{"report_id":"5ee5a1fa-b5ff-4cb3-8220-a6768a8867fe","version":6,"status":"done","tags":[],"date":"2026-02-14T12:08:34Z","url":{"schema":"https","addr":"rutorclub.com/","fqdn":"rutorclub.com","domain":"rutorclub.com","tld":"com"},"ip":{"addr":"172.67.181.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rutorclub.com/","fqdn":"rutorclub.com","domain":"rutorclub.com","tld":"com"},"title":"RuTOR - место встречи профессионалов","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rutorclub.com/","fqdn":"rutorclub.com","domain":"rutorclub.com","tld":"com"},"ip":{"addr":"172.67.181.66","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T12:08:34Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rutorclub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"rutorclub.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-14","domain_rank":0,"first_seen":"2026-02-14T12:08:35.579797Z","last_seen":"2026-02-14T12:08:35.579797Z","alert_count":3,"request_count":3,"received_data":42913708,"sent_data":1375,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"XenForo","description":"XenForo is a PHP-based forum hosting program for communities that is designed to be deployed on a remote web server.","website":"https://xenforo.com","common_platform_enumeration":"","icon":"XenForo.png","categories":["Message boards"]}]},{"fqdn":"i.ibb.co","ip":{"addr":"45.43.142.8","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"domain_registered":"2010-07-20","domain_rank":21643,"first_seen":"2018-11-25T10:13:48Z","last_seen":"2026-02-11T12:56:59.079478Z","alert_count":0,"request_count":1,"received_data":113210,"sent_data":437,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rsms.me","ip":{"addr":"172.67.197.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2010-12-05","domain_rank":18742,"first_seen":"2014-10-14T17:46:02Z","last_seen":"2026-02-11T17:22:43.477574Z","alert_count":0,"request_count":5,"received_data":982648,"sent_data":2469,"comment":"","tags":null,"fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rutorclub.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rutorclub.com","domain":"rutorclub.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T11:35:47.5821Z","times_seen":363875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rsms.me/inter/inter.css","fqdn":"rsms.me","domain":"rsms.me","tld":"me"},"ip":{"addr":"172.67.197.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rutorclub.com/","date":"2026-02-14T12:08:11.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rsms.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 10:28:53 GMT","end":"Tue, 05 May 2026 11:25:20 GMT"},"fingerprint":{"sha1":"25:AB:AA:3F:A2:D3:4A:E3:5B:64:0C:60:3C:95:5F:32:D4:8E:85:57","sha256":"39:BC:5A:B1:19:69:9C:91:B5:D2:EC:0D:BE:85:57:BB:CF:19:8A:DA:98:8F:01:4F:B7:56:5B:74:62:80:63:A2"}}},"request":{"raw":"GET /inter/inter.css HTTP/1.1\r\nHost: rsms.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rutorclub.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:08:11 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 1305\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nx-origin-cache: HIT\r\nlast-modified: Sat, 16 Nov 2024 01:00:53 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"6737eec5-2ce9\"\r\nexpires: Fri, 23 Jan 2026 05:12:46 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: 930D:1EA4A0:28134:2FCA9:691E787A\r\naccept-ranges: bytes\r\nvia: 1.1 varnish\r\nage: 28\r\nx-served-by: cache-bma-essb1270062-BMA\r\nx-cache: HIT\r\nx-cache-hits: 2\r\nx-timer: S1765922311.018787,VS0,VE0\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b55651e2452557463b0f552e87c2c7e473e3c768\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BOs2BC%2Fy8ntYLnlO0ECVrDxmPFAa32ROo1DEZc%2BqQQSM90yMl29QQmF8h5MxOkul5r00zLIqVJLRpqOmYUSVQzHYwhqqn%2FA%3D\"}]}\r\ncf-ray: 