaQ7zfTYHw+fQQVl","tlshash":"c872eca1041740009b839ce223cebf35fe5f92117141d0b9abfd9b6badcbc66526936d","first_seen":"2025-09-09T02:34:37.720999Z","last_seen":"2025-11-18T23:04:34.411089Z","times_seen":2605,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":1,"connect":29,"send":0,"wait":32,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/jquery.cookie-min.js","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.224Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/jquery.cookie-min.js HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/javascript\r\ncontent-length: 421\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"2dc-4f8f8b3aed540-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyt94V04kXWKT49h5qUa%2FKqj%2BzsLoQYTSwLIpDXok9BZpKb6IV1EG5SA9QGt0QWldizZQQ3VEd1lyrWVYefUcCtsjHkhFwxtZ91zNNMq\"}]}\r\ncf-ray: 997322b36f65783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":732,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (732), with no line terminators","md5":"ce56bb0d2daafc993b2866ccc1af86fc","sha1":"fe46733587f81da245f6b3e16d6bbbd8a1cb2fea","sha256":"874d19eae19d9f20a884d976ccca6092c91da6ee8c71d8be1c5c893acbad9159","sha512":"b3191b1e1e2626f0b30c71e074024d90dc89e9dde13d563cdf92520c4cc37c3d65dbcaa5c2ad8f160e18878b1442cfab5a9939d4ccfc3887f2916dfc1fa03d3a","ssdeep":"","tlshash":"3f01152cb1a9195845fe0221377daa86b411eb214999b07cd787e87423b84410db3d71","first_seen":"2023-03-07T12:22:05Z","last_seen":"2026-04-04T14:40:59.388024Z","times_seen":1755,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":204,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/smilies/thankyou.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/smilies/thankyou.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 451 Unavailable For Legal Reasons\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: text/html\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lX7aQSLcCRISq99TS%2F%2B3OrJv3fhI8f453XhxPWkC3U0RWHlqOpnawgUgtumQQEZbmqAWoqOV4R%2BvaES3%2Bc4EzwQ3RKgSsMxX6rDAcQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 997322b71a407130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"451","status_text":"Unavailable For Legal Reasons","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vak345.com/csn/202510311525.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336\u0026_t=1761913532213.213","fqdn":"vak345.com","domain":"vak345.com","tld":"com"},"ip":{"addr":"87.242.110.165","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vak345.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:55:09 GMT","end":"Sun, 04 Jan 2026 14:55:08 GMT"},"fingerprint":{"sha1":"F5:80:DE:45:76:80:46:4F:70:74:3E:B2:48:0F:6A:C7:F4:9C:4B:87","sha256":"60:FA:92:1C:D5:7A:C8:5D:3E:35:6F:F0:3F:A1:D1:9B:0F:1A:25:26:4C:2D:94:26:0F:76:11:AF:30:A0:D9:11"}}},"request":{"raw":"GET /csn/202510311525.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336\u0026_t=1761913532213.213 HTTP/1.1\r\nHost: vak345.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\nx-build: 2e923701\r\nx-host: nginx4\r\nset-cookie: sky_uuid=6b45fb67-501f-e594-c68b-b5fae60d1385; max-age=157680000; path=/; HttpOnly; secure; SameSite=None\r\nx-movieads-country: NO\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"10b7db767d4b5ccf7b673f0c1fcea8bf","sha1":"78db4b32f0129eb2859285fc0efaa8441b57e791","sha256":"34a6ad2a4b67d5910f3ca2c673e78fc1782e89b2dc8964fc2a84eec2be5e9b62","sha512":"ba1bb90def084bd7ad562c23c18b38857b653f3118845c5efce68c54ceeb629688bdcfb5b3cc9f2de2430de7be1e8279bff2411f7cc5df03feea7e1a0056632a","ssdeep":"","tlshash":"6480000a2cbc22ba22280c208e2020c3b2800c20c800a0ece020aa2c00afc0882a8c2a","first_seen":"2024-11-04T11:23:18.039022Z","last_seen":"2025-11-28T23:40:32.531113Z","times_seen":10,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ads.digitalcaramel.com/js/pokeball.youtube-obhod.ru.js?ts=1761913532489","fqdn":"ads.digitalcaramel.com","domain":"digitalcaramel.com","tld":"com"},"ip":{"addr":"65.109.72.77","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:32.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ads.digitalcaramel.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Sep 2025 04:09:55 GMT","end":"Fri, 26 Dec 2025 04:09:54 GMT"},"fingerprint":{"sha1":"34:24:DF:99:4B:7F:03:C7:F2:78:28:86:99:FD:41:29:BA:65:B8:B5","sha256":"24:8D:76:B8:AD:08:96:FD:FB:F5:27:68:FD:AC:1A:AF:B6:5E:CB:52:7B:8B:A7:02:DD:4F:C9:ED:49:91:2A:1C"}}},"request":{"raw":"GET /js/pokeball.youtube-obhod.ru.js?ts=1761913532489 HTTP/1.1\r\nHost: ads.digitalcaramel.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nx-xss-protection: 1; mode=block\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-security-policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self';\r\npermissions-policy: interest-cohort=()\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T17:46:17.157563Z","times_seen":13340936,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":73,"connect":14,"send":0,"wait":14,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/metrika/advert.gif","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ncontent-type: image/gif\r\naccess-control-allow-origin: *\r\nset-cookie: bh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.com; Expires=Sat, 05 Dec 2026 12:25:32 GMT; SameSite=None; Secure\r\ntiming-allow-origin: *\r\nexpires: Fri, 31 Oct 2025 13:25:32 GMT\r\netag: \"68fb7a75-2b\"\r\nstrict-transport-security: max-age=31536000\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccept-ranges: bytes\r\nlast-modified: Fri, 24 Oct 2025 13:09:09 GMT\r\ncache-control: max-age=3600\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-04T17:41:08.870811Z","times_seen":91662,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"data.24smi.net/cfg?object=24832\u0026ver=84\u0026pio=true\u0026pps=true\u0026callback=__smiCb1761913532545","fqdn":"data.24smi.net","domain":"24smi.net","tld":"net"},"ip":{"addr":"212.41.11.107","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"24smi.net","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 29 Oct 2025 06:04:47 GMT","end":"Tue, 27 Jan 2026 06:04:46 GMT"},"fingerprint":{"sha1":"FF:68:DF:88:3D:FE:01:DF:69:2D:0D:10:AD:97:4A:3F:C2:4F:20:03","sha256":"9E:D3:61:D8:CF:E0:08:CF:D1:C0:1C:C0:6F:5B:1B:B1:55:B9:A6:94:CC:36:5C:84:36:EF:A0:66:EC:84:46:7D"}}},"request":{"raw":"GET /cfg?object=24832\u0026ver=84\u0026pio=true\u0026pps=true\u0026callback=__smiCb1761913532545 HTTP/1.1\r\nHost: data.24smi.