{"report_id":"83ad9f67-6469-4c0f-a32f-03384d295411","version":6,"status":"done","tags":[],"date":"2025-10-14T19:13:02Z","url":{"schema":"http","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"title":"Международный торрент-трекер Rustorka | Русторь до последнего!"},"submit":{"url":{"schema":"http","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-18T19:13:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-12T22:16:17.945241Z","alert_count":0,"request_count":1,"received_data":266778,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2025-10-12T22:13:55.789176Z","alert_count":0,"request_count":1,"received_data":20344,"sent_data":502,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"rustorka.com","ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-01-20","domain_rank":196462,"first_seen":"2012-05-23T20:10:55Z","last_seen":"2025-09-05T19:25:17.593523Z","alert_count":26,"request_count":26,"received_data":352248,"sent_data":14346,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"phpBB","description":"phpBB is a free open-source Internet forum package in the PHP scripting language.","website":"https://phpbb.com","common_platform_enumeration":"cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*","icon":"phpBB.png","categories":["Message boards"]}]},{"fqdn":"videoroll.net","ip":{"addr":"82.202.165.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"domain_registered":"2015-03-31","domain_rank":150386,"first_seen":"2015-11-17T06:44:09Z","last_seen":"2025-10-08T17:34:58.795433Z","alert_count":0,"request_count":2,"received_data":52582,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"aj1907.online","ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-06-26","domain_rank":53866,"first_seen":"2019-07-07T10:05:24Z","last_seen":"2025-09-05T19:25:18.095698Z","alert_count":0,"request_count":6,"received_data":82572,"sent_data":4943,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.tel1mekar.com","ip":{"addr":"193.200.65.30","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-03-25","domain_rank":2760618,"first_seen":"2025-05-24T17:53:47.026991Z","last_seen":"2025-10-14T12:52:07.840562Z","alert_count":0,"request_count":1,"received_data":17849,"sent_data":519,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"content.adriver.ru","ip":{"addr":"23.111.96.52","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-29","domain_rank":178190,"first_seen":"2012-06-21T23:25:17Z","last_seen":"2025-10-14T18:19:51.821307Z","alert_count":0,"request_count":1,"received_data":48356,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ev.adriver.ru","ip":{"addr":"195.209.109.26","port":443,"asn":52007,"as":"LLC AdRiver","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-29","domain_rank":184823,"first_seen":"2023-01-27T11:00:35Z","last_seen":"2025-10-13T23:49:11.038362Z","alert_count":0,"request_count":2,"received_data":420,"sent_data":1145,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mc.yandex.ru","ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":16498,"first_seen":"2012-05-21T09:38:30Z","last_seen":"2025-10-14T07:51:11.069028Z","alert_count":0,"request_count":6,"received_data":7689,"sent_data":8312,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"counter.yadro.ru","ip":{"addr":"88.212.201.204","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"domain_registered":"2000-12-19","domain_rank":65087,"first_seen":"2014-09-09T18:41:17Z","last_seen":"2025-10-09T22:47:06.941919Z","alert_count":0,"request_count":1,"received_data":556,"sent_data":876,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.17.9","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ad.adriver.ru","ip":{"addr":"195.209.109.16","port":443,"asn":52007,"as":"LLC AdRiver","country":"Russia","country_code":"RU"},"domain_registered":"2000-11-29","domain_rank":83767,"first_seen":"2012-08-31T17:10:27Z","last_seen":"2025-10-14T05:38:12.866562Z","alert_count":0,"request_count":2,"received_data":2140,"sent_data":1324,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"51fff6e3fe7558316a4f52dd94da349d","sha1":"0b2d7604219d1ddfa8f69cab653cf958bc974bd1","sha256":"56f7c8b5df789b7f96e988111a220410e3078a7a632da05f52e84f2144b75944","sha512":"28b588fc5cce24b46d0312f990cf2904be10be49da066e82d654cdbc93f25433ba4cac631e291c8da00e8f553bb83057a8500f111244f78d87f98e6d6de593ff","ssdeep":"96:RU1U6teOIigsZA+pco0WXXGiyxjln4yIMBAE9N:ROIPs++pcDiyxjzn","tlshash":"8af121343d0121369aaadba1b57797cdb37b54112647e456f07d08a03c20ee64a3bfbd","size":7533,"data":"","first_seen":"2025-05-15T14:56:35.393161Z","last_seen":"2026-01-19T17:41:34.853634Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"790f13863f3771a43bc9dcae9cd08e37","sha1":"1f3e4f6008270b3617a89f1e66945637d05f2d86","sha256":"2d410dfed5bcdb303ab6acb1e4b01700ef985c05897b092c82d4f62206fc5a21","sha512":"f2bf932d5bf5a164e2d0935072ea48413389b3585943991e48d10243fa0ad599eaeeb6c630cdede2f24c8f4ffd35082d90078641a72af8a2a58894d14ec3e90c","ssdeep":"","tlshash":"3f4151e4f857705687e6b097303f4519a93daae3e00a9674a14c8ce42e397a60533fce","size":1927,"data":"","first_seen":"2023-03-10T02:50:40Z","last_seen":"2026-04-30T22:13:00.763322Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/jquery.pack.js?v=2","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"68b82e48569e23e76ef073f2be2b4b82","sha1":"34ee44c208c769a514fbb1cc52740c1884b77134","sha256":"1c54dde49999f9366ece05f6f3cfe5ec3cbceb7fe2be02f6a188f4db758a6a51","sha512":"644d4a487e891ef6664a50cb92fd634d6c17dd60b41df777ff844f98ec1f12a9a81704dc6160b0f0a37a200174c51590871d0af6a273fd0e20ac0863c0ab7e71","ssdeep":"1536:dqPSu6aXlmaGWfiI7elzk3JqfuoN3b9TV67+xjZYpCrFSnPj7wtQBxA4m9YOmtdJ:ddFKlVeW3gxFSnwtMxA4m9qjGwgPy","tlshash":"87a329d9b2c3317383e770b854af020bb17a68a6654c4860f06cd8e5adb4e8554bbf7d","size":104311,"data":"","first_seen":"2025-05-15T14:56:35.269735Z","last_seen":"2026-01-19T17:41:34.813944Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d1c991e5cd6cee6ddf075677eb71d48f","sha1":"d39b2ee2140884b0e3fef04b704fef0cbce316f4","sha256":"7faa128570cc4d31d2c940bcea4b6f5d799cc415ecf4f52006c72937db943484","sha512":"f8d213110341290db20951f9568e2bf12fe2e446700ac8b03395aa6aada76f4cf9569e4a2d93b5cd9ec307b8653c9f7c0af27a304f877afbed16d1126044292a","ssdeep":"","tlshash":"10e06134f67d111607b750ec1c37e4091a5af547211e1620b3dd91809f0c72511c3594","size":373,"data":"","first_seen":"2025-05-15T14:56:35.333798Z","last_seen":"2026-01-19T17:41:34.828166Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c6db27eba4c29830dd993fce4f267086","sha1":"71063530717e0196bbb66324bd573e0b93172a44","sha256":"ccc7622bf476df90b35b6f958742f01b4e9d9cc7c8637a6781102ed2b72abd09","sha512":"67c1128cfcee0a961641921bf199dee642918c7ce0643bdeee5293934a5695abb47f750f8e6b4cdf368ab4a2d52b41d603a692486890066ecf195d254d8c9158","ssdeep":"","tlshash":"ff01fe4cf2cc1551486fb4257d4f8214bce220131902e46eb64cd7f44b89d5f84b0f4a","size":669,"data":"","first_seen":"2025-06-03T10:01:25.424308Z","last_seen":"2026-01-19T17:41:34.828784Z","times_seen":24,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/ifixx.js","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c14a616e4c89b6c3b4e5f3efd5ac8f92","sha1":"4164d628bd62e13ecda16326440c2f7075bf0e8e","sha256":"5d1fd7dc51264dc6b06e92aaa22135d32419f9cb8227c0935f1a0413cbfdff53","sha512":"a1dc9622356f9b5368c66efbc0cecdbe6f847fbefcefaa9fe1d92273146790d0990ffab74753fc089b5cd1ff1aec8c01bcf894ade3d46aab8371c1a5a831223f","ssdeep":"","tlshash":"be51ad145f51189a2505713bee0c290979ee84bf3b5b8367345c2abe3fe2031863d76d","size":2768,"data":"","first_seen":"2025-05-15T14:56:35.340383Z","last_seen":"2026-01-19T17:41:34.849479Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/main.js?v=2","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fcc3b54b6553faa20a2d854c76590a7c","sha1":"51cf6b59113ebf9b508aa20694b577774dea9492","sha256":"5ce8ee1eb5a08e6e2a25b0cac45c183c67466bb57bf0f2a542517b1018f096f3","sha512":"db3dc3e3317267cbb26bca7ca55045e46792471128f4d6c818036022cd72cf2f313615ce47e8a5332c685edadcdbe3f7081765b94fd05ef3ed4b529f61b59d3a","ssdeep":"384:0Wl+jSX779zVHjcOIDyRtPsPo1OJ1lwKjDtZSgCRcZ4nxFTBr2:x779zVHjcOIm7PsPYO1FntZSgCOZ4nPI","tlshash":"d4b2e719f388797745a731a9189f00ce73359442b600bc7eb82dc5e42bacd6985b3f7a","size":24883,"data":"","first_seen":"2025-05-15T14:56:35.257355Z","last_seen":"2026-01-19T17:41:34.798805Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"60bdfb9f9af2e17a5d4b07b2806b7589","sha1":"34a568b388fb2a123545d9fb774958e9efeec3cc","sha256":"179646c6d597a68b2f6925c5e483cddd36bdb5c6b611f62861a877e96d27d64e","sha512":"7167b8f84739fae317e3b7c756a6d60761e02beb0582ebdb573c9b9f917a0dbee68f726e456ff5266523cb31209e88aefd0197f8c1135e8c9524c442182e9c4a","ssdeep":"","tlshash":"a9e02bd93fb9db585d0600cab6a3d378aca4b41b6454c708f59ce64d9f00f25440fead","size":410,"data":"","first_seen":"2025-06-19T17:10:08.503883Z","last_seen":"2025-11-01T20:27:47.729756Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ddf47d632ab4b8ae234533fc86d9f5d6","sha1":"c5553e85138d9c2a9eae411c8d0f72a907e72eb9","sha256":"f7b2ce07cc765dfa80aea58b693a58158e1c130ef33c7d4b3fd98ef1483a3a89","sha512":"6b62d6582506d9a9dfc1d865e8216f9c8424659a49eb260fbdb2a753f52e74efb98cdfe01563bc3ee25d856819c7f5f20666059d425c4d7a22b6fed3afabe261","ssdeep":"","tlshash":"d2a00244755514d1184db0537494ddf14955466141d104270d6475d6631f9508993d55","size":80,"data":"","first_seen":"2025-10-14T19:13:07.494377Z","last_seen":"2025-10-16T17:51:23.097582Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc6ec7769bf3097669d6bfca7e528e69","sha1":"599c7861f5fb06a3db41cf09d4eee08c84dad854","sha256":"6acb16c41963f237f77a5fcb8a1403a238a076826ce80c163fc2f0407fde32fb","sha512":"51ffa167cfb32be1252a11881989cbaf2001432271f647f07f8a900e3caea7bfee82d7b50f8799f6e078b2c7303fe48a8f6e8a0e7531c5cde59b5b8d517bfe5e","ssdeep":"3072:qS/erQP6UJTutGN6+rSoUa3HoNLuJAjQh7j53EIbl3rD9Q9EiRi4rlJP4:qS2rQS4i4N6WSIo95jOyylbDhiRTr34","tlshash":"cb44d6dd76827476937334b4902f000f71beaca6f14c8955e186e9d93e789a89237f2c","size":265671,"data":"","first_seen":"2025-10-13T20:58:13.113782Z","last_seen":"2025-10-21T00:20:41.773134Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"36df4256a76aa001ae3a81956d647d40","sha1":"4afe07c0cc921ed57ea6d8e1904fb1f740ecc8cb","sha256":"bc2ecab24d302ca8c910e31f5e8329f6f6d23556483cbd04196ff2aa6e9be2f4","sha512":"a2031b6a4d8497ac2743ca210ae52630aa0062dc7417e8369e3f7d46f463a6c8a060e6467b5bdd37bdb09c581f59251bf0923b8d99825527a42a2aeb0d23ec1f","ssdeep":"","tlshash":"d08000c83f00ae0222b80b00222aba0aa0a8803ce8c2b0c0a0a0020020a0aabfc800c0","size":29,"data":"","first_seen":"2025-10-14T19:13:07.553839Z","last_seen":"2025-10-14T19:13:07.553839Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"8413fc0816ddde4db6bfa62fdfade64e","sha1":"f3eb5076c7f88bd3cc986e26722362842bb67b47","sha256":"a9724514e4bade5b9cedf46256b627096759f7a48f0d30b45da08f09c795d38f","sha512":"d5108349aa12d3eef76f30a1bc63d5726cd15573239455fd5b8ac5ed617bd9dd6a66c2ed263be80444ac9bfa26e970c9ad665565a0402d65cc97c8a1ae24c1ad","ssdeep":"","tlshash":"fc700002a008032000a3b2322f2002020200280022082022a00ba08000ea0088028020","size":24,"data":"","first_seen":"2025-05-15T14:56:35.332015Z","last_seen":"2026-01-19T17:41:34.827494Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"afcfd1d2e42228f12942352642d9c98b","sha1":"1aee4caddb997729139c38162cf6192c3bb36e09","sha256":"1f670026768ad50d195f761b32a9855c052d6e70f42abb717f709d66acca7018","sha512":"669e75da147d9dc64204de4143a99c162e99e84f28d201ac60a55b2c4413dcd168293d8752163a13698741a0dab385efc2b27007ad7df941956b8b3b023aa9b0","ssdeep":"192:xKIoTrhoTDKX7LoW7soQdcej3T3fK+T8ci:xKIo2Tm7L0oQWejjTTZi","tlshash":"70e138d8d7aa884f7acc3803e6346d4e60605a56eb48e3778e3cb5c7e584256c2c9bc5","size":6878,"data":"","first_seen":"2025-05-15T14:56:35.345892Z","last_seen":"2026-01-19T17:41:34.837272Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"29f527e69e41f321de5d2144ffa8adfc","sha1":"de0af8397b69eff9ad209c1cfae9164719ad7f80","sha256":"500d2d859b3043cc6d161221b827fd015a845ff993ac0af75e6e3d53c7f88684","sha512":"2baa05d57abc06591e9791505070ed9d01b44541e192a081498e8fdb8285edcdfe561fcf84b5be0e73784cd6cde39096fe59e40eb5d3f020143ed46b611b26f7","ssdeep":"","tlshash":"9be0c612a8bea08f1030a540fbc0008ffc3770faf292cf01439c29582ac7636ea02003","size":325,"data":"","first_seen":"2025-05-15T14:56:35.347867Z","last_seen":"2026-01-19T17:41:34.839648Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