9cdc73111852b7b2-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":11497,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1454fd08f0a55e5811dddf1d02acc997","sha1":"3e9cb739b9e8b732b556fddafd71c89cbfafa2f5","sha256":"46d01c7807f64a24c1b2853b756ef15f3a2facdf4a9f066eaf5d39c0c9935441","sha512":"e5e91cb83a3c44e893df6bbc1f0f4b2bbef744ef9ae72dd6f3f61588726579f77b6b3439618f0c6c61e2b0a13a058fb83ddf3ba916f0e48c790a457897ef4cb6","ssdeep":"192:AEjyGqj29TSatEr5quxdNsF+r2D2rFaaDOzhEYRtd81oZyEjJczGXyEjJczGpyER:d8j29TSatEr5quxdNsF+r2D2rFaaDOz3","tlshash":"863246506a2f1b0185438db273dbbb12792d593513d94ab13a6e091c8fef93983d0fad","first_seen":"2024-11-16T09:12:47.720666Z","last_seen":"2026-06-08T11:50:40.997542Z","times_seen":10041,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":55,"dns":22,"connect":8,"send":0,"wait":12,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rutorclub.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"rutorclub.com","domain":"rutorclub.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rutorclub.com/","date":"2026-02-14T12:08:13.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rutorclub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:00:52 GMT","end":"Wed, 15 Apr 2026 01:00:48 GMT"},"fingerprint":{"sha1":"EF:3E:15:80:38:12:E3:A8:6D:CE:FE:1F:A8:E3:18:69:B9:50:D9:2D","sha256":"DC:FF:5C:BB:8A:88:41:EC:6D:1F:D2:D7:89:ED:08:2D:76:31:6E:ED:A2:2C:C8:3B:D3:FD:D4:B7:1F:D7:74:58"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: rutorclub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rutorclub.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:08:13 GMT\r\ncontent-type: application/javascript\r\nexpires: Sat, 14 Feb 2026 12:56:13 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOsooZBQbkmERWN8qc6KfsPaUhuk8NsIbQjIOZnM7BOE6jmCIfFBlx%2FANue8MOJMvtZkd6ugRF5TyIbKFeZKTqKJhqWC5Gm6%2FBEQEUo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9cdc731a2d91b7a8-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-08T11:35:47.5821Z","times_seen":363875,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rutorclub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rutorclub.com/DARK.gif","fqdn":"rutorclub.com","domain":"rutorclub.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rutorclub.com/","date":"2026-02-14T12:08:11.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rutorclub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:00:52 GMT","end":"Wed, 15 Apr 2026 01:00:48 GMT"},"fingerprint":{"sha1":"EF:3E:15:80:38:12:E3:A8:6D:CE:FE:1F:A8:E3:18:69:B9:50:D9:2D","sha256":"DC:FF:5C:BB:8A:88:41:EC:6D:1F:D2:D7:89:ED:08:2D:76:31:6E:ED:A2:2C:C8:3B:D3:FD:D4:B7:1F:D7:74:58"}}},"request":{"raw":"GET /DARK.gif HTTP/1.1\r\nHost: rutorclub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rutorclub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 14 Feb 2026 12:08:11 GMT\r\ncontent-type: image/gif\r\ncontent-length: 816490\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 20 Feb 2026 12:34:53 GMT\r\nlast-modified: Wed, 14 Jan 2026 09:55:58 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 84798\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kxlux2vi2J8K9lmoTsvidH5mMIvFkGHYx4h9x7YZ59jHEQzciTuyAMzskLuNWLSvOTHxruuzBcH5blmRCQahlArW%2FDjrJfIMCOdVdfw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc7310ec22b7a8-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":816490,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 320 x 