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.20.1\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncache-control: no-store\r\nset-cookie: smi_uid=ViyAMXrjl; max-age=31536000; domain=.24smi.net; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=0\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.20.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1120,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (1120), with no line terminators","md5":"63f38ab2771febf46c0a183412913624","sha1":"42af44ccc7df5ffef5de0129e494a13e24a1d5c5","sha256":"82b8d550ad33da76dcb7cb09e000dfe64df9822edd0ca01814e4410c8151a9e2","sha512":"705359dec91419d40b8ece3b87b6b03b16fc254d20319837c02fbecb816d28007dfe76bc0cf9c28874d24e8cf15e375b435d0c1e731e2d28fa92616410072c3c","ssdeep":"","tlshash":"a221c37e6701f8fcd107af4bd05376694c6df529470aa544a3cc660cf87955d393680a","first_seen":"2025-10-31T12:26:06.939748Z","last_seen":"2025-10-31T12:26:06.939748Z","times_seen":1,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":4,"connect":54,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/90533905/1?page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1761913532_801eed8c582052cfc5e905d574878d83d766059b235a4e438acfebab4b7e2579\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122532%3Aet%3A1761913533%3Ac%3A1%3Arn%3A1070882463%3Arqn%3A3%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1761913530532%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1761913533\u0026t=gdpr(14)mc(p-2)clc(0-0-0)rqnt(3)aw(1)rcm(1)cdl(na)eco(83952128)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22Script%22%3A%22After%22%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/90533905/1?page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1761913532_801eed8c582052cfc5e905d574878d83d766059b235a4e438acfebab4b7e2579\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122532%3Aet%3A1761913533%3Ac%3A1%3Arn%3A1070882463%3Arqn%3A3%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1761913530532%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1761913533\u0026t=gdpr(14)mc(p-2)clc(0-0-0)rqnt(3)aw(1)rcm(1)cdl(na)eco(83952128)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22Script%22%3A%22After%22%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new-rutor.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nCookie: yabs-sid=654129661761913532; i=KJThynirJTtNyJ4oNRenYCJWOa//vHhBs4uauipotnD6e+rgXM+Xk6LkPVZiPEDUfWTawMvazqbXQPl1/L/tpC036xQ=; yandexuid=884259581761913532; yuidss=884259581761913532; ymex=1793449532.yrts.1761913532#1793449532.yrtsi.1761913532; bh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://new-rutor.org\r\nlast-modified: Fri, 31-Oct-2025 12:25:32 GMT\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\ncontent-type: image/gif\r\nexpires: Fri, 31-Oct-2025 12:25:32 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-04T17:41:08.870811Z","times_seen":91662,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vak345.com/s.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336","fqdn":"vak345.com","domain":"vak345.com","tld":"com"},"ip":{"addr":"87.242.110.165","port":443,"asn":50340,"as":"JSC Selectel","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.vak345.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Oct 2025 14:55:09 GMT","end":"Sun, 04 Jan 2026 14:55:08 GMT"},"fingerprint":{"sha1":"F5:80:DE:45:76:80:46:4F:70:74:3E:B2:48:0F:6A:C7:F4:9C:4B:87","sha256":"60:FA:92:1C:D5:7A:C8:5D:3E:35:6F:F0:3F:A1:D1:9B:0F:1A:25:26:4C:2D:94:26:0F:76:11:AF:30:A0:D9:11"}}},"request":{"raw":"GET /s.js?v=4b9e9f8a5456f3d3f097a92cdd8ec336 HTTP/1.1\r\nHost: vak345.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\nvary: Accept-Encoding\r\nx-raw: \r\nx-build: 2e923701\r\nx-host: nginx2\r\nx-movieads-country: NO\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24878,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (24878), with no line terminators","md5":"2582ad7f7ce4591fc776721875ae0f08","sha1":"69c32c7a0245b6c1b3ef09374996e9fa90b05f95","sha256":"37c40ef9fb7a93d57dd8cc6c93ad4dde23367b0e00a909534ea0c0fb9f6cd057","sha512":"cbd4c1d1d181861609d0e45ce10c59aee286c52f98b55528a8cfb379c1007656ad6d24736b297db36f0158fc751d636c3d17ffea002c9e7dc8d5eaffbc26d018","ssdeep":"768:E4gj8m4M2LpG+9BTl1OvaF/0a+EbFKm7awn8uPmcbeS05FI8x2WM4dPxUofG5wiH:NFEDdFIeDZFiHjKxo","tlshash":"86b2509225d4b4a947b317b7220ef2c6e02a5cede4440edeb30cf9a4f198503fba9571","first_seen":"2025-10-31T12:26:06.941705Z","last_seen":"2025-10-31T12:26:06.941705Z","times_seen":1,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":5,"connect":28,"send":0,"wait":31,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.com/watch/90533905/1?page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1761913532_801eed8c582052cfc5e905d574878d83d766059b235a4e438acfebab4b7e2579\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122532%3Aet%3A1761913533%3Ac%3A1%3Arn%3A490018