tel1mekar.com/n7sG7dUpgEk5I/SsW1ysttitOScy0GrRINSpt?p_id=2018\u0026hold=1.00\u0026subid_4=sitescript\u0026dtv=2\u0026https_only=1\u0026subid_5=rustorka.com","fqdn":"cdn.tel1mekar.com","domain":"tel1mekar.com","tld":"com"},"ip":{"addr":"193.200.65.30","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"250797a3d0200ff4ba03cafbcc780f89","sha1":"ee8d1e5ef88f9b13e041e19cea1d8c0e8225d34f","sha256":"6ec401683c6c84791ca443e54f2ca788805c53eab71bb00b6793ba376316c648","sha512":"1268cb442044e7899e245bd6f4e6378b3966ceec568ff3f85d5ee4ce44c16bd40bc61db567c46c05225c58aba89412b9a961da25175a84feb47cafcc1db35a9c","ssdeep":"384:Hi2sMEEi1XBKUf8Pa76ArROCCkaJJp4zhu4LmhCUqbW:Hi2HiBBK0fWkRO5FQUJ","tlshash":"ee72e8197760603413d251a7e7339b88bb33602eb943013cfac89de6ae5af556267f34","size":17503,"data":"","first_seen":"2025-10-14T19:13:07.110802Z","last_seen":"2025-10-14T19:13:07.110802Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","size":19948,"data":"","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-03T16:28:23.364852Z","times_seen":334655,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"71a9c46efc6ff61636733bd82ca47bcb","sha1":"d5d13dada6301e42ee661411ebd043c9e0265d9d","sha256":"747f85a9ac2010392f1af8c2847700cc9a1a7aee272e734b92dbfcc7e83cfac7","sha512":"334cc4d537d2d4cbb8d146c641df48f1268aeeb060a5435ea2bb850c3c5d1724aabeadb07196926befbce362909d6c07ea0a5a0d7da33e67538deb136247fe22","ssdeep":"192:M9anCCAlS7R2JKu3gGRjYsVwVR2E/dU9piDt0zJhiqYb2wLK6H7:gGREqGREbRl/mHiDGCqYbrLK6b","tlshash":"a312b542739c3db781d528b8c06f0616b8206ee3a504c434be7af4832db5a98577bf6c","size":9564,"data":"","first_seen":"2023-03-07T14:34:42Z","last_seen":"2026-05-02T21:57:28.179754Z","times_seen":87,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"46c888b8ec74b286eeff979670d9bc52","sha1":"d7a8fffc38296e9abd37198014b56505d9afc3f0","sha256":"53d9b8e9f3b8d9dca908bb2c5aee1d29ecd9d93729c3c9c9d8b40ee1d9107b0c","sha512":"8e503415b7ae7ba7b0deca0c4b2b5debc9e490ed8a52a74d8a6d185f45b4d681be858460a678b2a8f26eef6da299999faf945d0b8d6667dac92f28e8bdf2b14f","ssdeep":"","tlshash":"de9004045135cc1c415517411c71d570dc1550c71075501c413d7cff0131407c4dd511","size":39,"data":"","first_seen":"2023-03-13T12:29:10Z","last_seen":"2026-01-19T17:41:34.841629Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videoroll.net/js/vid_vpaut_script.js","fqdn":"videoroll.net","domain":"videoroll.net","tld":"net"},"ip":{"addr":"82.202.165.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d085c5b5053b7d9887743394536eca86","sha1":"395b1e6eafc75f29bd5272dcfa17d59489378197","sha256":"9b0b2c4bd6c49fe9fbc6de4b5c29c1fb2a607a25ee1c9a6c833500865b35de4d","sha512":"2e3e5b3674249a6c992ecc1e90951d33f09654e85f288dac8085f71ccc155378f125f59424cdb420ce41a34cb4dccaca836e17d89174d86965776055b39740e0","ssdeep":"768:iW8PfZuultWfXsbWCpZWiOers+Qmy3LzK:iW8PfZuultWfwWCpZWiOers+Qmy3LzK","tlshash":"9433852b6a1404374efa673f6b3b514cf9324527434286183c5da5842f78fa4b5b2fe9","size":52124,"data":"","first_seen":"2025-10-13T21:12:59.412077Z","last_seen":"2025-10-30T14:09:56.818601Z","times_seen":132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"91d2ac85abe4be414f604c99c6cdf19c","sha1":"13d70b9298230ee8f32ae0834987321522c64a37","sha256":"ebc233ebcc5b688200c208046691496379e128fe078db9bcad0bf0f357d8b872","sha512":"abe1c657c5c84936bbad3e8b1ca40c902c9759ba553fcd83c6b114bc2235d5d308c31d27f1ba2c40a45ea72b6ed072236d87ca7e3b21d7e0cb053760d31dcba3","ssdeep":"","tlshash":"f9f0c0943cec44259372006a27fba148b87a613a1c0aee95ba5dc4822f99dfd14bf48c","size":558,"data":"","first_seen":"2025-03-03T14:53:00.539866Z","last_seen":"2026-01-19T17:41:34.842493Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7630a65fa2c2557b3339203c35f59aa2","sha1":"b8e93d168aabe6796a84842a9c4b4bb37fcc74ac","sha256":"e66ccac8f3e8638774df829e1eb47ae1c59b6db132b46445b9a81f2ca040e229","sha512":"f09b72225cf1d398e8f305fbe55e705e6c8a857165847cbdf59f55a064c549a1a59e568bf2a24e049b39122167b869d7153e9d2744d8e9e0e6e56f061bb2d248","ssdeep":"","tlshash":"f1f020c2de3647bf0d90c40020ee2ba18bd44074cb17a310eba550413949169ba42f10","size":542,"data":"","first_seen":"2025-10-14T19:13:07.849487Z","last_seen":"2025-10-14T19:13:07.849487Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj1907.online/63c0d7d8.js","fqdn":"aj1907.online","domain":"aj1907.online","tld":"online"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"079ae4ea3144430e1ae1f40e01c82820","sha1":"c6166c6f3b04621d55912e502585cb19a220a452","sha256":"f1f0c72555ab2f97bafae8c19caf7f9fcf702a0a238aed1ae2478cf7856b9e59","sha512":"3c177d08621374a81662f11cae37c985a177b9bca6664020e61cb08cb81e641a6cb729a08f290eb2a1facce75b539a308dbf3fa32da8a6f28ea0c2463bd38e15","ssdeep":"768:GDCupNFfmasutoHgigJQPu8L2UcJfxxDY1n:TupyasutoAirPiRYZ","tlshash":"980308d8baa1702993ea04f5817f810bb27648769d0cc0a4e225d9e53d749ac737bf3d","size":37982,"data":"","first_seen":"2025-10-14T19:13:06.790664Z","last_seen":"2025-10-14T19:13:06.790664Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"content.adriver.ru/AdRiverFPS.js","fqdn":"content.adriver.ru","domain":"adriver.ru","tld":"ru"},"ip":{"addr":"23.111.96.52","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"b83ab13c197ab4f2b4074cc1d66510ee","sha1":"7cde8ec6af3f0f7034b46ea15640feeece47ff81","sha256":"f009b170005e802470a907b2ae0a0f527e7c324cac0f71acde01ad822b3cf3a1","sha512":"bd04c2c7011de70865ac21ada0f6e4c4b2720ae7339676c7d31a62d5d04c54708460c8c50135fb6c6c89ba9f66dc4861dec7f585ea03d56f3e3aede5d16c9d0c","ssdeep":"768:z/CnCKsCWC2b/27nPJGwPBxeAalQCR1xVHg6XHcvCo1sSDOzpmqA+0J48CEEJvmL:zMCR/27P4+tk46MvN1rDp+0Jis","tlshash":"3d23a6c9f392b03553e3b075543f210bf23a7915649a8440f96ad9d1bc78a8ea233f79","size":47986,"data":"","first_seen":"2025-10-06T21:14:00.155751Z","last_seen":"2025-10-14T21:01:47.34071Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.adriver.ru/cgi-bin/rle.cgi?sid=1\u0026ad=780801\u0026bt=21\u0026pid=3915086\u0026bid=10043329\u0026bn=10043329\u0026rnd=527366301\u0026tuid=1\u0026cfa=1","fqdn":"ad.adriver.ru","domain":"adriver.ru","tld":"ru"},"ip":{"addr":"195.209.109.16","port":443,"asn":52007,"as":"LLC AdRiver","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":true,"md5":"756ecdece9eaa9aa3bb6762325813b56","sha1":"bcac1deb6a68049d0402b607afcf30afd21c4805","sha256":"191ee3bdfb5761979514688690539b9dfe0dea48b4067faecf8b48faf6a7c6e3","sha512":"38fe4bbb41cfeeb18214e3226a5f1820907453f021d5f3c7513ae4cdba10a1683165b774167ceb7bfc9f158abc8fcc06b6e5cf4ecdd92e0e32e3446941f4e4c2","ssdeep":"","tlshash":"6ca0120ed23e04c842b5c1023d113448b451400100018401f50e10566f601d74141750","size":82,"data":"","first_seen":"2025-10-14T19:13:07.871122Z","last_seen":"2025-10-14T19:13:07.871122Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/ct1.jquery.js?v=2","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e2993c0ef713c1a894efb9e4f174954b","sha1":"31840d521b2e05b3d6cf10ad66305c4b97431995","sha256":"3e1c1b7cc2b999e1341034981e6ca31e4e92dfa8e3461e048bd60dcadb004443","sha512":"6bfb0b15d8565d91b938e9188df00799afd951d6ce1fbda285ad1ff7681159f8002c6cd8b84a8df38287d2d05229e67979cba73820160db69af4ad0ef1e7e611","ssdeep":"","tlshash":"9271105ab59662b29d73127e8b2fa085ff21481b8503df253ced83801f309155eb6ede","size":3691,"data":"","first_seen":"2025-05-15T14:56:35.304814Z","last_seen":"2026-01-19T17:41:34.82258Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2842b70200d9da03c6cbab45287dc7bc","sha1":"b17ef4a48497275708f3aa4beac953e4d0341bd9","sha256":"bb7f81818067281e9ba8360587f7f393cfb1590bd94d7c73dbb957a6c96528f0","sha512":"c329800d05b7543344372b1f5be17e5a43a15ccf8846f659d5f2612757f49caf8eeb604e585d1d630a7491614d1b52b83f67d827b538adf11b677f77291b20c8","ssdeep":"","tlshash":"94f002f5490324ef80039827e814f9511c39e0f9ac24b7cab04d2a3e70c5b62714e65a","size":599,"data":"","first_seen":"2025-03-03T14:53:00.541119Z","last_seen":"2026-01-19T17:41:34.845252Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"158912361d5155081a6e2aa265e1cdca","sha1":"20bdc8c34a179820c03db478d8cc0d1805255752","sha256":"994bc0a33a65212ee069e146702f10372d0be1e45fdca863a4c8787ebc84b3a4","sha512":"e7a45d4f14557dd74f363d253071ec33b400a90d739177732b02ff967a9207b7801ad685574b002b2197bb513cc5db8a8161f3504d8c72a66957a11e1bca3828","ssdeep":"","tlshash":"0ea02401f4d1f47713d0313cc41f31105015540d050c000cf0540150374400ddf30f00","size":76,"data":"","first_seen":"2025-05-15T14:56:35.391242Z","last_seen":"2026-01-19T17:41:34.848221Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj1907.online/63c0d7d8.js","fqdn":"aj1907.online","domain":"aj1907.online","tld":"online"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"079ae4ea3144430e1ae1f40e01c82820","sha1":"c6166c6f3b04621d55912e502585cb19a220a452","sha256":"f1f0c72555ab2f97bafae8c19caf7f9fcf702a0a238aed1ae2478cf7856b9e59","sha512":"3c177d08621374a81662f11cae37c985a177b9bca6664020e61cb08cb81e641a6cb729a08f290eb2a1facce75b539a308dbf3fa32da8a6f28ea0c2463bd38e15","ssdeep":"768:GDCupNFfmasutoHgigJQPu8L2UcJfxxDY1n:TupyasutoAirPiRYZ","tlshash":"980308d8baa1702993ea04f5817f810bb27648769d0cc0a4e225d9e53d749ac737bf3d","size":37982,"data":"","first_seen":"2025-10-14T19:13:06.790664Z","last_seen":"2025-10-14T19:13:06.790664Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"158912361d5155081a6e2aa265e1cdca","sha1":"20bdc8c34a179820c03db478d8cc0d1805255752","sha256":"994bc0a33a65212ee069e146702f10372d0be1e45fdca863a4c8787ebc84b3a4","sha512":"e7a45d4f14557dd74f363d253071ec33b400a90d739177732b02ff967a9207b7801ad685574b002b2197bb513cc5db8a8161f3504d8c72a66957a11e1bca3828","ssdeep":"","tlshash":"0ea02401f4d1f47713d0313cc41f31105015540d050c000cf0540150374400ddf30f00","size":76,"data":"","first_seen":"2025-05-15T14:56:35.391242Z","last_seen":"2026-01-19T17:41:34.848221Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"158912361d5155081a6e2aa265e1cdca","sha1":"20bdc8c34a179820c03db478d8cc0d1805255752","sha256":"994bc0a33a65212ee069e146702f10372d0be1e45fdca863a4c8787ebc84b3a4","sha512":"e7a45d4f14557dd74f363d253071ec33b400a90d739177732b02ff967a9207b7801ad685574b002b2197bb513cc5db8a8161f3504d8c72a66957a11e1bca3828","ssdeep":"","tlshash":"0ea02401f4d1f47713d0313cc41f31105015540d050c000cf0540150374400ddf30f00","size":76,"data":"","first_seen":"2025-05-15T14:56:35.391242Z","last_seen":"2026-01-19T17:41:34.848221Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"493fc826ab3bf36a385e0f109a381bda","sha1":"b3b295374853ee8952e81ba131af7449a4f4f16c","sha256":"c77d3f31ed096b6a5185709b812b861009eb5e6b555c018c29140370e83dde6c","sha512":"bc9084ecb168de439d97a786fefa465c278d142fe0175701a7c28813456004fb355b4d3472ecf5666f83025267e98d9c2880361f4c2504dd26bd1c473f8f3016","ssdeep":"","tlshash":"1ef026cb67d16712314d16c526e6989671c453541dd38931e75af00d34383b01655cec","size":543,"data":"","first_seen":"2025-10-14T19:13:07.956421Z","last_seen":"2025-10-14T19:13:07.956421Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f0ad429074528a617a19b424a65dfe15","sha1":"0972d3a672a49f10b1192467daea37e30021fbce","sha256":"5c304cfb0a14909ea455b50fdba9a1c6550300a6c9ffed645a2502166cae8060","sha512":"ace923f41862a43ef9263c34b988b6d417da56dd094fb3521fc9ed9762adf26a6f06479edaef16e81627d44a980cbbb7165571d4dca175076afdedff6dcc8cd9","ssdeep":"96:nYeYeRpfmZA9+Pu5oPDQaVFdtALk/kvuO9b6qqNOVCq7Qi+5HBOXEvB:naenfn+cqQcFdMLX9b6qqYAqP+5UIB","tlshash":"f0a1df98718134e7c1e79565a04f23276025a91dc829d0b5f0b6f3762cbab862373ebd","size":5061,"data":"","first_seen":"2025-05-15T14:56:35.365681Z","last_seen":"2026-01-19T17:41:34.834646Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f006e0be1feb91defde921a1d696a607","sha1":"ed87fff308caf4667fbfbf0deab044f6535f1b21","sha256":"0f920c9a759e0a654ef20b3fee0e4c0c4334d8637a4981f74c5c6642dc10148a","sha512":"e69fccfbbcc96375d96c5536b570241d9af12db6e9cad11e8a600e0353c5cd180c08245e641a884a2617a87dc63e7631225c2a880851733d625d4e94608f6f83","ssdeep":"","tlshash":"8871eda432c4f567935a37857c9f040e93b56c0a1f564be2c85092f13ea384a44bffb8","size":3823,"data":"","first_seen":"2025-05-15T14:56:35.350544Z","last_seen":"2026-01-19T17:41:34.843823Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/scrolltopcontrol.js","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"59085d462f4ac766346c1ad5140d7012","sha1":"225156323a31f6d4d62aa93a8aa8ec2d3ed05b5a","sha256":"d04764d918314cd186f5293de4b2478a505eaeb2e9e8979fed93cb16dfdb84ab","sha512":"b658f9c4af1bbfd2fed418c0b899a07436a6c8357633ca79729fd36787d69d102c266105e2aedf36674ddc1b4bc4