118","md5":"dbf5d90008a57e59a1ff9388f570c482","sha1":"16844d541317e5119ed749d4f27c2227fc470497","sha256":"d95394d00505452216cb99494cf6b259309ae0739ea3913325e0144b75302978","sha512":"7af188a7a880a612984892ce1c256992047bbae339fd50d722c892ba65921a68bc7d49bdb03e44a01d17ad04d157a4b7ea215f7014bd8ef4868d59bfd324a619","ssdeep":"12288:QH/Txf8HtKyeIEQ8t3EZbW6rBSi4kbQxN0QuWY87hWF1Tl7wyioi:QfxKKyeIEQk3ibWwBjYN02Ul0yih","tlshash":"35052393572d89c5781191f090fe5783fc8d0808d146499b3e91bea7bae304a79eb3db","first_seen":"2026-02-14T12:08:39.648131Z","last_seen":"2026-05-09T22:55:54.789294Z","times_seen":2,"resource_available":false,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":444,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rutorclub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.ibb.co/x8fDKdxp/Untitled.png","fqdn":"i.ibb.co","domain":"ibb.co","tld":"co"},"ip":{"addr":"45.43.142.8","port":443,"asn":215751,"as":"Mikhail Fedorov","country":"Israel","country_code":"IL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rutorclub.com/","date":"2026-02-14T12:08:13.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ibb.co","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Tue, 16 Dec 2025 07:17:47 GMT","end":"Mon, 16 Mar 2026 07:17:46 GMT"},"fingerprint":{"sha1":"DD:3D:A5:50:70:7F:39:42:46:31:C9:98:9F:15:65:82:62:1B:CB:64","sha256":"F9:9D:18:4C:82:20:26:63:14:76:0A:30:CD:96:1F:CE:F9:77:EB:76:34:EC:DF:EE:6E:54:50:88:39:05:C5:C2"}}},"request":{"raw":"GET /x8fDKdxp/Untitled.png HTTP/1.1\r\nHost: i.ibb.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rutorclub.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 14 Feb 2026 12:08:13 GMT\r\ncontent-type: image/png\r\ncontent-length: 112846\r\nlast-modified: Tue, 30 Sep 2025 23:51:59 GMT\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000, public\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, OPTIONS\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":112846,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"d861e1b72737fa28d6f469b0ebec8e6c","sha1":"dc8d1eba9288618ce61ab6c82859f69fe2dbad39","sha256":"88978e8c490664168c4d757f882b5e8145e0737e987d97cabe8be4f7b1ec870a","sha512":"469198f90884f7f9b9360b4bccbc1b493c5932e9a1889e1f6a9eb5aaed81ac4d29e98c8e1cd2d6eba2fcfb6e57523f6c200c20806532420fc11bb8a8ea61c488","ssdeep":"3072:KF4HYykpWVoX2J0aH2QCY8eSLjf74lWC6:KyHY5+oX2eE2QCdhv4st","tlshash":"86b3f18b345a71b66945f87f9cc41e413eb3429270e43f927d186a8e344f7b82d628de","first_seen":"2026-02-14T12:08:39.649155Z","last_seen":"2026-02-14T12:08:39.649155Z","times_seen":1,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":127,"dns":1,"connect":22,"send":0,"wait":46,"receive":63,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rsms.me/inter/font-files/InterVariable.woff2?v=4.1","fqdn":"rsms.me","domain":"rsms.me","tld":"me"},"ip":{"addr":"172.67.197.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rutorclub.com/","date":"2026-02-14T12:08:13.336Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rsms.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 10:28:53 GMT","end":"Tue, 05 May 2026 11:25:20 GMT"},"fingerprint":{"sha1":"25:AB:AA:3F:A2:D3:4A:E3:5B:64:0C:60:3C:95:5F:32:D4:8E:85:57","sha256":"39:BC:5A:B1:19:69:9C:91:B5:D2:EC:0D:BE:85:57:BB:CF:19:8A:DA:98:8F:01:4F:B7:56:5B:74:62:80:63:A2"}}},"request":{"raw":"GET /inter/font-files/InterVariable.woff2?v=4.1 HTTP/1.1\r\nHost: rsms.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rutorclub.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rsms.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-length: 352240\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\nx-origin-cache: HIT\r\nlast-modified: Sat, 16 Nov 2024 01:00:53 GMT\r\naccess-control-allow-origin: *\r\netag: \"6737eec5-55ff0\"\r\nexpires: Thu, 12 Feb 2026 04:20:58 GMT\r\ncache-control: max-age=2678400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 36ED:170388:722A6C:7EB097:698D52D2\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 12:08:13 GMT\r\nvia: 1.1 varnish\r\nage: 494\r\nx-served-by: cache-bma-essb1270031-BMA\r\nx-cache: HIT\r\nx-cache-hits: 