680%3Arqn%3A2%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1761913530532%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1761913533\u0026t=gdpr(14)mc(p-2)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(83952128)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22Script%22%3A%22Before%22%7D","fqdn":"mc.yandex.com","domain":"yandex.com","tld":"com"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/90533905/1?page-url=https%3A%2F%2Fnew-rutor.org%2Ftorrent%2F532554%2F\u0026charset=utf-8\u0026uah=che%0A0\u0026hittoken=1761913532_801eed8c582052cfc5e905d574878d83d766059b235a4e438acfebab4b7e2579\u0026browser-info=pa%3A1%3Aar%3A1%3Avf%3A3xktzc2ogg05v7x8e2v8cowhnxhaz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A2240%3Acn%3A1%3Adp%3A0%3Als%3A1514942648573%3Ahid%3A1004178137%3Az%3A0%3Ai%3A20251031122532%3Aet%3A1761913533%3Ac%3A1%3Arn%3A490018680%3Arqn%3A2%3Au%3A1761913532858801501%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Aco%3A0%3Acpf%3A1%3Ans%3A1761913530532%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1761913533\u0026t=gdpr(14)mc(p-2)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(83952128)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22Script%22%3A%22Before%22%7D HTTP/1.1\r\nHost: mc.yandex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://new-rutor.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nCookie: yabs-sid=654129661761913532; i=KJThynirJTtNyJ4oNRenYCJWOa//vHhBs4uauipotnD6e+rgXM+Xk6LkPVZiPEDUfWTawMvazqbXQPl1/L/tpC036xQ=; yandexuid=884259581761913532; yuidss=884259581761913532; ymex=1793449532.yrts.1761913532#1793449532.yrtsi.1761913532; bh=YLzVksgGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\naccess-control-allow-origin: https://new-rutor.org\r\nexpires: Fri, 31-Oct-2025 12:25:32 GMT\r\ncontent-type: image/gif\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Fri, 31-Oct-2025 12:25:32 GMT\r\nstrict-transport-security: max-age=31536000\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-04-04T17:41:08.870811Z","times_seen":91662,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Rubik:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Rubik:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 31 Oct 2025 12:25:32 GMT\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7878,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (649)","md5":"d7c384409c3650437f5e94e972d916ed","sha1":"d176f1a5c847829fd049c95b85218fc3a65bfe16","sha256":"f861cc360951df6f24d9e9eb70b4ab700e98db8e00bc10557830b9ebeccd2321","sha512":"7c7fac0f17ca8f0acea0d0e87f3ddc2588bcda9c75f2d6c0927847864dbb05b6ce1d52837d38b3cd7e1305acd60240dc2d2b22077866c6f3fedbfad9be5cc903","ssdeep":"192:BhCl8s0KtAuMhClDsb5uAtWhClls9nkALp:SlHRlg3leD","tlshash":"bff1bbe0481e5040bf472cc263ce6d27ed0e62553490c5299afd1b9aacbbc22336578e","first_seen":"2025-09-12T20:23:23.163861Z","last_seen":"2026-04-04T10:53:57.833527Z","times_seen":635,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":1,"connect":18,"send":0,"wait":33,"receive":0,"ssl":162},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/f1fada75d6a6efe3df47.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:33.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302556/f1fada75d6a6efe3df47.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 133764\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Wed, 29 Oct 2025 16:03:39 GMT\r\nexpires: Sun, 31 Oct 2055 18:52:46 GMT\r\ncache-control: public, max-age=946708560\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"91119e4b4b0b93d54c740b81fe0731db\"\r\naccess-control-allow-origin: *\r\ncontent-encoding: br\r\nx-strm-log-split: 8\r\nx-request-id: 8a0fafd81e2f3b8c\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":704463,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"a71f0c3f3a01f0f3b955fe5901cdeb0e","sha1":"fc929987da58bf473188a54fa4285dfa87bcaff2","sha256":"789a7d3fd8bc5412b7d1762820900c2d7a26e1c0f466588b6741c159c71fa69a","sha512":"a9aa7e00e47aa6020fc5ee555fca5378ed54b95e793676b7e15c029896fd5be16fa3c18ba89dfa83299f5258b00cfba82984b8035f0d9ef84f92137e5459331a","ssdeep":"12288:wNrA6s5AenhBNnzBL2ryBIiMYK4OO4I60oBSEZbjiINbf:wNrMaC2ryBIiMYK/O16ZBSEZbjiINbf","tlshash":"3ce4f8c9fa5170b542e790e9c03f560ea23f751a700984e4b72aede16c74a8e6123f7d","first_seen":"2025-10-30T07:36:50.752505Z","last_seen":"2025-11-01T07:44:05.882086Z","times_seen":124,"resource_available":true,"data":null}},"time_used":203,"timings":{"blocked":67,"dns":0,"connect":31,"send":0,"wait":39,"receive":22,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.83/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:33.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /safeframe-bundles/0.83/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 8878\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Wed, 03 Nov 2021 13:42:58 GMT\r\nvary: Accept-Encoding\r\ncache-control: public, max-age=946708560\r\nexpires: Sun, 31 Oct 2055 18:56:54 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"f80882bf67cf261aa08d636da095149a\"\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\nx-strm-log-split: 1\r\nx-request-id: 2a6133604c6e9bbb\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":33703,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (33703), with no line terminators","md5":"2435549eac66915d7464ee7b9efce038","sha1":"e390598fb192583622a8ea079d5c96dffdb34fb5","sha256":"34806ef573086241dd1a596a860b0295b51c24f1c37eab36eb9d0665683abb55","sha512":"42a25f058316e5e947ba3149b56c81fd0e82f21d4b8109ef4fc529509d54235a0c0d7dd6212e381129b46ca72d81c4ae9e58cfae87557587727bf290fa1f3f09","ssdeep":"768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad","tlshash":"cee2a78e3295b43703c760f4903f210d65771d28a45a8894fa6bd4e23e7a84f527bf6d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-04T17:41:08.898849Z","times_seen":22883,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":77,"dns":1,"connect":40,"send":0,"wait":52,"receive":1,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1302556/613e06c4454e830b10e3.