989530fe251b6af8628e151252e43bddef27","ssdeep":"","tlshash":"7f016424b858581612abf2b2c57f8608fc6b64ab14414b41f8fc1cbe0f70224a1aedac","size":772,"data":"","first_seen":"2025-05-15T14:56:35.385143Z","last_seen":"2026-01-19T17:41:34.835974Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/fancybox.js","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"421734c04424ad912041551a44d4319f","sha1":"e4b208d431148562c84f4de89a6709b6610c1e38","sha256":"919de4ec98cab99d083fffbb8bacf01015354bb1185de6e6aed0a9307da0fb51","sha512":"ff0e09d8916cb63cc091fe358454ed90b2924d4d2b4791c639f83cd9e103a606f3fcb0958aea6529700ce505f9b29d530c957660f3c395a952e5bdca320093ba","ssdeep":"192:d/RAU7aHOHHO6+t2MQf2U/7eCiCxfcD6qVE02YFCt99/BvPDXlI9I+k8dMgr8uv:d/+uDOJqy79dFCt5ypj","tlshash":"e6f2201a24616475c43777bacb9f919ce6334a27221206b37d6ca2141ff06d4d2f8fea","size":34776,"data":"","first_seen":"2025-06-03T10:01:25.449296Z","last_seen":"2026-01-19T17:41:34.83662Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"158912361d5155081a6e2aa265e1cdca","sha1":"20bdc8c34a179820c03db478d8cc0d1805255752","sha256":"994bc0a33a65212ee069e146702f10372d0be1e45fdca863a4c8787ebc84b3a4","sha512":"e7a45d4f14557dd74f363d253071ec33b400a90d739177732b02ff967a9207b7801ad685574b002b2197bb513cc5db8a8161f3504d8c72a66957a11e1bca3828","ssdeep":"","tlshash":"0ea02401f4d1f47713d0313cc41f31105015540d050c000cf0540150374400ddf30f00","size":76,"data":"","first_seen":"2025-05-15T14:56:35.391242Z","last_seen":"2026-01-19T17:41:34.848221Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"29172c15bbdb73ff927871775c20c134","sha1":"8d55524d40cf68515793a66e1fba727bfabd886c","sha256":"b26854fb564b1b90c4be7add61e143c41f400a138cd2bd7afddf740adb55c417","sha512":"13715d4dd470a17f357835c47fb6d3f84d340ecf514c1f6e37124d392fe6cde2d32dd760b3f8eff473111caecae793723f157511d4a2fc9683b4d7d3bf44cfd6","ssdeep":"","tlshash":"8d0144149274492cb541b372e020b80ed836a0b4ba0c934da93c41a8b39afcbc380a98","size":688,"data":"","first_seen":"2025-10-14T19:13:08.037084Z","last_seen":"2025-10-14T19:13:08.037084Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"console":null},"http":[{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/ifixx.js","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/misc/js/ifixx.js HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 10 Mar 2015 07:58:50 GMT\r\netag: W/\"54fea43a-7d0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 1062629\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BRCXe4FzZRKl96gjJxXbbuUx%2FtEhkWUyVr6LSg8ArfiqVBhbe80b2MxS9eZjDV%2BIDmQhGRlZYwJ3VvepSVuAUHb6f1zYICzVvYs%3D\"}]}\r\ncf-ray: 98e963a3df7756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2000,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"3b3964ffbe470d2a4cf85e4866744e85","sha1":"f49fbed4da066da3afaff02d9e7d83869f28a09b","sha256":"63b8b3909cdf4465fe4f3f0f34927496c0558517612235cfaa527161497ab833","sha512":"d9fc0919949cab22a18102717a10a1d8f399c776d66de790b4eb23147005f176874cfdb3258822170d5b05c15efcb7e71f955797937a892f11c6394100fd5c52","ssdeep":"","tlshash":"5751552f25e6a42d7e0a223a9a5c6448a9bd3b0b4d80bcf0706df3800f4f576046c4be","first_seen":"2025-05-15T14:56:35.318087Z","last_seen":"2026-01-19T17:41:34.800688Z","times_seen":32,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/scrollup.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/scrollup.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1857\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LkeRwzI1Pu6KcU0HXHQygAGBomEor7ZrfLc6vFFxT69VFx5z%2BQYOEAd%2B2hV5fmQXSrCw9qHGZsjyL7paGZ%2BqCgcB%2FCElqMz3qZk%3D\"}]}\r\nlast-modified: Wed, 02 May 2012 15:08:47 GMT\r\netag: \"4fa14dff-741\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 4553893\r\ncf-cache-status: HIT\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\ncf-ray: 98e963a3ef9656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1857,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 34, 8-bit/color RGBA, non-interlaced","md5":"730362afa9a0bc9c40674e3c891d9f7b","sha1":"76c31f0e874c781f25ac26db2d7088604829cc04","sha256":"3b1acadc521f139d417b9978f31854af0166af4a0ced9934b362310b08ab9a7a","sha512":"7350adff5341a8772131c829af5dde40c9e07b472933452b9b23001e73ed1341f555e8e5f40df015da8e333e2337d5263202cdad692ad7b7abc277c9c929ffcd","ssdeep":"","tlshash":"283119a2d68e867103e91043d17220c2e3b6bc6d0b43e6680797d60e07be90d9d8674d","first_seen":"2025-05-15T14:56:35.315202Z","last_seen":"2026-01-19T17:41:34.805088Z","times_seen":32,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/ajax/html/login.html?_=1760469156808","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/ajax/html/login.html?_=1760469156808 HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html, */*; q=0.01\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nX-Requested-With: XMLHttpRequest\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: bb_test=593665487; gophp=gop; 47d4ecc4464b40b171e31f4cf1cf6ce9=47d4ecc4464b40b171e31f4cf1cf6ce9\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:12:37 GMT\r\ncontent-type: text/html; charset=windows-1251\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nlast-modified: Fri, 16 May 2025 17:23:38 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BEiyNERGFwMhqA2YMryn%2Bsg%2FSUEofSXpVHNp9q%2F%2FoPFCzuTmAvaApctR7HcYyTz2vlihiy0s7rpaiSrS1E4AnI2y4khOm3YnLOfV7A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=9,cfOrigin;dur=288, cfExtPri\r\ncf-ray: 98e963a65e994c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":484,"size_decoded":0,"mime_type":"text/html; charset=windows-1251","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"c2f29cb6129b1693e78657e1e24a6540","sha1":"ebde46b20b1d882907e280ee7eabcb399d6f0dda","sha256":"8dfd7723e88a8c4b0e777d64a38af91d4ae93ae0ffbeb74d30b63a26fc40b576","sha512":"b042a0f4e328eb3ae267f943ff1d8fa5f28523adcf55a1d3cd979cd1c7d9423080e723e2c9c2ea162884f0d67b6f700d6877e775fa17582adf1c6f4260b543e8","ssdeep":"","tlshash":"0af02e0219058c751772183a89485c117d6e91721e1f6f08726c8b3d7ff554403ed779","first_seen":"2025-05-15T14:56:35.303693Z","last_seen":"2026-01-19T17:41:34.811279Z","times_seen":32,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":302,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/templates/default/css/fancybox.css","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/templates/default/css/fancybox.css HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 27 May 2013 19:56:48 GMT\r\netag: W/\"51a3ba80-3c3d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 486816\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mMLuCYdw3QeFq6hDyLkUicwXV%2FBzh2xfCu9r6p4IhWyiY3vMgEMROpiK9gcIEBWAy9mcEHDx39PHCOZxAnlpD%2BDC%2BT6Go1tpw9o%3D\"}]}\r\ncf-ray: 98e963a3cf6a56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15421,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"907db8058d6e110987945c3d3ae9f0a9","sha1":"d0a7d40c4c3937917d653ef576a0d9568b9da6a9","sha256":"0ed1d42c2574a6fc1147489530a73a9c5c299ec2d233f5f67459f46da6dcaaa5","sha512":"b33bab8527da5f0142fc62a9a083a11a4761b669166b92537dc8ca57d3199ca10a9c87801619e02d7a0460c46bf04279b365e9403044cf574587203e8ad30640","ssdeep":"192:EEYNNEz5AFKBsP2Yhki9WwSkykqAHyrDNLZb:ENNuMwvb","tlshash":"8862120ad2567046b539dda0f7eb0a28e1391042b7424afbfafc749663c17d850f2de9","first_seen":"2025-05-15T14:56:35.26309Z","last_seen":"2026-01-19T17:41:34.806874Z","times_seen":32,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/main.js?v=2","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.476Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/misc/js/main.js?v=2 HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 25 Oct 2015 14:07:48 GMT\r\netag: W/\"562ce234-6133\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 564354\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eXDRc83%2FsrM7SMqy9bGQeK3G%2BdzXpCrXtCnRbIoU52D2WBCGftBsy1fyjvOXgqHkqUTFrWmAtXB032hicNUCJ7JYDPMcNNLgWm8%3D\"}]}\r\ncf-ray: 98e963a3df7356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24883,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6643)","md5":"fcc3b54b6553faa20a2d854c76590a7c","sha1":"51cf6b59113ebf9b508aa20694b577774dea9492","sha256":"5ce8ee1eb5a08e6e2a25b0cac45c183c67466bb57bf0f2a542517b1018f096f3","sha512":"db3dc3e3317267cbb26bca7ca55045e46792471128f4d6c818036022cd72cf2f313615ce47e8a5332c685edadcdbe3f7081765b94fd05ef3ed4b529f61b59d3a","ssdeep":"384:0Wl+jSX779zVHjcOIDyRtPsPo1OJ1lwKjDtZSgCRcZ4nxFTBr2:x779zVHjcOIm7PsPYO1FntZSgCOZ4nPI","tlshash":"d4b2e719f388797745a731a9189f00ce73359442b600bc7eb82dc5e42bacd6985b3f7a","first_seen":"2025-05-15T14:56:35.257355Z","last_seen":"2026-01-19T17:41:34.798805Z","times_seen":32,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/order_table.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/order_table.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2505\r\nserver: cloudflare\r\nlast-modified: Thu, 18 Sep 2014 06:21:04 GMT\r\netag: \"541a79d0-9c9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1062629\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AD6idTrVLMgzbAPEeX8jUqMsPduAqI2tdUVTD9pY1HUEdrBcZ9hEhP7RNsZxf7aMNAA5P7qdq8uYBh2HEWHroycq9LoMHu4lkZ4%3D\"}]}\r\ncf-ray: 98e963a3ef8d56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2505,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"40a0292e3e0d7a7b1077ba82a2fed52c","sha1":"37a0c57ea3d7540edac99fbda6a821ecd26c8ceb","sha256":"e1c0b853e74c1371d93e3288200d7a4f040f7221b2d19a96b6dffd27ccab8d24","sha512":"eed0718eb0f94c8238a0509d83e217aa16d3b13da56d933199616e95b5b38d5093c7f582a3bc9961022380f09912a0f37e55a5c0f51c6e440f107a55f3f05f54","ssdeep":"","tlshash":"37517dce9e8846c9f9d912b03b43fab51d6351430296033923d9e643b7c304db42a70d","first_seen":"2025-05-15T14:56:35.266287Z","last_seen":"2026-04-15T14:47:49.440645Z","times_seen":33,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/webvisor/57087793?wv-part=1\u0026wv-type=7\u0026wmode=0\u0026wv-hit=127979773\u0026page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026rn=413415652\u0026browser-info=bt%3A1%3Awe%3A1%3Aet%3A1760469160%3Aw%3A1280x1024%3Av%3A2220%3Az%3A0%3Ai%3A20251014191240%3Au%3A1760469157724974337%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Ast%3A1760469160\u0026t=gdpr(14)ti(1)","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:40.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /webvisor/57087793?wv-part=1\u0026wv-type=7\u0026wmode=0\u0026wv-hit=127979773\u0026page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026rn=413415652\u0026browser-info=bt%3A1%3Awe%3A1%3Aet%3A1760469160%3Aw%3A1280x1024%3Av%3A2220%3Az%3A0%3Ai%3A20251014191240%3Au%3A1760469157724974337%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Ast%3A1760469160\u0026t=gdpr(14)ti(1) HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 39338\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nCookie: yabs-sid=2668515501760469157; i=2JzGz9Siq90e4f85n1k6Do3VYEAYhlxaKwyeSSF5N2tefZzaxt9rSid+pQAXQp7zfs9WkL2Zrh8XRc+YkrlbXpgZRWI=; yandexuid=6982128361760469157; yuidss=6982128361760469157; ymex=1792005157.yrts.1760469157#1792005157.yrtsi.1760469157; bh=YKXBuscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nlast-modified: Tue, 14-Oct-2025 19:12:40 GMT\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nexpires: Tue, 14-Oct-2025 19:12:40 GMT\r\ncontent-type: image/gif\r\naccess-control-allow-origin: https://rustorka.com\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-05-03T15:40:44.195055Z","times_seen":99276,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/home.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/home.