9\r\nx-timer: S1770986099.471396,VS0,VE0\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 85b7da395cdffff021709e39de6617563c585894\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pambLgwnMhPd%2B4ox7f%2Fix8KDKzATxfgel%2F0VLh6DALNxzzHHHRqGjN%2F5%2BWxi4rYMSW4fCyC8cu08fYwvpFymG8jr3mQ5rgo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc731b9a6dd42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":352240,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 352240, version 4.66","md5":"2bf3d951bf9d6109437ea0874bbf12fb","sha1":"f55b18fdf5a4fbca23e23010fbe89df27d70d1ff","sha256":"693b77d4f32ee9b8bfc995589b5fad5e99adf2832738661f5402f9978429a8e3","sha512":"9c34339e338bc88488195216a834004c3cc2934896df8a5849c26801a88c7a4c4d84563d9cdae449d81bb379549f69f57c5fb9b199826adb8a88c3eb7d22bac1","ssdeep":"6144:NXxnNQ1mzp/C4K2K9y0deanlT3TPkHW644MVz66Z2YS78Eq/H493abRLF/VBoGuB:RxnNXpq4XF0tTPk2jzRkYS8/GabjC+a","tlshash":"fc742337370464501452c3aca8a70a57e6302de69fda07ecc7ae84e8899ca797f1f74d","first_seen":"2024-11-16T09:12:47.72962Z","last_seen":"2026-06-08T11:23:30.022765Z","times_seen":12700,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":37,"dns":4,"connect":0,"send":0,"wait":21,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rsms.me/inter/font-files/InterVariable-Italic.woff2?v=4.1","fqdn":"rsms.me","domain":"rsms.me","tld":"me"},"ip":{"addr":"172.67.197.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rutorclub.com/","date":"2026-02-14T12:08:14.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rsms.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 10:28:53 GMT","end":"Tue, 05 May 2026 11:25:20 GMT"},"fingerprint":{"sha1":"25:AB:AA:3F:A2:D3:4A:E3:5B:64:0C:60:3C:95:5F:32:D4:8E:85:57","sha256":"39:BC:5A:B1:19:69:9C:91:B5:D2:EC:0D:BE:85:57:BB:CF:19:8A:DA:98:8F:01:4F:B7:56:5B:74:62:80:63:A2"}}},"request":{"raw":"GET /inter/font-files/InterVariable-Italic.woff2?v=4.1 HTTP/1.1\r\nHost: rsms.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rutorclub.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rsms.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-length: 387976\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\nx-origin-cache: HIT\r\nlast-modified: Sat, 16 Nov 2024 01:00:53 GMT\r\naccess-control-allow-origin: *\r\netag: \"6737eec5-5eb88\"\r\nexpires: Sat, 14 Feb 2026 01:57:22 GMT\r\ncache-control: max-age=2678400\r\nx-proxy-cache: MISS\r\nx-github-request-id: F601:3DD3:F03A8:10ACA3:696AEBDB\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 12:08:18 GMT\r\nvia: 1.1 varnish\r\nage: 346\r\nx-served-by: cache-bma-essb1270047-BMA\r\nx-cache: HIT\r\nx-cache-hits: 4\r\nx-timer: S1770986099.470804,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: a4e942433c63b629244f1b9eb9834b1a9246ad04\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SV6kKQ2Xzs4ocbD7HPhb77co0bbTQCkGtDe28Dw0ojNZQAuI%2BKq1dh%2FL2uHAWTA%2FPAXP8CdXbKFTcM%2BDZz85MyXusfNahmY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc7339bf63d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":387976,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 387976, version 4.66","md5":"8d1dc86da25893737b6bb8a9c64b790e","sha1":"a5f0513ed76cdf4a4e1a924949b6a85a6e9333ca","sha256":"e564f652916db6c139570fefb9524a77c4d48f30c92928de9db19b6b5c7a262a","sha512":"480bb8f9147ebaf6055283da1eca9476c16686267437dda615784d8dda99aa91e1194db8b03bcf47433125ecd97ccb80775c0b2aa6e6ad74a2b9841fa5024c95","ssdeep":"6144:pmp5fugCk+k5z4OQ6uiNpmFsXNf+hBl4uWiBOni0vHTp8ErxJP7GPYE:Mp5fMkuXuNgFk+DRWjR/mErLP3E","tlshash":"2f8423d0ec061239ec06a0ef7158dbfed3e6a19437ef64a9416320d66264ec8d634f9d","first_seen":"2024-12-15T20:11:38.676943Z","last_seen":"2026-06-08T09:48:58.84168Z","times_seen":678,"resource_available":false,"data":null}},"time_used":4009,"timings":{"blocked":3952,"dns":0,"connect":0,"send":0,"wait":32,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rsms.me/inter/font-files/Inter-Medium.woff2?v=4.1","fqdn":"rsms.me","domain":"rsms.me","tld":"me"},"ip":{"addr":"172.67.197.