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://psyduck-beak.yotor.ru/inc/sisjoy/gen.php","date":"2025-10-31T12:25:33.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 20 May 2025 10:10:13 GMT","end":"Mon, 17 Nov 2025 20:59:59 GMT"},"fingerprint":{"sha1":"E9:E3:40:38:F8:89:AC:AB:06:39:1C:22:A2:F7:DA:63:C1:16:3F:82","sha256":"73:48:80:3D:2D:03:B1:22:AF:6D:30:BE:3C:D9:47:31:23:33:75:B1:01:4E:57:AA:D0:92:9D:63:05:FC:6F:2E"}}},"request":{"raw":"GET /partner-code-bundles/1302556/613e06c4454e830b10e3.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://psyduck-beak.yotor.ru\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://psyduck-beak.yotor.ru/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 31 Oct 2025 12:25:33 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 24795\r\nlast-modified: Wed, 29 Oct 2025 16:03:38 GMT\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nexpires: Sun, 31 Oct 2055 18:52:03 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncache-control: public, max-age=946708560\r\netag: \"15c15d1b4403905c259385509a9a2d8b\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-strm-log-split: 7\r\nx-request-id: abd8566fce49cb20\r\ncache-host: cloudcdn-rad-10.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126962,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"721b4ace1fa4604bbd81f6d3c80388a8","sha1":"3e2337f3c2c83b4b6dcfafefdb4e5c22e2ecc7da","sha256":"91d27995ba62d8bbc9913a52f894138801e8f807d007dadf9816b9148b86605b","sha512":"21f8c020d48d1a7b083753a02d8f5def57ca2ae2bef4834fe29b993274f0b3b136a548b76a157b3ad7f0fb0e59e429c37e1c34a5b2d763ae483fdbdfdd6e6491","ssdeep":"1536:IrKno8waV1n4bFM6yQFtPabgugTE1T1519Biim3OXm29:iY6yefTE1Tv19B5vXx9","tlshash":"d5c30788f55174b502e790f8913f660eb33b6469b01588e4b76deef1ae7490e4122fbc","first_seen":"2025-10-30T07:36:50.861709Z","last_seen":"2025-11-01T07:44:05.840979Z","times_seen":124,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":56,"dns":0,"connect":0,"send":0,"wait":34,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"myroledance.com/services/?id=146839","fqdn":"myroledance.com","domain":"myroledance.com","tld":"com"},"ip":{"addr":"193.200.64.24","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"myroledance.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 02 Sep 2025 09:58:43 GMT","end":"Mon, 01 Dec 2025 09:58:42 GMT"},"fingerprint":{"sha1":"24:03:2B:1B:71:5C:CA:87:8D:F5:DD:76:4A:2B:5A:C3:FC:88:4F:EB","sha256":"6A:45:B4:0F:62:51:5F:FD:A7:D7:F5:BD:6B:B3:90:AC:F0:00:9C:34:A7:57:A8:EA:FA:C4:65:22:F6:F3:37:33"}}},"request":{"raw":"GET /services/?id=146839 HTTP/1.1\r\nHost: myroledance.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Fri, 31 Oct 2025 12:25:31 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nContent-Length: 1563\r\nConnection: keep-alive\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1563,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1563), with no line terminators","md5":"591a30b4d219b41912bb41aea3ed9e2a","sha1":"6248deb0210f857281f20ccdba41616a01eea78c","sha256":"7e43b716431e13c6bc178246881278240c1e1041f9800f52b509f7fe04cf751d","sha512":"dd2e8503442c985f1c091e6785689bb2dfa32d05942f2f856ec9cd082eeed912f3e1dc09fdcd886c5a063d3d9503cdec842a3e4bc94f709eb0911e0bc5e98bd1","ssdeep":"","tlshash":"313135ec789e95e896d02697b800f688ff1f98eace1249b14400956673b0d2d8e7fc30","first_seen":"2025-10-31T12:26:06.96526Z","last_seen":"2025-10-31T12:26:06.96526Z","times_seen":1,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":22,"connect":17,"send":0,"wait":20,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"myroledance.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/grannypatries/s.css?912s37","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /grannypatries/s.css?912s37 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 2742\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Fri, 13 Jun 2025 17:53:56 GMT\r\netag: \"22e9-63777baddd500-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4aU%2BoR3gJxrqp7Sez9MloYpaDrqKCo9gKmamzHsZs%2B%2BS542b600OTwq5kA61ODuQgdHga9p0T6fvTCWtyuZjPz2EEe44s488EpJQqkui\"}]}\r\ncf-ray: 997322b37f8c783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8937,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (493)","md5":"be5ffe5dcc2204b0de7154d859cd0349","sha1":"bfba1e2846755a90d2d313acbb7ea0d2d6c0738f","sha256":"648f3c45e59890c6a50825f8b4ea58e48abc5e7fa711850b1c9700545f69817a","sha512":"c65549f360307e5106e2c52df64ba674709fff6a11df9ffd1757b161eb9a23fe960abd4000854c241909de92c7d83d8e7dfb40ada5fb670a35ff5dcb0f775ce7","ssdeep":"192:Um1mWiWrzRXf64h4XPsWbPK49cFYhLoiWNWN5NPM9EQcbaa:Um1mNcz5f684UAPNaFYhUiaWN5NPMeQW","tlshash":"c0025542a7502189b11b81aabeee73f9363f40039f075dbb8a543678a74e39281751df","first_seen":"2025-06-23T14:43:08.389299Z","last_seen":"2026-03-29T07:13:34.375274Z","times_seen":19,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":214,"dns":181,"connect":8,"send":0,"wait":113,"receive":1,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/magnet.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.233Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/magnet.