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 3997\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jul 2013 21:28:49 GMT\r\netag: \"51e07511-f9d\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 1568930\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wHczPeIvAKhjG92SwkrMda3w2p8wdJfuYKroL0SQNKvT19a5S4y1DISv46MUwlE8gqq5mNzrVDWHB8Hg9b1vHzFlqG5dw9%2BIXQg%3D\"}]}\r\ncf-ray: 98e963a3df7856bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"5f529a4707a3ab943a9227b9fd3b9992","sha1":"e8418d6b53a2c09e49c740c1fbae74d62626217f","sha256":"10d74ed3684c5afeea8a0009fead5112d68cc9b31aa263aa711169c6906f225f","sha512":"ce132ca5a180bbddcd83cf15a16895c3f2378991c65d2ba39134653035da89560804dbcc6d1d60854891abb07cb6a5ce64b318d4c56eec66f5cb658964aef9de","ssdeep":"","tlshash":"68819e499114051e140f0aa6363bcd420a7bfbd0b29c5e28bebd820f8734e627836a4b","first_seen":"2025-05-15T14:56:35.323245Z","last_seen":"2026-01-19T17:41:34.824556Z","times_seen":32,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"counter.yadro.ru/hit;rustorka?t14.11;r;s1280*1024*24;uhttps%3A//rustorka.com/forum/login.php%3Fredirect%3D/forum/mytorrents.php%3Fu%3D2258656p%3A6;h%u041C%u0435%u0436%u0434%u0443%u043D%u0430%u0440%u043E%u0434%u043D%u044B%u0439%20%u0442%u043E%u0440%u0440%u0435%u043D%u0442-%u0442%u0440%u0435%u043A%u0435%u0440%20Rustorka%20%7C%20%u0420%u0443%u0441%u0442%u043E%u0440%u044C%20%u0434%u043E%20%u043F%u043E%u0441%u043B%u0435%u0434%u043D%u0435%u0433%u043E%21;0.5041197297410066","fqdn":"counter.yadro.ru","domain":"yadro.ru","tld":"ru"},"ip":{"addr":"88.212.201.204","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P521-SHA512","protocol":"TLSv1.2","cert":{"subject":{"commonName":"counter.yadro.ru","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Thu, 21 Aug 2025 01:09:48 GMT","end":"Wed, 19 Nov 2025 01:09:47 GMT"},"fingerprint":{"sha1":"58:B7:98:77:9D:2A:65:74:D8:0D:E1:C7:A2:5C:3A:EC:40:14:A3:55","sha256":"48:ED:15:C4:71:78:F5:A6:EE:D7:5B:49:61:63:4C:7D:8D:30:5B:0A:22:D5:1A:DC:7E:E8:6D:AB:B8:B3:B8:DC"}}},"request":{"raw":"GET /hit;rustorka?t14.11;r;s1280*1024*24;uhttps%3A//rustorka.com/forum/login.php%3Fredirect%3D/forum/mytorrents.php%3Fu%3D2258656p%3A6;h%u041C%u0435%u0436%u0434%u0443%u043D%u0430%u0440%u043E%u0434%u043D%u044B%u0439%20%u0442%u043E%u0440%u0440%u0435%u043D%u0442-%u0442%u0440%u0435%u043A%u0435%u0440%20Rustorka%20%7C%20%u0420%u0443%u0441%u0442%u043E%u0440%u044C%20%u0434%u043E%20%u043F%u043E%u0441%u043B%u0435%u0434%u043D%u0435%u0433%u043E%21;0.5041197297410066 HTTP/1.1\r\nHost: counter.yadro.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.17.9\r\nDate: Tue, 14 Oct 2025 19:12:36 GMT\r\nContent-Type: image/gif\r\nContent-Length: 251\r\nConnection: keep-alive\r\nExpires: Sun, 13 Oct 2024 21:00:00 GMT\r\nPragma: no-cache\r\nCache-control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nStrict-Transport-Security: max-age=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.17.9","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":251,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 87a, 88 x 31","md5":"267f5ca44ae40dea226244092c91bde3","sha1":"99ddb079b8d31a80100c99f0aad9c5bb650504b8","sha256":"dac1da78feb9085996b93bcd8b2c9a4606a85de76c9f4bb22ba770c1883b3468","sha512":"8ab82b8a69a589d9f3173711eb9a97e1aa55d5d47cd82fbe3d80aac87f46d4d9d718b0f025ff8deb1b2052e61e5f0211ad4cff54e2576cdbe7d67a5eec84b5d1","ssdeep":"","tlshash":"c8d09510012efb30400d5222d505f3444ccbc1c33dde55451728d7d41ed19d55834a8f","first_seen":"2025-10-14T19:13:06.624765Z","last_seen":"2025-10-14T19:13:06.624765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":414,"timings":{"blocked":167,"dns":27,"connect":52,"send":0,"wait":52,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/tracker.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/tracker.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 837\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jul 2013 21:01:27 GMT\r\netag: \"51e06ea7-345\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 4019505\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aEpRNksY9%2BAeHrHo2WtlzmoLYkTlqXKuQu4xJ3sDkP5Nsl8Lvop6%2B%2BcL65ywsV3rNbx1puK%2F28T4BL2geqK2sUCuz%2BuRlElUfXY%3D\"}]}\r\ncf-ray: 98e963a3df7a56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":837,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, interlaced","md5":"3ddbc2e256cb0f8366fab63a287c60d7","sha1":"1b8fb2631f3234f73ce50fc757f8d8ad277122a6","sha256":"cdf7095f5954713f473de709c831b299a7bfa77e9a9eef95e05e896731a1561a","sha512":"737bb382c3268b47d8e547b48aa32d9c14e6b6641efe6f93909492bba72ee93ac8eb786ff6c6eae2ce5025e1ceb731de24cdaa45564350bc63b7b2e587c874a8","ssdeep":"","tlshash":"320196e586e554051833471a4e460f15e4788398c3b7a52d5041c8ea0727de810aa73e","first_seen":"2025-05-15T14:56:35.300215Z","last_seen":"2026-01-19T17:41:34.821487Z","times_seen":32,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"videoroll.net/js/vid_vpaut_script.js","fqdn":"videoroll.net","domain":"videoroll.net","tld":"net"},"ip":{"addr":"82.202.165.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videoroll.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 21 Jul 2025 09:28:20 GMT","end":"Sat, 22 Aug 2026 09:28:19 GMT"},"fingerprint":{"sha1":"8C:AF:96:78:0B:F3:EF:64:90:78:DE:97:85:F6:B1:B7:1F:AC:AA:90","sha256":"78:57:71:F6:CA:D5:2F:2F:80:0E:A0:CE:05:D4:6B:4D:B6:B0:2C:B9:05:91:B1:0B:60:BA:97:EC:69:E3:42:C8"}}},"request":{"raw":"GET /js/vid_vpaut_script.js HTTP/1.1\r\nHost: videoroll.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 14 Oct 2025 19:12:36 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nContent-Length: 52124\r\nLast-Modified: Mon, 13 Oct 2025 09:03:45 GMT\r\nConnection: keep-alive\r\nETag: \"68ecc071-cb9c\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52124,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2769), with CRLF line terminators","md5":"d085c5b5053b7d9887743394536eca86","sha1":"395b1e6eafc75f29bd5272dcfa17d59489378197","sha256":"9b0b2c4bd6c49fe9fbc6de4b5c29c1fb2a607a25ee1c9a6c833500865b35de4d","sha512":"2e3e5b3674249a6c992ecc1e90951d33f09654e85f288dac8085f71ccc155378f125f59424cdb420ce41a34cb4dccaca836e17d89174d86965776055b39740e0","ssdeep":"768:iW8PfZuultWfXsbWCpZWiOers+Qmy3LzK:iW8PfZuultWfwWCpZWiOers+Qmy3LzK","tlshash":"9433852b6a1404374efa673f6b3b514cf9324527434286183c5da5842f78fa4b5b2fe9","first_seen":"2025-10-13T21:12:59.412077Z","last_seen":"2025-10-30T14:09:56.818601Z","times_seen":132,"resource_available":true,"data":null}},"time_used":426,"timings":{"blocked":146,"dns":1,"connect":30,"send":0,"wait":56,"receive":30,"ssl":161},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj1907.online/zGJcL37j4zGKvJQu46LDSQLu05GD_8YiT1qE7yNixFb3Z5SDX2GtZeZvD8gnC2k_NnsHV6QkRsD6L4hVFp6ZJ565CedPHQAaL8EIyisV9v8298ZJsj44baP4-Ez6uclW9tSWUqnugYbVcYR8KihWBcM_eTUxJuSU5ZXgBA3rXFay0eZYSFnnPH3Qtjng6niFF0G_y3jAAIJREG8qwNCQHx1YomjekO-tXjJrddeVJUtBlMEc6meimc7GSphCWyaW7NxGXjXxyEghG_juLn18tOxfWxAKeQ4dK4U18U9gyWkKf1-lQg8gVy_rdCcnSaaHGBm0zz77Yofg_HlcO4P5TutV0BGpLOXfIWFMwRjGIH_gMJ26f1kkJW7q2Q3bYUVXMJyFEdtwFC_QN39CE47Z1DvcSzmRpQLTtdL-VNqsEjeBS9GBN6qE7Kr7nwJwg9g2TvLhSvNZKuQuB83-6OjIZ2Pw2jHwBiW4Uf-buJKPm8xU?DC=HZFI","fqdn":"aj1907.online","domain":"aj1907.online","tld":"online"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj1907.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 03:34:35 GMT","end":"Tue, 09 Dec 2025 04:31:23 GMT"},"fingerprint":{"sha1":"B9:1E:75:1E:61:7E:44:3F:28:80:DB:25:99:B8:AC:18:35:21:89:B6","sha256":"02:05:B3:6C:A1:77:07:B1:89:6D:69:8B:3C:B3:9B:CA:B0:D8:A9:85:C8:E1:00:D3:FD:EF:92:15:C6:02:93:89"}}},"request":{"raw":"GET /zGJcL37j4zGKvJQu46LDSQLu05GD_8YiT1qE7yNixFb3Z5SDX2GtZeZvD8gnC2k_NnsHV6QkRsD6L4hVFp6ZJ565CedPHQAaL8EIyisV9v8298ZJsj44baP4-Ez6uclW9tSWUqnugYbVcYR8KihWBcM_eTUxJuSU5ZXgBA3rXFay0eZYSFnnPH3Qtjng6niFF0G_y3jAAIJREG8qwNCQHx1YomjekO-tXjJrddeVJUtBlMEc6meimc7GSphCWyaW7NxGXjXxyEghG_juLn18tOxfWxAKeQ4dK4U18U9gyWkKf1-lQg8gVy_rdCcnSaaHGBm0zz77Yofg_HlcO4P5TutV0BGpLOXfIWFMwRjGIH_gMJ26f1kkJW7q2Q3bYUVXMJyFEdtwFC_QN39CE47Z1DvcSzmRpQLTtdL-VNqsEjeBS9GBN6qE7Kr7nwJwg9g2TvLhSvNZKuQuB83-6OjIZ2Pw2jHwBiW4Uf-buJKPm8xU?DC=HZFI HTTP/1.1\r\nHost: aj1907.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccept-ranges: bytes\r\netag: W/\"49-1758201922000\"\r\nlast-modified: Thu, 18 Sep 2025 13:25:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 49\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yW0JdNq9iVU5mePXueiTOFgeVZfAzjuSqUX7ihmEHi0jPFXA7hJhgyzINdQ3O%2FLX7IjsX%2FQ5sLmH1kxru%2BiumFM4QF%2FuAhqei3E6\"}]}\r\ncf-ray: 98e963a66ffd56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"56398e76be6355ad5999b262208a17c9","sha1":"a1fdee122b95748d81cee426d717c05b5174fe96","sha256":"2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef","sha512":"fd8b021f0236e487bfee13bf8f0ae98760abc492f7ca3023e292631979e135cb4ccb0c89b6234971b060ad72c0ca4474cbb5092c6c7a3255d81a54a36277b486","ssdeep":"","tlshash":"609002438585c491d151c1304814935011b5a5614505134ea6a836adac551a1c800408","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-05-03T14:27:27.723806Z","times_seen":10108,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/templates/default/css/theme_default.css?v=2","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/templates/default/css/theme_default.css?v=2 HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 18 Sep 2017 20:36:34 GMT\r\netag: W/\"59c02e52-27d0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 4144435\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hGrWVo%2Bg3yd0g1APn2u4I1GP%2BRmT4GT%2BdELm55QOtVVgujHG9K7GnCmN2qtXDOR2O1BwZwFbmoJ5puc0Ox%2B2SCeOrLwmFyvMTU4%3D\"}]}\r\ncf-ray: 98e963a3cf6756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10192,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"9cb36ff968cf3a5deb0c2d62c2d23da5","sha1":"61901a23047ce75226fb6837bffa9b6e4467bbf4","sha256":"fe3a7b510daa875ea78935679c383a5d34d806077c01456469afa4cb570c0cad","sha512":"454bfa0350780ea23cc429b92de2617f0e84ced2127fe5adae9fa32f64f67f16a1e0e200fa172f7cd474efff616c06f9c75b67feeed73819514311feca0867fc","ssdeep":"192:qHg1k7FSO3Ou+yOvw5A1Uoa5/lpqRe8DTBbeg284XTNnD6CoV:M7e+OB7wSV","tlshash":"38228526ae44320971b6ebb0f39353a0f63b4253b64389ba7efc1610c75836555adf8c","first_seen":"2025-05-15T14:56:35.288444Z","last_seen":"2026-01-19T17:41:34.813113Z","times_seen":32,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/ct1.jquery.js?v=2","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/misc/js/ct1.jquery.js?v=2 HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 02 Oct 2013 14:31:17 GMT\r\netag: W/\"524c2e35-e6b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 2246055\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZfgYv3B%2BYHMBYbjgrC5TTZ8oLBZSjkl%2FW4J1%2BVafkFVsF9Paoe6ej3gfSL7cctovqR8C2%2Bl8D7ilNyFDzViQElKoDp0T%2BKy2hN8%3D\"}]}\r\ncf-ray: 98e963a3df7656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3691,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"e2993c0ef713c1a894efb9e4f174954b","sha1":"31840d521b2e05b3d6cf10ad66305c4b97431995","sha256":"3e1c1b7cc2b999e1341034981e6ca31e4e92dfa8e3461e048bd60dcadb004443","sha512":"6bfb0b15d8565d91b938e9188df00799afd951d6ce1fbda285ad1ff7681159f8002c6cd8b84a8df38287d2d05229e67979cba73820160db69af4ad0ef1e7e611","ssdeep":"","tlshash":"9271105ab59662b29d73127e8b2fa085ff21481b8503df253ced83801f309155eb6ede","first_seen":"2025-05-15T14:56:35.304814Z","last_seen":"2026-01-19T17:41:34.82258Z","times_seen":32,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ad.adriver.ru/cgi-bin/json.cgi?sid=1\u0026ad=719473\u0026bt=55\u0026pid=4425169\u0026bid=12604289\u0026bn=12604289\u0026tuid=1\u0026cfa=1\u0026rnd=888083\u0026loc=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026custom=127%3D1%3B129%3D2.10.0%3B308%3D1760469157724974337%3B309%3D0%3B310%3D0","fqdn":"ad.adriver.ru","domain":"adriver.ru","tld":"ru"},"ip":{"addr":"195.209.109.16","port":443,"asn":52007,"as":"LLC AdRiver","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:37.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adriver.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 12:42:34 GMT","end":"Sun, 19 Apr 2026 12:42:33 GMT"},"fingerprint":{"sha1":"3F:B9:BA:38:47:CE:F2:25:95:F1:35:74:F5:54:EC:0D:58:DB:8A:78","sha256":"A5:6E:66:35:51:56:89:6E:F5:B2:74:73:A6:B4:67:C7:38:C8:A2:1F:53:83:F0:AE:04:AD:58:E8:5A:B5:22:48"}}},"request":{"raw":"GET /cgi-bin/json.cgi?sid=1\u0026ad=719473\u0026bt=55\u0026pid=4425169\u0026bid=12604289\u0026bn=12604289\u0026tuid=1\u0026cfa=1\u0026rnd=888083\u0026loc=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026custom=127%3D1%3B129%3D2.10.0%3B308%3D1760469157724974337%3B309%3D0%3B310%3D0 HTTP/1.1\r\nHost: ad.adriver.