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rutorclub.com/","date":"2026-02-14T12:08:14.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rsms.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 10:28:53 GMT","end":"Tue, 05 May 2026 11:25:20 GMT"},"fingerprint":{"sha1":"25:AB:AA:3F:A2:D3:4A:E3:5B:64:0C:60:3C:95:5F:32:D4:8E:85:57","sha256":"39:BC:5A:B1:19:69:9C:91:B5:D2:EC:0D:BE:85:57:BB:CF:19:8A:DA:98:8F:01:4F:B7:56:5B:74:62:80:63:A2"}}},"request":{"raw":"GET /inter/font-files/Inter-Medium.woff2?v=4.1 HTTP/1.1\r\nHost: rsms.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rutorclub.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rsms.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-length: 114348\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\nx-origin-cache: HIT\r\nlast-modified: Sat, 16 Nov 2024 01:00:53 GMT\r\naccess-control-allow-origin: *\r\netag: \"6737eec5-1beac\"\r\nexpires: Thu, 29 Jan 2026 01:13:26 GMT\r\ncache-control: max-age=2678400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 7C6E:119628:54A12:5EA0A:697AB1DE\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Sat, 14 Feb 2026 12:08:18 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270048-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1770986099.471279,VS0,VE104\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 5b6112dac460f61dd06e9f7f09fd2aca5538df6b\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NApgoVwEP34xFUxM1%2BrOHBZvKEA%2B2Opw0Gk4l0g%2BOdrCs8QegWdcGr%2Fz8Ab0NlLc9unM4weHuVZxyidAUap6mxegk16NluU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc7339bf62d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":114348,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 114348, version 4.66","md5":"7b7f3cfa2944edbd2fcbb478547b22bd","sha1":"d502bb1b3f812f62ce68e2b93cf6d2a5b9bc7120","sha256":"0ff3e94614e1493eb556314fd247ae6c4a85a7783b4cc86be539940cf83f2a48","sha512":"dbc1ef0befc435b74d83ed20a7dd23fe323864bcb3a3f1134df25261df106645e10ab7cd78ad79008b02d320e5fa32b8acc83aeaecc97653596cc351a3dea65d","ssdeep":"1536:ORj4CTzwujWVxFlkG6ASwCsNBzLFwyOj/XapvyNChItjTKbXap/08PfitCLKFQT7:Op4CTjvASob3OjfaFycqJJPf/MQTHa0d","tlshash":"e5b3128e3e693f57cbdca3a0ba1766b194e7c277a8cd02b138245ff805be5548b14705","first_seen":"2024-11-19T20:50:46.187707Z","last_seen":"2026-06-08T11:39:41.747201Z","times_seen":47575,"resource_available":false,"data":null}},"time_used":4075,"timings":{"blocked":3951,"dns":0,"connect":0,"send":0,"wait":122,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rsms.me/inter/font-files/Inter-Regular.woff2?v=4.1","fqdn":"rsms.me","domain":"rsms.me","tld":"me"},"ip":{"addr":"172.67.197.50","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rutorclub.com/","date":"2026-02-14T12:08:14.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rsms.me","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 10:28:53 GMT","end":"Tue, 05 May 2026 11:25:20 GMT"},"fingerprint":{"sha1":"25:AB:AA:3F:A2:D3:4A:E3:5B:64:0C:60:3C:95:5F:32:D4:8E:85:57","sha256":"39:BC:5A:B1:19:69:9C:91:B5:D2:EC:0D:BE:85:57:BB:CF:19:8A:DA:98:8F:01:4F:B7:56:5B:74:62:80:63:A2"}}},"request":{"raw":"GET /inter/font-files/Inter-Regular.woff2?v=4.1 HTTP/1.1\r\nHost: rsms.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rutorclub.