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 796\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"31c-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Emd%2BrbLndX9B8wME9O0xXJXGrXi4IxUq%2B3IMux70CZ760LykUqBBiJJyBAl8IMtYit1OwCs9EdzGP%2FFI6VTuuVH8MwPzN78XLrQ85Bx1\"}]}\r\ncf-ray: 997322b36f78783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 30 x 30","md5":"1a31398a96af2ae3e63de5055912daec","sha1":"55d558e163c634baeae650b15000f513753f29a8","sha256":"7c92fab95800728d3ab74659b56bdc267928496ec422f03954679ebe0155cf9a","sha512":"e401a255f7479dcf78b5b57eaef7c87d1350c3eb5e3aafeb49c6411b5566b893a468124b9e8c4542af84930c591cfa34e08616b124fb1616fa4181c3b3d662ee","ssdeep":"","tlshash":"3d01862d8ccc02a3fb23cc205bac4264d980823fc69c71270f965d52db98295714546f","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-03-23T02:51:21.486369Z","times_seen":205,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/d.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/d.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 359\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"167-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3EfFjPFeP6OdoiFC5T9h9GlbbHy1mQLSPHb%2F5gYnZNZqGqQUPBdPBEeo55F88PgbP%2F%2FtysRBBgLRfnpmyGKyIvuOK35rOOQySnxlWeJ\"}]}\r\ncf-ray: 997322b37f89783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 13 x 13","md5":"3def66024a583b6ca763e249acb3c426","sha1":"82f2f897d3e2746181b889811ac675565dcaf0fa","sha256":"7d4fb7d5a9e681b2313ca88338e3255364aa452f243d6397aa905783e98bfca0","sha512":"ced956d62e7e8e57633cafed83041bca728181a026178bea0277e5b92ebdf5fcb17211709486c5e4be7c7ace81488fa02bd0cd1bfad64cedb6e0e1a824f525c7","ssdeep":"","tlshash":"7be07d55326aa9d1cd01d1f008a1a0a10055b9a4b85a025f3c34112d5e6846f4c80c1e","first_seen":"2023-04-27T14:24:27Z","last_seen":"2026-04-01T09:23:20.212417Z","times_seen":391,"resource_available":false,"data":null}},"time_used":325,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":129,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/css/img/pluso/sprite.png?1","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /css/img/pluso/sprite.png?1 HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/css/pluso.css?12s5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 259091\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QRJk1WUxFEAGeh%2BA8E0jKQm6v4cWSgGw2vWCXD42huvZqZzzXbw%2FJvKtNnPOv87WHv8AI7FX00VHZ7CuLUdVTimj0uJhYYCdMKL3YA%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Tue, 14 Apr 2015 04:47:19 GMT\r\netag: \"3f413-513a7eced63c0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b72a427130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":259091,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1120 x 520, 8-bit/color RGBA, non-interlaced","md5":"b41edc2ebadcc210059384019530364b","sha1":"53bf7e638084d5d3edb78be83d3a8dd8b318562b","sha256":"59dd7e1dce6b861ded439efde90acabebbe955f48f96c990abdd471af1b5f026","sha512":"42c90b4aa24f7ec95780ffcff3c70143dd38f19bb983591149cf9e4f8e9e1d70dab090a5df37f2becc12cc6a8a2b9f6312712272e7e6de7c5dafbfb3b3b0c43f","ssdeep":"6144:xTbFOPiFwrmO8FTYw8sb/RIbDygZKd29m7/+je9G:xTb46Fwr+38s/RU+a","tlshash":"884422ce2c5c690c3fbc76051b9b5798a6d9981bb02089b2e4beb1b3d122f5d3d131d5","first_seen":"2023-06-17T11:09:52Z","last_seen":"2026-03-29T07:13:34.346326Z","times_seen":48,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":134,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/news_line.jpg","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/news_line.jpg HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/parse/s.rutor.org/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 815\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uVFlkiqsBWgLsw8RzpQmyYuRL8slMCvfl%2FrrZP%2BzWj5JCC7mugOnWb34eYag1lU7cGXC%2BSd5FQpr1Yi13YFKVjPyaxbsoVzt4Iy5cg%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"32f-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b73a447130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), default quality\", baseline, precision 8, 400x1, components 3","md5":"0ae0cab0ed0d41e3dd26ccbb8c17b4d9","sha1":"c539f0433f976b2509490fc5b5fa9f358b10fa2b","sha256":"8b9592e1f87ca0409266d4b98fd553dec8c9905ec2782f1c0526db1178e48757","sha512":"940d5ba88d0229daac27d0d5289507dea8e8e7d6ecb262b1f52194bdb045ad01d5101f8d603d13d91d93b142d2a07e14693f686443d91738954c58c62f3f1f1e","ssdeep":"","tlshash":"1a01feda570f72d09f33b4b61d15e1a79289798e3dd477301aa142a5cde0ff48048a4c","first_seen":"2023-05-12T09:34:13Z","last_seen":"2026-03-29T07:13:34.376996Z","times_seen":83,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/backgr.png","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/backgr.png HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/parse/s.rutor.org/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 2869\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P0zAa3Z8tnKsQSHm7rb8Eiij8Q8yz6Ewqffd39lbkqMti2%2BJGHW2hbtIa6mButwU9GN80NkjWxrG82A5lC6QAvPs3wpPJ6uw4LSwSQ%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"b35-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b73a497130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2869,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 40, 8-bit/color RGB, non-interlaced","md5":"c3ce2bb8d4c132e9de2119357cc9996a","sha1":"a9852953a234009e3f2269bd8b2cc4f2f2c432c9","sha256":"169a94c46ca015567d2a42296bc93f41bbf6251b46ddbe476d6843da2a1360d6","sha512":"108eb584f9d6f13f4e76778a80dc4d241caa91390dd62105e938a9f7efcb40c2ef0fdee4b7e6af4233fa838f02214da94c6421b270af03c08f546c3a9ff749c3","ssdeep":"","tlshash":"60516bafc9b0a48f6ced75810dcd0202e768327c9a67363894c265de1055e077f25075","first_seen":"2023-05-21T11:00:05Z","last_seen":"2026-03-29T07:13:34.388289Z","times_seen":102,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/kimjongun/under_desc/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-rutor.