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 14 Oct 2025 19:12:37 GMT\r\nContent-Type: application/json\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://rustorka.com\r\nAccess-Control-Allow-Credentials: true\r\nCache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store\r\nPragma: no-cache\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nP3P: policyref=\"//adriver.ru/w3c/p3p.xml\", CP=\"NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA\"\r\nSet-Cookie: cid=AjXzSlQLN2dCvV6u7Gok_pQ; expires=Thu, 14 Oct 2027 19:12:37 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":503,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"8a9046cf9807ebfcad27bc4588846af8","sha1":"1d8d0f4086c6535422035da4256f6a11f5cf6628","sha256":"f814811b054930712a734f8c4c4f6acb87a41545380e3eb2c9241728566a8989","sha512":"9852f387af6a08dd5bc13c75b21b86c75ff0726e2c3e78e6e9bbdf6608adf54550cfda7781010289916faf9e8afbcc4adb5fd5b2c26cf7c98a580d4c87975abe","ssdeep":"","tlshash":"00f02748dce00daf463041982eb453b2e5c4074b166d2e57f07d9d0f9f3a9349b20355","first_seen":"2025-10-14T19:13:06.750113Z","last_seen":"2025-10-14T19:13:06.750113Z","times_seen":1,"resource_available":false,"data":null}},"time_used":344,"timings":{"blocked":143,"dns":17,"connect":55,"send":0,"wait":56,"receive":1,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/webvisor/57087793?wv-part=1\u0026wv-type=7\u0026wmode=0\u0026wv-hit=127979773\u0026page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026rn=815268053\u0026browser-info=we%3A1%3Aet%3A1760469161%3Aw%3A1280x1024%3Av%3A2220%3Az%3A0%3Ai%3A20251014191240%3Au%3A1760469157724974337%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Ast%3A1760469161\u0026t=gdpr(14)ti(1)","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:40.876Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /webvisor/57087793?wv-part=1\u0026wv-type=7\u0026wmode=0\u0026wv-hit=127979773\u0026page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026rn=815268053\u0026browser-info=we%3A1%3Aet%3A1760469161%3Aw%3A1280x1024%3Av%3A2220%3Az%3A0%3Ai%3A20251014191240%3Au%3A1760469157724974337%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Ast%3A1760469161\u0026t=gdpr(14)ti(1) HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain\r\nContent-Length: 72\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nCookie: yabs-sid=2668515501760469157; i=2JzGz9Siq90e4f85n1k6Do3VYEAYhlxaKwyeSSF5N2tefZzaxt9rSid+pQAXQp7zfs9WkL2Zrh8XRc+YkrlbXpgZRWI=; yandexuid=6982128361760469157; yuidss=6982128361760469157; ymex=1792005157.yrts.1760469157#1792005157.yrtsi.1760469157; bh=YKXBuscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 14-Oct-2025 19:12:40 GMT\r\naccess-control-allow-credentials: true\r\nlast-modified: Tue, 14-Oct-2025 19:12:40 GMT\r\ncontent-type: image/gif\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://rustorka.com\r\npragma: no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-05-03T15:40:44.195055Z","times_seen":99276,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/watch/57087793/1?page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026charset=utf-8\u0026hittoken=1760469157_593e54fb9edfadb439c21a1cae9067c6b2ec6d41a855bafaf49017a39b732521\u0026browser-info=nb%3A1%3Acl%3A347%3Aar%3A1%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A1072331789271%3Ahid%3A127979773%3Az%3A0%3Ai%3A20251014191252%3Aet%3A1760469172%3Ac%3A1%3Arn%3A925272031%3Arqn%3A2%3Au%3A1760469157724974337%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2302%2C2302%2C1%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1760469155726%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1760469172\u0026t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(83952132)oms(0)prs(1)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:52.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"POST /watch/57087793/1?page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026charset=utf-8\u0026hittoken=1760469157_593e54fb9edfadb439c21a1cae9067c6b2ec6d41a855bafaf49017a39b732521\u0026browser-info=nb%3A1%3Acl%3A347%3Aar%3A1%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A1072331789271%3Ahid%3A127979773%3Az%3A0%3Ai%3A20251014191252%3Aet%3A1760469172%3Ac%3A1%3Arn%3A925272031%3Arqn%3A2%3Au%3A1760469157724974337%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Apri%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C2302%2C2302%2C1%2C%3Aco%3A0%3Acpf%3A1%3Aeu%3A1%3Ans%3A1760469155726%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1760469172\u0026t=gdpr(14)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(83952132)oms(0)prs(1)ti(0)\u0026force-urlencoded=1\u0026site-info=%7B%22__ym%22%3A%7B%22ct.e%22%3A%22ns%22%7D%7D HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nCookie: yabs-sid=2668515501760469157; i=2JzGz9Siq90e4f85n1k6Do3VYEAYhlxaKwyeSSF5N2tefZzaxt9rSid+pQAXQp7zfs9WkL2Zrh8XRc+YkrlbXpgZRWI=; yandexuid=6982128361760469157; yuidss=6982128361760469157; ymex=1792005157.yrts.1760469157#1792005157.yrtsi.1760469157; bh=YKXBuscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\nexpires: Tue, 14-Oct-2025 19:12:52 GMT\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-origin: https://rustorka.com\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ncontent-type: image/gif\r\naccess-control-allow-credentials: true\r\nx-xss-protection: 1; mode=block\r\nlast-modified: Tue, 14-Oct-2025 19:12:52 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-05-03T15:40:44.195055Z","times_seen":99276,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":49,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/fancybox.js","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/misc/js/fancybox.js HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Mon, 27 May 2013 20:47:29 GMT\r\netag: W/\"51a3c661-87bc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 382504\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=auUfZkomg4Pvx4pTGoHPea1B%2FLvvwaS8BKRi1%2Fo%2FQ0Fa1kjl3%2BROZh2fsCoIFoFik2FJ4fZIVvXb3xlYHUnQhosUYKCuAxQnT%2BE%3D\"}]}\r\ncf-ray: 98e963a3cf6b56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34748,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (442), with CRLF line terminators","md5":"7e6f25aedb414c990011fbc0a45da3ff","sha1":"99199f243fb0350d4310bbe01b769edc6aab16d1","sha256":"2082d2e074154091f2d4bbfa8c33d1e9a32d2f1bf1af1299037b5e2f325fb702","sha512":"2f9b0e8755634848eea2155768ffdb66fb5a7d07f5e7ac8137028d09dc200847982b3ba0d88ef2de55fab6ba8f237eaeaa9d8b2d096cada70bacc343f1d11f4d","ssdeep":"192:d/RAU7aHIHHI6+t2MQf2U/7eCiCxfcD6qVE02YFCt99/BvPDXlI9I+k8dMgr8uv:d/+uVIJqy79dFCt5ypj","tlshash":"07f21f1a24616475c43777bacb9f9198e6334a27221206b37d6ca2141ff06d4d2fcfea","first_seen":"2025-05-15T14:56:35.321974Z","last_seen":"2026-01-19T17:41:34.819977Z","times_seen":32,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj1907.online/63c0d7d8.js","fqdn":"aj1907.online","domain":"aj1907.online","tld":"online"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.707Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj1907.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 03:34:35 GMT","end":"Tue, 09 Dec 2025 04:31:23 GMT"},"fingerprint":{"sha1":"B9:1E:75:1E:61:7E:44:3F:28:80:DB:25:99:B8:AC:18:35:21:89:B6","sha256":"02:05:B3:6C:A1:77:07:B1:89:6D:69:8B:3C:B3:9B:CA:B0:D8:A9:85:C8:E1:00:D3:FD:EF:92:15:C6:02:93:89"}}},"request":{"raw":"GET /63c0d7d8.js HTTP/1.1\r\nHost: aj1907.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I2LQD%2FqmVcbo0UkBGSa7GlKwXl37LUJsA%2BwuLD4oKIHszkVJb6XQ6mC2JXBY1ww6RR2OlRs1%2BmQzG5%2FvcgWtNdBf9%2BQEJDCUOxORd5M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"0079ae4ea3144430e1ae1f40e01c82820\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98e963a53bc732fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37982,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37982), with no line terminators","md5":"079ae4ea3144430e1ae1f40e01c82820","sha1":"c6166c6f3b04621d55912e502585cb19a220a452","sha256":"f1f0c72555ab2f97bafae8c19caf7f9fcf702a0a238aed1ae2478cf7856b9e59","sha512":"3c177d08621374a81662f11cae37c985a177b9bca6664020e61cb08cb81e641a6cb729a08f290eb2a1facce75b539a308dbf3fa32da8a6f28ea0c2463bd38e15","ssdeep":"768:GDCupNFfmasutoHgigJQPu8L2UcJfxxDY1n:TupyasutoAirPiRYZ","tlshash":"980308d8baa1702993ea04f5817f810bb27648769d0cc0a4e225d9e53d749ac737bf3d","first_seen":"2025-10-14T19:13:06.790664Z","last_seen":"2025-10-14T19:13:06.790664Z","times_seen":1,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-14T19:12:35.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6 HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: text/html; charset=windows-1251\r\nserver: cloudflare\r\ncache-control: no-cache, pre-check=0, post-check=0\r\nexpires: 0\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M80ukBsE%2BEEHFDXCIRX8pmw4A2ey2sHblUOYg9LGctevxLowPTeHf%2F3E4FeMoNxMXTUMKqzhpRIyvw%2BwaFdjUi5SOqoBV7XJF3o%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=14,cfOrigin;dur=288\r\ncontent-encoding: br\r\nset-cookie: bb_test=593665487; Path=/forum/; Domain=rustorka.com\r\ncf-ray: 98e963a0bb9e56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Liveinternet","description":"","website":"https://liveinternet.ru/rating/","common_platform_enumeration":"","icon":"Liveinternet.png","categories":["Analytics"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"phpBB","description":"phpBB is a free open-source Internet forum package in the PHP scripting language.","website":"https://phpbb.com","common_platform_enumeration":"cpe:2.3:a:phpbb:phpbb:*:*:*:*:*:*:*:*","icon":"phpBB.png","categories":["Message boards"]}],"data":{"size":24399,"size_decoded":0,"mime_type":"text/html; charset=windows-1251","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6876), with CRLF, LF line terminators","md5":"e51c34ff678206d38a86d7991940ab37","sha1":"c4617aabb86ed46f7150049e3a7399a32df9453d","sha256":"3c48043dea58ea2f21688a7c49a3bf9ca0c6a6bd008507e929455b60ff611cf1","sha512":"3a344052488fef9505b3bd429dece387fbf996e5ad40cc8515234e19c66af4946863098cfe48069261cd1833bc515e6fffca86e58900a7df2a3290a77d0faaf5","ssdeep":"768:tCqnhTeIhTm7L0oQWejjTTZ78FqiMklKsq+MY:MGhyH0oQNjjnOYixlFqhY","tlshash":"d2b292c4dac5cc5f29893003e530ac8da4618167e309db36be7c759bfbc8754c69a789","first_seen":"2025-10-14T19:13:06.802586Z","last_seen":"2025-10-14T19:13:06.802586Z","times_seen":1,"resource_available":false,"data":null}},"time_used":713,"timings":{"blocked":202,"dns":1,"connect":1,"send":0,"wait":309,"receive":0,"ssl":198},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/watch/57087793/1?wmode=7\u0026page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A1072331789271%3Ahid%3A127979773%3Az%3A0%3Ai%3A20251014191237%3Aet%3A1760469157%3Ac%3A1%3Arn%3A875016973%3Arqn%3A1%3Au%3A1760469157724974337%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A865%3Awv%3A2%3Ads%3A1%2C202%2C308%2C0%2C29%2C0%2C%2C358%2C24%2C%2C%2C%2C1064%3Aco%3A0%3Acpf%3A1%3Ans%3A1760469155726%3Afip%3A63071953bd429ac229b8062c1fc44064-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1760469157%3At%3A%D0%9C%D0%B5%D0%B6%D0%B4%D1%83%D0%BD%D0%B0%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D0%B9%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82-%D1%82%D1%80%D0%B5%D0%BA%D0%B5%D1%80%20Rustorka%20%7C%20%D0%A0%D1%83%D1%81%D1%82%D0%BE%D1%80%D1%8C%20%D0%B4%D0%BE%20%D0%BF%D0%BE%D1%81%D0%BB%D0%B5%D0%B4%D0%BD%D0%B5%D0%B3%D0%BE%21\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29fip%281%29ti%281%29\u0026redirnss=1","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:37.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/57087793/1?wmode=7\u0026page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A1072331789271%3Ahid%3A127979773%3Az%3A0%3Ai%3A20251014191237%3Aet%3A1760469157%3Ac%3A1%3Arn%3A875016973%3Arqn%3A1%3Au%3A1760469157724974337%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A865%3Awv%3A2%3Ads%3A1%2C202%2C308%2C0%2C29%2C0%2C%2C358%2C24%2C%2C%2C%2C1064%3Aco%3A0%3Acpf%3A1%3Ans%3A1760469155726%3Afip%3A63071953bd429ac229b8062c1fc44064-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1760469157%3At%3A%D0%9C%D0%B5%D0%B6%D0%B4%D1%83%D0%BD%D0%B0%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D0%B9%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82-%D1%82%D1%80%D0%B5%D0%BA%D0%B5%D1%80%20Rustorka%20%7C%20%D0%A0%D1%83%D1%81%D1%82%D0%BE%D1%80%D1%8C%20%D0%B4%D0%BE%20%D0%BF%D0%BE%D1%81%D0%BB%D0%B5%D0%B4%D0%BD%D0%B5%D0%B3%D0%BE%21\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29fip%281%29ti%281%29\u0026redirnss=1 HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nCookie: yabs-sid=2668515501760469157; i=2JzGz9Siq90e4f85n1k6Do3VYEAYhlxaKwyeSSF5N2tefZzaxt9rSid+pQAXQp7zfs9WkL2Zrh8XRc+YkrlbXpgZRWI=; yandexuid=6982128361760469157; yuidss=6982128361760469157; ymex=1792005157.yrts.1760469157#1792005157.yrtsi.1760469157; bh=YKXBuscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 654\r\nstrict-transport-security: max-age=31536000\r\nx-xss-protection: 1; mode=block\r\nexpires: Tue, 14-Oct-2025 19:12:37 GMT\r\nx-content-type-options: nosniff\r\nlast-modified: Tue, 14-Oct-2025 19:12:37 GMT\r\naccess-control-allow-origin: https://rustorka.com\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"44ee8926c9141322884702e9c4b92188","sha1":"b958cabf93d1a20390d60b1e38ca73d7d2d78c60","sha256":"c20fe099dd3af1e3a6b3e3274d47c676708b812c89c67c701115e377a0a2e754","sha512":"e11cef289a30e24c8197a2d690ec3c72d38ca71c1cffefbd0983f39bcc71ff21041f08cc6b5bab2bb20a87053f8298a2391e9b4808d8759472537832c1e7ea11","ssdeep":"","tlshash":"c1f068a8879d0e39890e0a5001ae375174bc34a4cce57d5466858b944ddff357305fb0","first_seen":"2025-10-14T19:13:06.811142Z","last_seen":"2025-10-14T19:13:06.811142Z","times_seen":1,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/cdn-cgi/rum?","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:38.