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rsms.me/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\npriority: u=4,i=?0\r\ncontent-length: 111268\r\nserver: cloudflare\r\ncontent-type: font/woff2\r\nx-origin-cache: HIT\r\nlast-modified: Sat, 16 Nov 2024 01:00:53 GMT\r\naccess-control-allow-origin: *\r\netag: \"6737eec5-1b2a4\"\r\nexpires: Thu, 12 Feb 2026 05:02:21 GMT\r\ncache-control: max-age=2678400\r\nx-proxy-cache: MISS\r\nx-github-request-id: 9C4D:2BF397:733C30:7FD368:698D5C85\r\naccept-ranges: bytes\r\ndate: Sat, 14 Feb 2026 12:08:18 GMT\r\nvia: 1.1 varnish\r\nage: 547\r\nx-served-by: cache-bma-essb1270023-BMA\r\nx-cache: HIT\r\nx-cache-hits: 11\r\nx-timer: S1770986099.471547,VS0,VE1\r\nvary: Accept-Encoding\r\nx-fastly-request-id: 6d2eb81e8d8d2909eddb574d9cde10973c639391\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FA7J553ZrxfbjL%2FXPgAj8XU58QaW9xxFbpqsj6H4HXN3ocSpEbwlx7WeganxshRZSqx61mzNPt9oxHwKJwRh%2BI18%2FcSB%2Bi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cdc7339bf64d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":111268,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 111268, version 4.66","md5":"3875f83574973c732136a45f628e64a6","sha1":"b7a0b6fbebc40eb29b76cf135c4b7be50b981b4b","sha256":"e06f6b1bc553aaea4e4668023ed0ab0a147129c3107f511bc7d03d361b0ae085","sha512":"c4d06c4d73f83f3bc150ec5c3fc792af04161ec98c298a526b717b09e0f10597c688ea1827c1b54324b809cccd7c8a51e637eb822f192744f16556d0fd5b2efb","ssdeep":"3072:oSVIcbST1rITm6KORAGB/6lp7l8MBrVAPg:oSVIcEwm6xlB/6lp7lzBJ/","tlshash":"2ab312cd46ab0e22c7db93b491ea634d5ab188f8e3b630358993ff31155093723e615d","first_seen":"2024-11-19T20:50:46.185622Z","last_seen":"2026-06-08T11:39:41.761049Z","times_seen":50410,"resource_available":false,"data":null}},"time_used":3981,"timings":{"blocked":3949,"dns":0,"connect":0,"send":0,"wait":18,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rutorclub.com/","fqdn":"rutorclub.com","domain":"rutorclub.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T12:08:11.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rutorclub.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 15 Jan 2026 00:00:52 GMT","end":"Wed, 15 Apr 2026 01:00:48 GMT"},"fingerprint":{"sha1":"EF:3E:15:80:38:12:E3:A8:6D:CE:FE:1F:A8:E3:18:69:B9:50:D9:2D","sha256":"DC:FF:5C:BB:8A:88:41:EC:6D:1F:D2:D7:89:ED:08:2D:76:31:6E:ED:A2:2C:C8:3B:D3:FD:D4:B7:1F:D7:74:58"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rutorclub.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 12:08:11 GMT\r\ncontent-type: text/html\r\nlast-modified: Wed, 14 Jan 2026 10:03:37 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=He41PFMGBtrF2DLUHNEtc%2B08MU00dE3UM9eyKUw%2FBpahH%2BzL5iuSDV9eBU1TKknzN8HeuUrDGASh%2BNCs1bbXPFhBAYX1NxLTe6NV%2B6c%3D\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cdc730e5e5f4651-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"XenForo","description":"XenForo is a PHP-based forum hosting program for communities that is designed to be deployed on a remote web server.","website":"https://xenforo.com","common_platform_enumeration":"","icon":"XenForo.png","categories":["Message boards"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":42094023,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (65137), with CRLF line terminators","md5":"7f5fa49329d77021b81adcad93ebb236","sha1":"9a976815c9fa9413e20e78677b858ba6a3b74392","sha256":"9d25ce62577cb95d65ec4f0817d050ce5e5ae0a086decefa514e7ac47bfc9e48","sha512":"e18a3d22add3d82c4ef6c3c8700393809cdf52f68d6aadd45725f78dd7f827aa98afbc2cfa6bd983cd24d67d2a98d41b51e7379ed4779bc59cf7ec8701dd5056","ssdeep":"12288:qisOREP197+tS5HKXL6rGxc+TOzbCKbAMou/7uJLEL4JdwknAOkcFZldwzg6F/n3:qiUdRE+rGxfXWroxVa4JnlkKYupwiI","tlshash":"46254c73a1c9ae6f632a69de190071366c60ab578483e90500633747e9deff41cdeb9c","first_seen":"2026-02-14T12:08:39.653234Z","last_seen":"2026-02-14T12:08:39.653234Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":56,"dns":28,"connect":8,"send":0,"wait":126,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"rutorclub.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