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:23:20 GMT","end":"Sat, 27 Dec 2025 19:23:19 GMT"},"fingerprint":{"sha1":"60:97:BD:6C:42:F5:6E:1D:D3:DB:85:25:CC:50:5D:FE:C0:61:AB:3C","sha256":"7B:F2:AF:B7:F5:63:6E:3A:4E:72:26:50:2F:28:D8:2C:15:99:70:2B:42:A2:08:E3:BF:FD:A0:36:75:A9:2A:D2"}}},"request":{"raw":"GET /kimjongun/under_desc/ HTTP/1.1\r\nHost: new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/torrent/532554/\r\nCookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1761913530; crackers_views=1; t_e4719dd21a=1; rocketteam_counter=1; pokemoky_counter=1; jassyandjames_rand=2; poke_counter_up=Sat%2C%2001%20Nov%202025%2000%3A25%3A32%20GMT; poke_counter=1\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.1\r\nDate: Fri, 31 Oct 2025 12:25:12 GMT\r\nContent-Type: text/html\r\nContent-Length: 3569\r\nLast-Modified: Thu, 01 Jun 2023 11:52:16 GMT\r\nConnection: keep-alive\r\nETag: \"64788670-df1\"\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3569,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"a208a127a479351a0c768d2e076d5539","sha1":"4f76ca9b31c7cd14308633d2aaf589977b1f88a5","sha256":"ca727f73a0dd622c6c3ad24d02d76883807e5e57dffd7b986177a9763d2cfe2a","sha512":"3db07b0fcb8b69eebe479d89b76196faef8d4e1b3ccf53b722a7e1897b26735bfca7028a50b5c365cb8f8aef5e2fdf9f8d0d99b877278fd4a7694c100d778c39","ssdeep":"","tlshash":"4171ef2f6081183485bba66aa939634dfe27811beb43144139fc0f2a8fb5d108867e94","first_seen":"2023-06-17T11:09:52Z","last_seen":"2026-03-29T07:13:34.395284Z","times_seen":25,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":1,"connect":32,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/t/top.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/t/top.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: image/gif\r\ncontent-length: 612\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"264-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orRaRXB88YgoPsNay1l%2B6%2F2v%2Bs0xGi8x4JOYJFexFbiFuUAJOW3rQwFEBkCSSUF1TXCw%2BA0vXrbiA%2FUuB1SHuIdZhaCzSPcHIGpwQfoG\"}]}\r\ncf-ray: 997322b37f7f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":612,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 24 x 24","md5":"ab3755cddb40723270164fa84b8f0362","sha1":"a7e6700d02578c03bd76b217b23c55b4fba997ea","sha256":"79df9f5b18cac4dbaec0808448c15e094b5fe20d04aabfe7bed9e6ae07739dfd","sha512":"5abc1bb158bf7cc0ac5c8812f5ac8c9b4545a2622393129ec54b377c05e21de0bcd1840642646ee7e051152af9d6f33d7fc371f0441fc844a8b084504c98d5c8","ssdeep":"","tlshash":"05f0541439558b21e5ff73b5fb6c5f37225ebe1412c8c52738330b134311455c160a6b","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-04-01T09:23:20.254421Z","times_seen":347,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":196,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/i/menu_b1.gif","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.037Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/i/menu_b1.gif HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/parse/s.rutor.org/css.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/gif\r\ncontent-length: 2487\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBgwl%2BQZYGiVJKN7myjhsUwWrndWJjY%2FgqzX5nbabCaBl2yJ%2FQboJlxQnAi%2BgT4Kd0eNBdXsFePYsZcDD%2FWF98TaVCvwzZLZodSmKg%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Fri, 09 May 2014 14:49:17 GMT\r\netag: \"9b7-4f8f8b3aed540\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b73a467130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2487,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 81 x 30","md5":"e6e60f34a712eb50e8783b7d5798cd19","sha1":"edd102808f38d2c3e2d980bb903ee07f2d932150","sha256":"f04b184eb5417b9a81ab455fc07378efa326bbed2a5c74869b3d876b287307d8","sha512":"e6da396de37314a42dc4a9974998ec73059eace453e7414909083930279089ea67a57bc8cd7c3efe7bed73ee356b791fd7defd9834b64ebcf547ab3e03f869ae","ssdeep":"","tlshash":"3f512ba3bc1456e7f6571f38a561042c88d59f41af96e1b431402f24e0f221bbaaad55","first_seen":"2023-05-21T11:00:05Z","last_seen":"2026-03-29T07:13:34.36317Z","times_seen":58,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/parse/s.rutor.org/i/poisk_bg.gif","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-rutor.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:23:20 GMT","end":"Sat, 27 Dec 2025 19:23:19 GMT"},"fingerprint":{"sha1":"60:97:BD:6C:42:F5:6E:1D:D3:DB:85:25:CC:50:5D:FE:C0:61:AB:3C","sha256":"7B:F2:AF:B7:F5:63:6E:3A:4E:72:26:50:2F:28:D8:2C:15:99:70:2B:42:A2:08:E3:BF:FD:A0:36:75:A9:2A:D2"}}},"request":{"raw":"GET /parse/s.rutor.org/i/poisk_bg.gif HTTP/1.1\r\nHost: new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/torrent/532554/\r\nCookie: korjik_test=1; crackers_days=1; crackers_visited=1; crackers_time_visited=1761913530; crackers_views=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.1\r\nDate: Fri, 31 Oct 2025 12:25:12 GMT\r\nContent-Type: image/gif\r\nContent-Length: 1998\r\nConnection: keep-alive\r\nLast-Modified: Fri, 09 May 2014 14:49:17 GMT\r\nETag: \"7ce-4f8f8b3aed540\"\r\nAccept-Ranges: bytes\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1998,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 46 x 56","md5":"76118a48fd5ae4b926e34f4edb427386","sha1":"4aa5f228e3f511bf626afa6703488d1d7c6df5e0","sha256":"4912841156c4582948d016867a6c71845a0221f1dd6419ea911f6f83bbc431d7","sha512":"1f929eb2a0a9bee00d0a7efa41991625ef4d05c1db107af99b4ea76e5f40435c5b14b8df3d3d3545e899f60fde2ea34dab55a3b65692aa766766e417b513e3d1","ssdeep":"","tlshash":"a141079a5b90cb9cc2ec70f3120486c80232c0f804a0b7060173e4cdea983712b28381","first_seen":"2023-05-10T15:46:50Z","last_seen":"2026-04-01T09:23:20.271927Z","times_seen":353,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/agrrr/img/youtube-24px.png","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /agrrr/img/youtube-24px.png HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://libbb.yotor.ru/css/css.css?27047\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/png\r\ncontent-length: 568\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K2LAvNakmbrCpYaokT7kpywcFHXuiOltPEQo2k8GDLKyZvfPXDHxr1ZeDl1ZHpVM0nqrtY3OpCsIHgOBo3GEMCmnMhwomzxtRtyiNQ%3D%3D\"}]}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop\r\nlast-modified: Tue, 05 May 2020 05:23:03 GMT\r\netag: \"238-5a4dfd7753bc0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 997322b8fa747130-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":568,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"9b620d421333d0fd53dc9345dd36ea9e","sha1":"eb58de3959c7bae91c66f7623f45a0ed207034c5","sha256":"a29015c34b37acdbb7df4b7422624f8aa3a9913c7999aef503f62b60b2b378e4","sha512":"d9219a77aa4038cb153aa8f3c380b9e63750c7f08caa516bb6fa7b2ecbaba32ee8a2e708a31bab2a9e216f30b6a1fc2da8179c640effbc90e19d134355440240","ssdeep":"","tlshash":"baf0417917f8c81f86dab0b3923e2862c242111f11421c422e3ac52427d35a8101e742","first_seen":"2023-06-17T11:09:52Z","last_seen":"2026-01-06T22:11:58.297481Z","times_seen":6,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"i5.imageban.ru/out/2016/11/05/a20c0e98cb5c390c090af72ceb4780ea.jpg","fqdn":"i5.imageban.ru","domain":"imageban.ru","tld":"ru"},"ip":{"addr":"62.109.5.15","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.262Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imageban.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2023","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 17 Oct 2024 19:17:04 GMT","end":"Tue, 18 Nov 2025 19:17:03 GMT"},"fingerprint":{"sha1":"43:B2:B3:1E:65:EA:27:05:79:6F:F9:61:E0:F9:F3:9E:8A:60:46:5E","sha256":"1C:04:CA:80:5C:A3:8D:0E:00:B7:E4:36:B0:75:2E:C2:E7:52:AF:CC:BE:A3:D7:ED:9B:CE:26:EE:82:3B:54:F8"}}},"request":{"raw":"GET /out/2016/11/05/a20c0e98cb5c390c090af72ceb4780ea.jpg HTTP/1.1\r\nHost: i5.imageban.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.2\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 116013\r\nlast-modified: Mon, 05 May 2025 22:18:47 GMT\r\netag: \"68193947-1c52d\"\r\naccept-ranges: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116013,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=961, bps=0, PhotometricInterpretation=RGB, orientation=upper-left, width=1280], progressive, precision 8, 550x528, components 3","md5":"d8ebea359cb4c9209280568eb61d6f20","sha1":"fd512b1254d72c1c531c7e7ffc9282bcb83ed08d","sha256":"199e5dfc151735a75a99d91006cbe27c254bb2fa47da088bb337dab03edcc3f9","sha512":"f255d01ab19b5c09c41cfcc5a818354214c50f08b2f73d311585be9564b21a62d1835938574140d8ebe1a24d5a603eca6b3a50d891f4e34dc6a415d98c779ebf","ssdeep":"1536:1eseK+OoT+fEdZRUuazeBwAKj1egBK4l/cois70dyVF1m92vcw0Tx+GWqEh9Ciee:1esehyfYHUuaTAm7U4lzvscEwy+Tq5bS","tlshash":"9cb302196eb98f2af0e1803d18fad786d320b558f743bdd2b88d18053bb4ad5589d34b","first_seen":"2025-10-31T12:26:06.996174Z","last_seen":"2025-10-31T12:26:06.996174Z","times_seen":1,"resource_available":false,"data":null}},"time_used":881,"timings":{"blocked":300,"dns":1,"connect":26,"send":0,"wait":62,"receive":81,"ssl":410},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"new-rutor.org/torrent/532554/","fqdn":"new-rutor.org","domain":"new-rutor.org","tld":"org"},"ip":{"addr":"179.43.157.101","port":443,"asn":51852,"as":"Private Layer INC","country":"Switzerland","country_code":"CH"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-31T12:25:30.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"new-rutor.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 28 Sep 2025 19:23:20 GMT","end":"Sat, 27 Dec 2025 19:23:19 GMT"},"fingerprint":{"sha1":"60:97:BD:6C:42:F5:6E:1D:D3:DB:85:25:CC:50:5D:FE:C0:61:AB:3C","sha256":"7B:F2:AF:B7:F5:63:6E:3A:4E:72:26:50:2F:28:D8:2C:15:99:70:2B:42:A2:08:E3:BF:FD:A0:36:75:A9:2A:D2"}}},"request":{"raw":"GET /torrent/532554/ HTTP/1.1\r\nHost: new-rutor.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.12.1\r\nDate: Fri, 31 Oct 2025 12:25:10 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 15090\r\nConnection: keep-alive\r\nSet-Cookie: korjik_test=1; path=/; domain=new-rutor.org\ncrackers_days=1; expires=Mon, 26 Oct 2026 12:25:30 GMT; Max-Age=31104000; path=/\ncrackers_visited=1; expires=Sat, 01 Nov 2025 12:25:30 GMT; Max-Age=86400; path=/\ncrackers_time_visited=1761913530; expires=Sat, 01 Nov 2025 08:25:30 GMT; Max-Age=72000; path=/\ncrackers_views=1; expires=Sat, 01 Nov 2025 08:25:30 GMT; Max-Age=72000; path=/\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\nStrict-Transport-Security: max-age=63072000; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.12.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":51342,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6828), with CRLF, CR, LF line terminators","md5":"a31e88c4db1e3696b6e807d0e0e90d35","sha1":"c0c3a8ab30967fbf554fb2ff5cd77b71a873278e","sha256":"9a2b783970bdaccfd717127f802547418b60f3d2d2a5046bf8ea2b7a712a5510","sha512":"46db428639ccdfd25a41749cc8e8154819d75200d2d7df1f11723684884d3c6d4f42dee581f92abbe4c6574dc182cdb699e6c66258b84f67c30792737515b4ab","ssdeep":"768:2yEwlBogYZHd0kP+fHGDCac5lzNCHAbVQNjCtlQjtcd:2RwvoPZ2eIUHAbVQVTy","tlshash":"cf33e8108ac9846f0052908bd924bf4e78e441ffe7664a057dee1cbf7fc1ab8d91826d","first_seen":"2025-10-31T12:26:06.99829Z","last_seen":"2025-10-31T12:26:06.99829Z","times_seen":1,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2025-10-31","alert":"Sinkholed","trigger":"new-rutor.