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\ncontent-type: application/json\r\nContent-Length: 1085\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: gophp=gop; 47d4ecc4464b40b171e31f4cf1cf6ce9=47d4ecc4464b40b171e31f4cf1cf6ce9; _ym_uid=1760469157724974337; _ym_d=1760469157; adrdel=1760469157734; adrcid=AjXzSlQLN2dCvV6u7Gok_pQ; acs_3=%7B%22hash%22%3A%221aa3f9523ee6c2690cb34fc702d4143056487c0d%22%2C%22nst%22%3A1760555557807%2C%22sl%22%3A%7B%22224%22%3A1760469157807%2C%221228%22%3A1760469157807%7D%7D; _ym_visorc=w; _ym_isad=2\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\naccess-control-allow-origin: https://rustorka.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin, accept-encoding\r\naccess-control-allow-credentials: true\r\ncontent-type: text/plain\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnqTEfnPcI1jkfzdXRabUOUU4Jjl25IBm3VNnPmO6yHn3n8Ijr0PdxOO0nbG5yxjBL8ckeuaVBz6dxhf%2F9YdP5VSgtTYIaChDLVg1A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Tue, 14 Oct 2025 19:12:38 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 98e963adbfc74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj1907.online/zDoSJ0_y1S0kFiohzq5yfaOrCb5_IeOoYFqE3iMYND9eRPg9jqKt0xpo4AQ6dI2De0_QIIpL8J5gsAMq2lCXN77JQa8_e4M8W-TfsMsAJEXffFiY9-eXMTQ6ZiYRoUmOvpPSBr2hwV6qiHyKTUECtGA5S-XoMi3tu27pNJCpAFhsN70axi6R-gc_EWu-SQItEPcuWDsQQtXwy0L3r-okuk_Xe4CDmBNCXjIm0sHexO_2wpmw2orjdoJSzKWqqZjIqprwg2YBDxZLvJUBxhxYc_FmCEl6YHHY604vwuL-YkHWAuttOX7ukwjkKSBbibs5GhpqA2Ty2KMxwELZMNkO6GyeAANJqxK8BLjJaODu1XQT095sW0MrUkGuIdHAGy9QURCpxa2xdUAVF9Reqrj3HR0a1G1mhUJfYZpKcqWb3G-1y3vTmeFrltjCPJYijk0Hqmv51-3YWgZUyfiyblV3YjftBLZnkD3GdxQSVfTfUVw?DC=HZFI","fqdn":"aj1907.online","domain":"aj1907.online","tld":"online"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj1907.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 03:34:35 GMT","end":"Tue, 09 Dec 2025 04:31:23 GMT"},"fingerprint":{"sha1":"B9:1E:75:1E:61:7E:44:3F:28:80:DB:25:99:B8:AC:18:35:21:89:B6","sha256":"02:05:B3:6C:A1:77:07:B1:89:6D:69:8B:3C:B3:9B:CA:B0:D8:A9:85:C8:E1:00:D3:FD:EF:92:15:C6:02:93:89"}}},"request":{"raw":"GET /zDoSJ0_y1S0kFiohzq5yfaOrCb5_IeOoYFqE3iMYND9eRPg9jqKt0xpo4AQ6dI2De0_QIIpL8J5gsAMq2lCXN77JQa8_e4M8W-TfsMsAJEXffFiY9-eXMTQ6ZiYRoUmOvpPSBr2hwV6qiHyKTUECtGA5S-XoMi3tu27pNJCpAFhsN70axi6R-gc_EWu-SQItEPcuWDsQQtXwy0L3r-okuk_Xe4CDmBNCXjIm0sHexO_2wpmw2orjdoJSzKWqqZjIqprwg2YBDxZLvJUBxhxYc_FmCEl6YHHY604vwuL-YkHWAuttOX7ukwjkKSBbibs5GhpqA2Ty2KMxwELZMNkO6GyeAANJqxK8BLjJaODu1XQT095sW0MrUkGuIdHAGy9QURCpxa2xdUAVF9Reqrj3HR0a1G1mhUJfYZpKcqWb3G-1y3vTmeFrltjCPJYijk0Hqmv51-3YWgZUyfiyblV3YjftBLZnkD3GdxQSVfTfUVw?DC=HZFI HTTP/1.1\r\nHost: aj1907.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nCookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: *\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccept-ranges: bytes\r\netag: W/\"49-1758201922000\"\r\nlast-modified: Thu, 18 Sep 2025 13:25:22 GMT\r\ncontent-type: image/gif\r\ncontent-length: 49\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2czAWMwcHtUEPkkRDkzXi3mR3zxTwruBBYRds0vioOhPAIKkch9wLlQJ6vBrrPL4ZDo4CRTqaYr%2BDI03t1%2B99D00iMVkHenjsS%2B\"}]}\r\ncf-ray: 98e963a65ffc56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"56398e76be6355ad5999b262208a17c9","sha1":"a1fdee122b95748d81cee426d717c05b5174fe96","sha256":"2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef","sha512":"fd8b021f0236e487bfee13bf8f0ae98760abc492f7ca3023e292631979e135cb4ccb0c89b6234971b060ad72c0ca4474cbb5092c6c7a3255d81a54a36277b486","ssdeep":"","tlshash":"609002438585c491d151c1304814935011b5a5614505134ea6a836adac551a1c800408","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-05-03T14:27:27.723806Z","times_seen":10108,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ad.adriver.ru/cgi-bin/rle.cgi?sid=1\u0026ad=780801\u0026bt=21\u0026pid=3915086\u0026bid=10043329\u0026bn=10043329\u0026rnd=527366301\u0026tuid=1\u0026cfa=1","fqdn":"ad.adriver.ru","domain":"adriver.ru","tld":"ru"},"ip":{"addr":"195.209.109.16","port":443,"asn":52007,"as":"LLC AdRiver","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:37.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adriver.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 12:42:34 GMT","end":"Sun, 19 Apr 2026 12:42:33 GMT"},"fingerprint":{"sha1":"3F:B9:BA:38:47:CE:F2:25:95:F1:35:74:F5:54:EC:0D:58:DB:8A:78","sha256":"A5:6E:66:35:51:56:89:6E:F5:B2:74:73:A6:B4:67:C7:38:C8:A2:1F:53:83:F0:AE:04:AD:58:E8:5A:B5:22:48"}}},"request":{"raw":"GET /cgi-bin/rle.cgi?sid=1\u0026ad=780801\u0026bt=21\u0026pid=3915086\u0026bid=10043329\u0026bn=10043329\u0026rnd=527366301\u0026tuid=1\u0026cfa=1 HTTP/1.1\r\nHost: ad.adriver.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 14 Oct 2025 19:12:37 GMT\r\nContent-Type: text/html ; charset=windows-1251\r\nContent-Length: 383\r\nConnection: keep-alive\r\nETag: \"ApMUriTiZXokAIGG--u9BBA\"\r\nCache-control: max-age=157680000,\r\nPragma: no-cache\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nP3P: policyref=\"//adriver.ru/w3c/p3p.xml\", CP=\"NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA\"\r\nSet-Cookie: cid=ApMUriTiZXokAIGG--u9BBA; expires=Thu, 14 Oct 2027 19:12:37 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure\nuid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru\r\nReferrer-Policy: no-referrer-when-downgrade\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":383,"size_decoded":0,"mime_type":"text/html; charset=windows-1251","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1df876135e5b034c54c594ac22de56bc","sha1":"3e0ad07e8fcab9ca73464290e697b44f363742b5","sha256":"7d74fd0f3e814632b78d15fffeacc6fea84d2ffc0fe26d4f669f4de741063fac","sha512":"c0a9c0fd3059d2fae227f5aa0da69aa87af1bc4da419c768522f982a409f2fa239f05d41f2e9936540ffb33967ce6bc455cb25b448a1a176b985ba4b8ca56630","ssdeep":"","tlshash":"f2e0685698924c4901b0c2322ce0f088fd82618153411a10f4cc304b3ff6b92cdc3b98","first_seen":"2025-10-14T19:13:06.863042Z","last_seen":"2025-10-14T19:13:06.863042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":365,"timings":{"blocked":153,"dns":25,"connect":58,"send":0,"wait":59,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/term.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/term.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1300\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jul 2013 21:04:49 GMT\r\netag: \"51e06f71-514\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 564354\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k03Q5Geww01ftB%2FzNeqa7upe9pvNmcH%2FpXaU%2BwIJDQfNqAQCGDGYZSaywLSXur9IZsokDQ3EnBDQIQMwYKWnun%2Fi8eV1zchHOWM%3D\"}]}\r\ncf-ray: 98e963a3df7e56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1300,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 22 x 22, 8-bit/color RGBA, non-interlaced","md5":"71464ae19f611e24ca96ef356173d13f","sha1":"e4a1aa87031ecb00f25e4ead5a7ff6663a3d6f17","sha256":"4a27d00d5aecf01f3ffcaf0de36105b93cfd2a99c7fa6ca2c8cd5ee0f3787b93","sha512":"4de55a43beae159b821cfac9f74dfa0bff0fd9178a94ad29f7d662361707ebf230968f514d6466c3ea8667bd3e7b7f0ae3481a571add616f12bd65c7317da802","ssdeep":"","tlshash":"bc211ad0f3c574d0e45aa1d50174d118282b27ef1cf3ca4426f82e372ebf9584ad42c4","first_seen":"2025-05-15T14:56:35.331226Z","last_seen":"2026-01-19T17:41:34.801177Z","times_seen":32,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/logo/coy_rustorka.gif","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/logo/coy_rustorka.gif HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 22916\r\nserver: cloudflare\r\nlast-modified: Tue, 04 Dec 2012 16:51:38 GMT\r\netag: \"50be2a1a-5984\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 89312\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZeU4ZTAkCF3f7hVG%2FFuiB%2BWIpmxoyc1iwxQcC4CWyWBIj1TU%2B2XSZA%2BMPMAKbzl38AMJQHkqnrjh3oVXidqTF4SWTBTXcpY8RWM%3D\"}]}\r\ncf-ray: 98e963a3ef9356bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22916,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 400 x 100","md5":"77a5a42f7f15d6352807faa011bf6f69","sha1":"dfba657234a9665f3ecca6f6fae8ba7c2bb6ea3e","sha256":"fdd2db0fd6768f5c455b64959136fa3d07da39e2d69fe9793972b7b7c532efcf","sha512":"59d74ae1cd4ec06f845a5a493c05ae8527222359b071e2612bd9bec15531d1cc3afc36a8cd94ca31db2e6895ebce887f2ea3d3221dba65746a5f6f892c4c43b1","ssdeep":"384:RmryUIRIm+VJrXsDbub7M9yzy/QY+UqjcJuzR21JxyZ8v8qrEROiPg+0FrWi5Q77:REm0juQ7M9wY+UkcSRi7U8kIERD0X5Qv","tlshash":"1fa2e19460911deb86308ed023bc256e62c98d309fd18f97eccafe22d8438d45f2a352","first_seen":"2025-06-22T03:01:55.558513Z","last_seen":"2026-01-19T17:41:34.803631Z","times_seen":25,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/scrolldown.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/scrolldown.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 2552\r\nserver: cloudflare\r\nlast-modified: Wed, 02 May 2012 15:08:46 GMT\r\netag: \"4fa14dfe-9f8\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 427735\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rw7tv305MxulcVGLh2H%2FK6HQh4570HB6f8htVbvkRv4%2BHW2%2BUpSENOr6ADcqKa0%2BIBhO39coFY5sVWAMneiv2eFQlG1I%2BmXesfU%3D\"}]}\r\ncf-ray: 98e963a3ef9756bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2552,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 20 x 34, 8-bit/color RGBA, non-interlaced","md5":"83f344701481231be222982fd12cde73","sha1":"8559b69667e56e2b3f5e18fe09908e819c91a199","sha256":"09f39a3f839cd20fb0e7746f9a2cea53ac7957373e190ef16bd70cf1c2837814","sha512":"665ab484b52c3475ae33894bde548fb838c9ba95cc32bd459bff04a549f55408bd6379fb94b6a9ec48df856c5e634e531d6823558d39cd6cb03d4329ed470158","ssdeep":"","tlshash":"70513a19f551a012426bb28330fe8a3a4a670b42f690ca3cb0e3f63d4e7846d1d1c4ce","first_seen":"2025-05-15T14:56:35.290872Z","last_seen":"2026-01-19T17:41:34.816937Z","times_seen":32,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/search.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/search.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1148\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Aug 2011 21:12:42 GMT\r\netag: \"4e3effca-47c\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 889869\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7qMbVbWKzAuqlLLK3KhTh0raJF47KTHomh0%2FCK9jCmdo%2BrUmyhbyJCfnJt06pVaMTWr9Vjc1t9T8AqXvE5t%2F9pqvOu%2BETRX56Zk%3D\"}]}\r\ncf-ray: 98e963a3df7c56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1148,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"acecf565cb81fa5c682b3ea767c8d285","sha1":"f4e03794ade60fb969acbf081503b20d2a465159","sha256":"c1c59e93d6c5932aa25cf0fe2de7d44fbe2859c9c017c414a5ee1c76e9862d50","sha512":"8b55450707418e70c12760bcbabb59edbc73ec895ebf4d192cd3178e78f2b3d44cb1db5033fcdce4a316aea704f15a5cd172ed40976e5289e1effcf8f11f03ee","ssdeep":"","tlshash":"4f21d73b7ceb8c2d2e8e4ae1523c421540ba10b8661b11049a826f395342431a8481d7","first_seen":"2023-05-10T21:42:38Z","last_seen":"2026-01-19T17:41:34.796819Z","times_seen":65,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/faq.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/faq.