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"libbb.yotor.ru/parse/s.rutor.org/css.css","fqdn":"libbb.yotor.ru","domain":"yotor.ru","tld":"ru"},"ip":{"addr":"172.67.213.149","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:31.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"yotor.ru","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Oct 2025 12:44:44 GMT","end":"Sat, 03 Jan 2026 13:43:30 GMT"},"fingerprint":{"sha1":"0E:CF:B7:39:F3:F3:CB:C7:09:6B:88:77:ED:1D:6A:2C:DF:C0:3A:1A","sha256":"1A:EB:6A:59:BA:B0:3F:E7:E4:6F:F2:9A:DB:5E:C7:15:C7:4A:7B:53:BA:0C:EE:C1:94:46:7E:15:D6:64:99:A6"}}},"request":{"raw":"GET /parse/s.rutor.org/css.css HTTP/1.1\r\nHost: libbb.yotor.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 31 Oct 2025 12:25:31 GMT\r\ncontent-type: text/css\r\ncontent-length: 2055\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Cf-Ipcountry,User-Agent,Cf-Connecting-Ip,Cdn-Loop,Accept-Encoding\r\nlast-modified: Fri, 13 Mar 2015 12:51:21 GMT\r\netag: \"1c0f-5112af50b2440-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fa8%2BhDk0cCAgvA1pse%2F6LWXlaHoWiUWjqBKLGBogyoiuY8S42XQ6WrQZ87Q0tEImakmDHxqijNk0di%2Bm6d0zB3JE8z1jKAMJ2mu%2Bajxe\"}]}\r\ncf-ray: 997322b36f64783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7183,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"212a2bc682ef7adee0a380aefce98638","sha1":"82dd244f1a0decdf011b4775b94c4296ff67c460","sha256":"aa3d36b7b649920bc8419fee4edece4f5801a9fbd828dab2fdf4179935af1b2a","sha512":"420e7341fe5806b7eb909cd4759a092d93b7406f63fd1e52ea2fafc10fcef65d161e159795d821b9b07203cdb75b8b00db27bef5205487a27ef7d372d004744b","ssdeep":"192:n2/21hLTynEWAYJ6jjIuYV0rY1lHI1wiY+6U9ZgI8:ncShinEW96jMu3cHI19SU9mJ","tlshash":"0ce1412367862cc6b14b90adeeb4db10662f1442fe1f5fb9f67a766ce3500d1227624c","first_seen":"2023-05-21T11:00:04Z","last_seen":"2026-03-29T07:13:34.38354Z","times_seen":51,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":212,"dns":180,"connect":1,"send":0,"wait":132,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"counter.yadro.ru/hit?r;s1280*1024*24;uhttps%3A//new-rutor.org/torrent/532554/;hnew-rutor.org%20%3A%3A%20City%20Car%20Driving%20%282016%29%20PC%20%7C%20%u041B%u0438%u0446%u0435%u043D%u0437%u0438%u044F;0.6627211875958631","fqdn":"counter.yadro.ru","domain":"yadro.ru","tld":"ru"},"ip":{"addr":"88.212.202.52","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://new-rutor.org/torrent/532554/","date":"2025-10-31T12:25:32.007Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"counter.yadro.ru","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 27 Oct 2025 01:14:04 GMT","end":"Sun, 25 Jan 2026 01:14:03 GMT"},"fingerprint":{"sha1":"26:0D:18:34:4B:70:9D:BB:9E:A1:27:58:66:D2:59:79:45:C3:23:04","sha256":"99:14:B0:35:A3:83:BA:8C:93:E5:C9:62:0A:F0:40:6F:4A:6D:4F:1E:B6:03:68:9E:C8:FE:C2:10:F6:CC:38:04"}}},"request":{"raw":"GET /hit?r;s1280*1024*24;uhttps%3A//new-rutor.org/torrent/532554/;hnew-rutor.org%20%3A%3A%20City%20Car%20Driving%20%282016%29%20PC%20%7C%20%u041B%u0438%u0446%u0435%u043D%u0437%u0438%u044F;0.6627211875958631 HTTP/1.1\r\nHost: counter.yadro.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.17.9\r\nDate: Fri, 31 Oct 2025 12:25:32 GMT\r\nContent-Type: image/gif\r\nContent-Length: 43\r\nConnection: keep-alive\r\nExpires: Wed, 30 Oct 2024 21:00:00 GMT\r\nPragma: no-cache\r\nCache-control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.17.9","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"fc94fb0c3ed8a8f909dbc7630a0987ff","sha1":"56d45f8a17f5078a20af9962c992ca4678450765","sha256":"2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363","sha512":"c87bf81fd70cf6434ca3a6c05ad6e9bd3f1d96f77dddad8d45ee043b126b2cb07a5cf23b4137b9d8462cd8a9adf2b463ab6de2b38c93db72d2d511ca60e3b57e","ssdeep":"","tlshash":"cb900003cac8c022c2a2c0300a0c03002bbaa8300228030ec0bc30fcec2a3a38c02000","first_seen":"2023-04-05T02:54:04Z","last_seen":"2026-04-04T17:34:59.566722Z","times_seen":65193,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":173,"dns":1,"connect":59,"send":0,"wait":57,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Ubuntu:wght@400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://new-rutor.org/kimjongun/under_desc/","date":"2025-10-31T12:25:32.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 13 Oct 2025 08:38:58 GMT","end":"Mon, 05 Jan 2026 08:38:57 GMT"},"fingerprint":{"sha1":"1E:BD:59:57:1D:85:DE:FA:02:4F:D0:E3:99:CD:8C:9B:62:9E:2A:D4","sha256":"E6:2C:01:FB:2E:B9:ED:F7:DF:AE:35:78:93:C6:BD:6B:FE:43:09:67:54:88:15:D5:34:D6:13:53:F1:93:4A:45"}}},"request":{"raw":"GET /css2?family=Ubuntu:wght@400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://new-rutor.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 31 Oct 2025 12:25:32 GMT\r\ndate: Fri, 31 Oct 2025 12:25:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5997,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ac5969a7054a37de523091bf03e2d63a","sha1":"4012ea54536e8be9a816f6f70a7d59fd3324e033","sha256":"be3de94b9cb159cda140c24a59183a92eae6996646197a5946e40584d352afa6","sha512":"add800a96580bccfeb8b14d8b747d97b916ce5450cabdfeda31dc94175fbf437e53152e657a13712579122d7322ffc5fb989fdee1084d7a55ee3e2ce8e117c63","ssdeep":"96:rOEagbOEakFZUOEaeOEaxVOEafJc+uoOEaxN4OXaVbOXafFZUOXaHOXaNbVOXaCl:Mg8i5xq7eMVDUn5ZKdgWlR66HZ7H","tlshash":"42c1cfa3145b9404ea434cc223cfbf369d8f61956445c5ba6ffe18c8ace6c3a4326b4d","first_seen":"2025-09-06T19:19:18.488671Z","last_seen":"2026-04-04T17:52:33.098313Z","times_seen":421,"resource_available":false,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":1,"connect":17,"send":0,"wait":32,"receive":0,"ssl":159},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