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1487\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jul 2013 21:05:20 GMT\r\netag: \"51e06f90-5cf\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 973268\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8U4wsN6vpX4WDvxVmKH%2B76ibVanJApIQKmIWJaFS4ts6DyVFl48OG5n6Qz%2Bazn5MERi2uJw2omSqj%2BenNoY3soHV2qZR3Qn0I50%3D\"}]}\r\ncf-ray: 98e963a3df8456bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1487,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"c90550c98b67f0f45002c082fcb11c8f","sha1":"e0672b355fc6d86c0c0e2af47dce35e57884a64f","sha256":"3a29fca3b77b97cde37b87b368dcbbe9e194ecd278477af420aab6701cc12eb5","sha512":"0ee7190bcd97f528b928f48e71eb400d6642776d8a1e324af28a2fdd6cbcdc27b3fb1af2595db251f6894796c88b8aca8317c014909124d98727d3d23fbf1e7b","ssdeep":"","tlshash":"5731f786f2d202395f8f3d099c23f81256847082c1027c1966c3cdafe2ee45a96f8a38","first_seen":"2025-05-15T14:56:35.248171Z","last_seen":"2026-01-19T17:41:34.807419Z","times_seen":32,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/scrolltopcontrol.js","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/misc/js/scrolltopcontrol.js HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 04 Jul 2013 11:38:43 GMT\r\netag: W/\"51d55ec3-2f4\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 4019506\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sQwEi2Ae%2Fr1z3vrzbA%2FGyfBLONMt789BE4LXvHtNFrDgEzS7EFk5%2Fcp7mOiZqt2yMEKAGemUd9dSJhnqt24Uwqwu9Hg1sKihS6Y%3D\"}]}\r\ncf-ray: 98e963a3ef9856bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":756,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"51e1c39c0b691b2b9e21a26f7b8d5f87","sha1":"59d11c7a5a9f983a2da36ce222a9322ff53e02cb","sha256":"3757857cb421736145108453316258e1e139dadc9daa57680793a166467e98a9","sha512":"392c2977c08c9dc789c7ff5d4daebdb7bac0740d8da242050469925d3b31b8be8aadc4ffc4889227d6fbee2bfbcc1598fa6b7d04d13b8eb1e7a723a1b19c7413","ssdeep":"","tlshash":"67016825b854541552e7f271c57f4604fc6a685b08414a81f4fc1c7e0f7062461aedac","first_seen":"2025-05-15T14:56:35.249337Z","last_seen":"2026-01-19T17:41:34.799686Z","times_seen":32,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tel1mekar.com/n7sG7dUpgEk5I/SsW1ysttitOScy0GrRINSpt?p_id=2018\u0026hold=1.00\u0026subid_4=sitescript\u0026dtv=2\u0026https_only=1\u0026subid_5=rustorka.com","fqdn":"cdn.tel1mekar.com","domain":"tel1mekar.com","tld":"com"},"ip":{"addr":"193.200.65.30","port":443,"asn":6681,"as":"Giveme Cloud Sp Z O O","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tel1mekar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 08:09:24 GMT","end":"Sun, 07 Dec 2025 08:09:23 GMT"},"fingerprint":{"sha1":"03:85:8D:94:25:26:F0:15:53:04:3B:E5:92:2C:61:2A:82:F8:FD:2E","sha256":"04:D2:26:94:1D:DE:F3:53:CF:AD:C7:81:7F:5C:06:1C:DD:E7:68:6B:44:44:1B:7E:BF:51:13:E9:1F:41:24:0F"}}},"request":{"raw":"GET /n7sG7dUpgEk5I/SsW1ysttitOScy0GrRINSpt?p_id=2018\u0026hold=1.00\u0026subid_4=sitescript\u0026dtv=2\u0026https_only=1\u0026subid_5=rustorka.com HTTP/1.1\r\nHost: cdn.tel1mekar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nalt-svc: h3=\":443\"; ma=86400,h3-29=\":443\"; ma=86400,h2=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17617,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (17387)","md5":"250797a3d0200ff4ba03cafbcc780f89","sha1":"ee8d1e5ef88f9b13e041e19cea1d8c0e8225d34f","sha256":"6ec401683c6c84791ca443e54f2ca788805c53eab71bb00b6793ba376316c648","sha512":"1268cb442044e7899e245bd6f4e6378b3966ceec568ff3f85d5ee4ce44c16bd40bc61db567c46c05225c58aba89412b9a961da25175a84feb47cafcc1db35a9c","ssdeep":"384:Hi2sMEEi1XBKUf8Pa76ArROCCkaJJp4zhu4LmhCUqbW:Hi2HiBBK0fWkRO5FQUJ","tlshash":"ee72e8197760603413d251a7e7339b88bb33602eb943013cfac89de6ae5af556267f34","first_seen":"2025-10-14T19:13:07.110802Z","last_seen":"2025-10-14T19:13:07.110802Z","times_seen":1,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":64,"dns":14,"connect":19,"send":0,"wait":20,"receive":0,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/new.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/new.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1502\r\nserver: cloudflare\r\nlast-modified: Sun, 07 Aug 2011 21:48:37 GMT\r\netag: \"4e3f0835-5de\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 374614\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeJr7hwn4%2BGrJZqq2xfR4mBps5rMSTKMJeD4viyJXFJExAZIIxalr0jTHEYG6cJalnJqyWEZPjz%2BPFqrFfw0XSMzWHvxhqs0LRM%3D\"}]}\r\ncf-ray: 98e963a3df8856bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1502,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"d620078163f251cb79d3b377de588cfe","sha1":"152532365bb309e1e5f09b79fd7758fadd41b216","sha256":"e972fcd81a1b5b7dabe846d8f709b235cdba4171543dfe0b8debf157e8a37a96","sha512":"5b200e70bf86f0803b9275f03921f98206cdf95192f14edd3b9cf36e58ce262b7a53b22b2ed4e0912792dd5f6658c235a8ebbd441a6c0f8183a1aeb5dc32fd57","ssdeep":"","tlshash":"80311cd5455dde7a28594e22e68cc528d0c2457adec013604d34c0b3b6d6f1bc60d842","first_seen":"2025-05-15T14:56:35.287008Z","last_seen":"2026-01-19T17:41:34.797827Z","times_seen":32,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"content.adriver.ru/AdRiverFPS.js","fqdn":"content.adriver.ru","domain":"adriver.ru","tld":"ru"},"ip":{"addr":"23.111.96.52","port":443,"asn":39134,"as":"Edinaya Set Limited Liability Company","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adriver.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 12:42:34 GMT","end":"Sun, 19 Apr 2026 12:42:33 GMT"},"fingerprint":{"sha1":"3F:B9:BA:38:47:CE:F2:25:95:F1:35:74:F5:54:EC:0D:58:DB:8A:78","sha256":"A5:6E:66:35:51:56:89:6E:F5:B2:74:73:A6:B4:67:C7:38:C8:A2:1F:53:83:F0:AE:04:AD:58:E8:5A:B5:22:48"}}},"request":{"raw":"GET /AdRiverFPS.js HTTP/1.1\r\nHost: content.adriver.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: application/x-javascript\r\nlast-modified: Thu, 02 Oct 2025 13:21:32 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68de7c5c-bb72\"\r\nexpires: Tue, 14 Oct 2025 20:12:36 GMT\r\ncache-control: max-age=3600\r\naccess-control-allow-origin: https://cs1.ottgoods.ru\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":47986,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (47965)","md5":"b83ab13c197ab4f2b4074cc1d66510ee","sha1":"7cde8ec6af3f0f7034b46ea15640feeece47ff81","sha256":"f009b170005e802470a907b2ae0a0f527e7c324cac0f71acde01ad822b3cf3a1","sha512":"bd04c2c7011de70865ac21ada0f6e4c4b2720ae7339676c7d31a62d5d04c54708460c8c50135fb6c6c89ba9f66dc4861dec7f585ea03d56f3e3aede5d16c9d0c","ssdeep":"768:z/CnCKsCWC2b/27nPJGwPBxeAalQCR1xVHg6XHcvCo1sSDOzpmqA+0J48CEEJvmL:zMCR/27P4+tk46MvN1rDp+0Jis","tlshash":"3d23a6c9f392b03553e3b075543f210bf23a7915649a8440f96ad9d1bc78a8ea233f79","first_seen":"2025-10-06T21:14:00.155751Z","last_seen":"2025-10-14T21:01:47.34071Z","times_seen":12,"resource_available":true,"data":null}},"time_used":255,"timings":{"blocked":92,"dns":26,"connect":42,"send":0,"wait":42,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/watch/57087793?wmode=7\u0026page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A1072331789271%3Ahid%3A127979773%3Az%3A0%3Ai%3A20251014191237%3Aet%3A1760469157%3Ac%3A1%3Arn%3A875016973%3Arqn%3A1%3Au%3A1760469157724974337%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A865%3Awv%3A2%3Ads%3A1%2C202%2C308%2C0%2C29%2C0%2C%2C358%2C24%2C%2C%2C%2C1064%3Aco%3A0%3Acpf%3A1%3Ans%3A1760469155726%3Afip%3A63071953bd429ac229b8062c1fc44064-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1760469157%3At%3A%D0%9C%D0%B5%D0%B6%D0%B4%D1%83%D0%BD%D0%B0%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D0%B9%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82-%D1%82%D1%80%D0%B5%D0%BA%D0%B5%D1%80%20Rustorka%20%7C%20%D0%A0%D1%83%D1%81%D1%82%D0%BE%D1%80%D1%8C%20%D0%B4%D0%BE%20%D0%BF%D0%BE%D1%81%D0%BB%D0%B5%D0%B4%D0%BD%D0%B5%D0%B3%D0%BE!\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952132)fip(1)ti(1)","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:37.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /watch/57087793?wmode=7\u0026page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A1072331789271%3Ahid%3A127979773%3Az%3A0%3Ai%3A20251014191237%3Aet%3A1760469157%3Ac%3A1%3Arn%3A875016973%3Arqn%3A1%3Au%3A1760469157724974337%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A865%3Awv%3A2%3Ads%3A1%2C202%2C308%2C0%2C29%2C0%2C%2C358%2C24%2C%2C%2C%2C1064%3Aco%3A0%3Acpf%3A1%3Ans%3A1760469155726%3Afip%3A63071953bd429ac229b8062c1fc44064-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1760469157%3At%3A%D0%9C%D0%B5%D0%B6%D0%B4%D1%83%D0%BD%D0%B0%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D0%B9%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82-%D1%82%D1%80%D0%B5%D0%BA%D0%B5%D1%80%20Rustorka%20%7C%20%D0%A0%D1%83%D1%81%D1%82%D0%BE%D1%80%D1%8C%20%D0%B4%D0%BE%20%D0%BF%D0%BE%D1%81%D0%BB%D0%B5%D0%B4%D0%BD%D0%B5%D0%B3%D0%BE!\u0026t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(83952132)fip(1)ti(1) HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nset-cookie: yabs-sid=2668515501760469157; Path=/; SameSite=None; Secure\ni=2JzGz9Siq90e4f85n1k6Do3VYEAYhlxaKwyeSSF5N2tefZzaxt9rSid+pQAXQp7zfs9WkL2Zrh8XRc+YkrlbXpgZRWI=; Expires=Fri, 12-Oct-2035 19:12:36 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None\nyandexuid=6982128361760469157; Expires=Fri, 12-Oct-2035 19:12:36 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None\nyuidss=6982128361760469157; Expires=Wed, 14-Oct-2026 19:12:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure\nymex=1792005157.yrts.1760469157#1792005157.yrtsi.1760469157; Expires=Wed, 14-Oct-2026 19:12:37 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure\nbh=YKXBuscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Wed, 18 Nov 2026 19:12:37 GMT; SameSite=None; Secure\nbh=YKXBuscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Wed, 18 Nov 2026 19:12:37 GMT; SameSite=None; Secure\r\nlocation: /watch/57087793/1?wmode=7\u0026page-url=https%3A%2F%2Frustorka.com%2Fforum%2Flogin.php%3Fredirect%3D%2Fforum%2Fmytorrents.php%3Fu%3D2258656p%3A6\u0026charset=utf-8\u0026uah=che%0A0\u0026browser-info=pv%3A1%3Avf%3A81k5o1pwtlanz5m4isuahlzp9cbbz%3Afu%3A0%3Aen%3Awindows-1251%3Ala%3Aen-US%3Av%3A2220%3Acn%3A1%3Adp%3A0%3Als%3A1072331789271%3Ahid%3A127979773%3Az%3A0%3Ai%3A20251014191237%3Aet%3A1760469157%3Ac%3A1%3Arn%3A875016973%3Arqn%3A1%3Au%3A1760469157724974337%3Aw%3A1280x1024%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A865%3Awv%3A2%3Ads%3A1%2C202%2C308%2C0%2C29%2C0%2C%2C358%2C24%2C%2C%2C%2C1064%3Aco%3A0%3Acpf%3A1%3Ans%3A1760469155726%3Afip%3A63071953bd429ac229b8062c1fc44064-0ed8ce9e1e39cec802dafc59181dfc61-a81f3b9bcdd80a361c14af38dc09b309-08cddc828a0a4cecdead9052886a5778-8d2357552742d775381be8c05efc2ed7-b3a4b0ac1b44d5bc13e6d73ffb506aad-61b9878bbce18de73aafc8582a198c0c-5274424d88b08056c17f1a11bd3f2aff-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-861578da3666aba98730162cd5ac0199%3Arqnl%3A1%3Ast%3A1760469157%3At%3A%D0%9C%D0%B5%D0%B6%D0%B4%D1%83%D0%BD%D0%B0%D1%80%D0%BE%D0%B4%D0%BD%D1%8B%D0%B9%20%D1%82%D0%BE%D1%80%D1%80%D0%B5%D0%BD%D1%82-%D1%82%D1%80%D0%B5%D0%BA%D0%B5%D1%80%20Rustorka%20%7C%20%D0%A0%D1%83%D1%81%D1%82%D0%BE%D1%80%D1%8C%20%D0%B4%D0%BE%20%D0%BF%D0%BE%D1%81%D0%BB%D0%B5%D0%B4%D0%BD%D0%B5%D0%B3%D0%BE%21\u0026t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2883952132%29fip%281%29ti%281%29\u0026redirnss=1\r\naccess-control-allow-origin: https://rustorka.com\r\nx-xss-protection: 1; mode=block\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nexpires: Tue, 14-Oct-2025 19:12:37 GMT\r\nstrict-transport-security: max-age=31536000\r\naccess-control-allow-credentials: true\r\npragma: no-cache\r\nlast-modified: Tue, 14-Oct-2025 19:12:37 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":654,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":144,"dns":1,"connect":43,"send":0,"wait":48,"receive":0,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj1907.online/63c0d7d8.js","fqdn":"aj1907.online","domain":"aj1907.online","tld":"online"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj1907.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 03:34:35 GMT","end":"Tue, 09 Dec 2025 04:31:23 GMT"},"fingerprint":{"sha1":"B9:1E:75:1E:61:7E:44:3F:28:80:DB:25:99:B8:AC:18:35:21:89:B6","sha256":"02:05:B3:6C:A1:77:07:B1:89:6D:69:8B:3C:B3:9B:CA:B0:D8:A9:85:C8:E1:00:D3:FD:EF:92:15:C6:02:93:89"}}},"request":{"raw":"GET /63c0d7d8.js HTTP/1.1\r\nHost: aj1907.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: text/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3iAKmPrI04Fjv0K8blNrXZ1DSIHJv1ODyaU3JVVbZZCC555197ppFpWwAzdHeTAipXVmEdOpTonysOZvWFRXCrR7ILgQPv3%2F03cpMag%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\netag: W/\"0079ae4ea3144430e1ae1f40e01c82820\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98e963a4ba4032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37982,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (37982), with no line terminators","md5":"079ae4ea3144430e1ae1f40e01c82820","sha1":"c6166c6f3b04621d55912e502585cb19a220a452","sha256":"f1f0c72555ab2f97bafae8c19caf7f9fcf702a0a238aed1ae2478cf7856b9e59","sha512":"3c177d08621374a81662f11cae37c985a177b9bca6664020e61cb08cb81e641a6cb729a08f290eb2a1facce75b539a308dbf3fa32da8a6f28ea0c2463bd38e15","ssdeep":"768:GDCupNFfmasutoHgigJQPu8L2UcJfxxDY1n:TupyasutoAirPiRYZ","tlshash":"980308d8baa1702993ea04f5817f810bb27648769d0cc0a4e225d9e53d749ac737bf3d","first_seen":"2025-10-14T19:13:06.790664Z","last_seen":"2025-10-14T19:13:06.790664Z","times_seen":1,"resource_available":true,"data":null}},"time_used":269,"timings":{"blocked":109,"dns":9,"connect":3,"send":0,"wait":25,"receive":0,"ssl":118},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/shablon.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/shablon.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 1267\r\nserver: cloudflare\r\nlast-modified: Fri, 12 Jul 2013 21:08:28 GMT\r\netag: \"51e0704c-4f3\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 374614\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qFVq19U0hYCbkiRNBXzEZxiis8EAqLFNrrj6TDUiPbg5ItW1ooJ1eUZx9WnkqXvIhL0VZlEFOr74z6MprFecGy0BTqOLkfrKC%2FM%3D\"}]}\r\ncf-ray: 98e963a3df8656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"8f69e182fa8016911d2e70512d11aea2","sha1":"9fa90dadc02ba104619f1e4775c01503e16deb80","sha256":"aedccf63f7dc28cdc3d92f53cc6156e0a43114c663d35e40faa911d36644b9e3","sha512":"d2698b4c1073b5f0ae0f8948ff4a3a9a3d8f6c28bcc2a46117ab519e1f95a8f3d49c707d2300b27184276d85f3f8877c7cade09a6e347d15836b1450c31fd54a","ssdeep":"","tlshash":"3721e75714fdb90c881c29ae712fc0aeb62f1f809309de932835fc2006b6588d749f62","first_seen":"2025-05-15T14:56:35.289773Z","last_seen":"2026-01-19T17:41:34.794217Z","times_seen":32,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/images/release_dates.png","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/images/release_dates.png HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/png\r\ncontent-length: 7483\r\nserver: cloudflare\r\nlast-modified: Mon, 14 Dec 2015 16:41:38 GMT\r\netag: \"566ef142-1d3b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 482847\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=elGhrGMrgCESD8lp%2BMkp2LaMGqz2rKElvFoWifGbpCOOllRDBsWAufcqA3hgCTSw%2F85gghI%2FjyaO6xyZWnfeY7LVHYht8UUQiAQ%3D\"}]}\r\ncf-ray: 98e963a3ef8f56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced","md5":"dc827a544e368ee5ce89955619a6bdda","sha1":"961ab946f7512c7ddd1a5a781e946c7d66fbb5f0","sha256":"678fbd36e5e66f0e6a17fe9637e930a89362822474bbc8c3538c0ae55f570123","sha512":"75028ed5d7316b340837104ca7f318d498edcbaf1e960fe3d036c070dd9ad1a768f1bc34eb162f52c1dc30bff1ff5818d6737d992144d53832cde17ca360bce9","ssdeep":"192:OLBDgLtL3bYzzs9CQJjvoK6dKPgiKsB2bz:qN+trbYz4oQdvoK6dKobz","tlshash":"83f18ed53c2835db68cba53ea0de71a46d163b9cc7cd5a119ab328d0dcdde4c81b1030","first_seen":"2025-05-15T14:56:35.327562Z","last_seen":"2026-01-19T17:41:34.81449Z","times_seen":32,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/templates/default/images/cellpic3.gif","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/templates/default/images/cellpic3.gif HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/templates/default/css/theme_default.css?v=2\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: image/gif\r\ncontent-length: 371\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Aug 2011 07:43:45 GMT\r\netag: \"4e5c94b1-173\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 4021765\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JxpoUP1BfJJPFp8waq9cUya9qFB1c061FnaKvntidQ%2BUTTRy8VK6XB2iXI%2Btnq4Ul7oflaHmhlImN%2FIHAPevZ%2Fo3z0oobbBkO1k%3D\"}]}\r\ncf-ray: 98e963a4c89f56bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":371,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 8 x 38","md5":"a243db86bd39c6ecadd94b7771ad5d1d","sha1":"4d8f423e4ce3a735ac6b307c295b9bd8596222b4","sha256":"f1a34cdfd27b17525d84def35ecd5da399ac4120b8a087e2c633e0313eee6962","sha512":"aa7404742049b34b493146c8b5a91448dbe510d7f91bdce0a0c2b4bf33428f662cf81aaaa68999a0571b2e9e7c9a887e6e74c4434e2da05247e877b2172baf66","ssdeep":"","tlshash":"01e0eb80e35041c1ec830ef45f8f8c28e2760cd8732b2b28a92ae08a13daa308302182","first_seen":"2025-03-09T19:09:56.902702Z","last_seen":"2026-01-19T17:41:34.800197Z","times_seen":33,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aj1907.online/zAL1d1VMsfGR8VgrXUtSeF_82a6S9F8yZi9Jy0iNIsBeWuxes6rcOKyIQ7C8UZQnwvyk2-3NK1vGdHD1sJCi4Gvg0MyTMK9TMBsIlZWO7K1mNKVRLQUdacqzahBDKj4ffyZ9-BtF6YLoGcYBISnsYrqzmWpfyJ4ALzSP1su8fuPNMx9r_w1tT6WbLt_Y-VHgQTSYdCXME3PalFbirXdG3fIoYHidaSJQQqyzNeDVl5sDrJz5g2E2a_6noLE3-1n4fh8Nc4wbeOCNBHqgwqfSG66ItiELR9RP0jWyYsT-aNOmKnDU0rAE_Z8ZA0zEp9wOxUDbBk2si-4IYeIGwTitEJ64taoZ1O30fmgvL3fsvC0MGwTWKpLhXHPRwvGOl1jBdqPS_E5isT3Ejpx5kN3M-_AstmuWBvsSKtVpL7A_kl--l7A-5P6-f7M509snXLL1pteBb66eMTZwCa1J253e1_2owcrEmKBS4d3IBYGroY5GjqsPhvMy2V3-eapUugVgo6tiiwx2TZd0WHgD_-7wiXDvqcxw1d4eP8dIOOtj06Bu6vGM43oHEcvRjVLhOen8mRy8FJBIs1TzpUlGgflzFB5ARqEzc6KS7LYNgPKCGd1HfzrdaP0p85qgCAghZaGENVHLa?","fqdn":"aj1907.online","domain":"aj1907.online","tld":"online"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.791Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj1907.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 03:34:35 GMT","end":"Tue, 09 Dec 2025 04:31:23 GMT"},"fingerprint":{"sha1":"B9:1E:75:1E:61:7E:44:3F:28:80:DB:25:99:B8:AC:18:35:21:89:B6","sha256":"02:05:B3:6C:A1:77:07:B1:89:6D:69:8B:3C:B3:9B:CA:B0:D8:A9:85:C8:E1:00:D3:FD:EF:92:15:C6:02:93:89"}}},"request":{"raw":"POST /zAL1d1VMsfGR8VgrXUtSeF_82a6S9F8yZi9Jy0iNIsBeWuxes6rcOKyIQ7C8UZQnwvyk2-3NK1vGdHD1sJCi4Gvg0MyTMK9TMBsIlZWO7K1mNKVRLQUdacqzahBDKj4ffyZ9-BtF6YLoGcYBISnsYrqzmWpfyJ4ALzSP1su8fuPNMx9r_w1tT6WbLt_Y-VHgQTSYdCXME3PalFbirXdG3fIoYHidaSJQQqyzNeDVl5sDrJz5g2E2a_6noLE3-1n4fh8Nc4wbeOCNBHqgwqfSG66ItiELR9RP0jWyYsT-aNOmKnDU0rAE_Z8ZA0zEp9wOxUDbBk2si-4IYeIGwTitEJ64taoZ1O30fmgvL3fsvC0MGwTWKpLhXHPRwvGOl1jBdqPS_E5isT3Ejpx5kN3M-_AstmuWBvsSKtVpL7A_kl--l7A-5P6-f7M509snXLL1pteBb66eMTZwCa1J253e1_2owcrEmKBS4d3IBYGroY5GjqsPhvMy2V3-eapUugVgo6tiiwx2TZd0WHgD_-7wiXDvqcxw1d4eP8dIOOtj06Bu6vGM43oHEcvRjVLhOen8mRy8FJBIs1TzpUlGgflzFB5ARqEzc6KS7LYNgPKCGd1HfzrdaP0p85qgCAghZaGENVHLa? HTTP/1.1\r\nHost: aj1907.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rustorka.com\r\ncontent-encoding: br\r\ncontent-type: application/json;charset=UTF-8\r\nset-cookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; SameSite=None; Secure; Path=/; Domain=aj1907.online; Expires=Wed, 18 Nov 2026 19:12:36 GMT\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkJanccz0OUpZ50d69KbqtxwxssvBf4qDzPvnn8fRadhGMBFGF%2FUqjx3uqJRFMXel8%2FxpkMTO1qLDU7gBsGNyBstTBpcDGPqqVXe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98e963a5bfd156b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":709,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"69ed7caab9f3500299202d8d69ea1c1c","sha1":"186e11201a991899710230738aa571fde545af5a","sha256":"69936d67a9aefe1926e2804a9cb35f9ee849864e2f33ac48c227508a59272a5b","sha512":"985135d4ffa5dba7c733be0dce713baa3789e561d940dbc4467577e9915f8db40d0fcca44a00aea514738e5a1b86237eb5cdc01b402c8f10b902cc4fc0cd079c","ssdeep":"","tlshash":"5f0199ca1fd1d705a2cd02c13567d5a537845310adc2cd36e215a40d30583e00668d9b","first_seen":"2025-10-14T19:13:07.216848Z","last_seen":"2025-10-14T19:13:07.216848Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mc.yandex.ru/metrika/advert.gif","fqdn":"mc.yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"87.250.250.119","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:37.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mc.yandex.ru","organization":"YANDEX LLC"},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Sat, 16 Aug 2025 21:04:26 GMT","end":"Mon, 26 Jan 2026 20:59:59 GMT"},"fingerprint":{"sha1":"D5:81:10:72:92:60:58:7F:80:93:7E:45:E9:F2:3C:B1:71:E4:DE:01","sha256":"20:E7:5E:F7:C1:4C:FA:9B:3C:3A:CE:9D:DE:4D:CB:D9:73:21:D5:25:E5:F7:14:4F:43:D7:68:E1:B7:DA:3C:43"}}},"request":{"raw":"GET /metrika/advert.gif HTTP/1.1\r\nHost: mc.yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 43\r\netag: \"68d3edd2-2b\"\r\ntiming-allow-origin: *\r\naccept-ranges: bytes\r\nset-cookie: bh=YKXBuscGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==; Path=/; Domain=.yandex.ru; Expires=Wed, 18 Nov 2026 19:12:37 GMT; SameSite=None; Secure\r\naccess-control-allow-origin: *\r\nlast-modified: Wed, 24 Sep 2025 13:10:42 GMT\r\nexpires: Tue, 14 Oct 2025 20:12:37 GMT\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncache-control: max-age=3600\r\nstrict-transport-security: max-age=31536000\r\ndate: Tue, 14 Oct 2025 19:12:37 GMT\r\ncontent-type: image/gif\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"df3e567d6f16d040326c7a0ea29a4f41","sha1":"ea7df583983133b62712b5e73bffbcd45cc53736","sha256":"548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87","sha512":"b2ca25a3311dc42942e046eb1a27038b71d689925b7d6b3ebb4d7cd2c7b9a0c7de3d10175790ac060dc3f8acf3c1708c336626be06879097f4d0ecaa7f567041","ssdeep":"","tlshash":"c2900003caa08002c2a2c0300a0a03002f88a2300228030e80bc30acec3a3a22c02000","first_seen":"2023-04-05T03:49:37Z","last_seen":"2026-05-03T15:40:44.195055Z","times_seen":99276,"resource_available":true,"data":null}},"time_used":381,"timings":{"blocked":104,"dns":1,"connect":43,"send":0,"wait":171,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ev.adriver.ru/cgi-bin/rle.cgi?sid=1\u0026ad=774375\u0026bt=21\u0026cid=AjXzSlQLN2dCvV6u7Gok_pQ\u0026custom=180=1\u0026pass=AjXzSlQLN2dCvV6u7Gok_pQ","fqdn":"ev.adriver.ru","domain":"adriver.ru","tld":"ru"},"ip":{"addr":"195.209.109.26","port":443,"asn":52007,"as":"LLC AdRiver","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:37.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adriver.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 12:42:34 GMT","end":"Sun, 19 Apr 2026 12:42:33 GMT"},"fingerprint":{"sha1":"3F:B9:BA:38:47:CE:F2:25:95:F1:35:74:F5:54:EC:0D:58:DB:8A:78","sha256":"A5:6E:66:35:51:56:89:6E:F5:B2:74:73:A6:B4:67:C7:38:C8:A2:1F:53:83:F0:AE:04:AD:58:E8:5A:B5:22:48"}}},"request":{"raw":"GET /cgi-bin/rle.cgi?sid=1\u0026ad=774375\u0026bt=21\u0026cid=AjXzSlQLN2dCvV6u7Gok_pQ\u0026custom=180=1\u0026pass=AjXzSlQLN2dCvV6u7Gok_pQ HTTP/1.1\r\nHost: ev.adriver.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nCookie: cid=AjXzSlQLN2dCvV6u7Gok_pQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nDate: Tue, 14 Oct 2025 19:12:37 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nCache-control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache;\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":326,"timings":{"blocked":132,"dns":5,"connect":61,"send":0,"wait":59,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/templates/default/css/main.css?v=2","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.464Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/templates/default/css/main.css?v=2 HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 24 Dec 2015 09:38:49 GMT\r\netag: W/\"567bbd29-eea0\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 953429\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0LRuYMHl0QxMB%2B6nMmC26%2BuUVcAn5w9sRva9F8C%2FCSVj%2BqliWxVlaIIFwME1VGeKBysCTo44XFCZWS8EJ7r3hJy%2FdWhKmRsHjZI%3D\"}]}\r\ncf-ray: 98e963a3cf6656bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61088,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (698), with CRLF, CR, LF line terminators","md5":"cd598c7d60f15616a56674a73c4b5a58","sha1":"de53b7d363805b7e8f79cd5be266ac1d6ffaad5c","sha256":"820529bccd088ad00cb9ee520ba564190aa1b3a8a8c9224382759a57b35e4052","sha512":"5eb503a005fd50fef5f88ddb12e7ce0e5411f5e3cab242d5def77d3a16a1aa9ce560fcdbdd028050872218066161839d0ebd701d24fd30bb7603296f4286af4c","ssdeep":"768:IIYT31JfnBtFrduOYNxe8zghqXiK9HuP/MljR0jjSj:I9JzrdsxSs9H1SnSj","tlshash":"14537367ae8121057133c7b4f723e7aafb3e0206a6024b79bdfc25649309be6513db54","first_seen":"2025-05-15T14:56:35.253674Z","last_seen":"2026-01-19T17:41:34.818513Z","times_seen":32,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/favicon.ico","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:37.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/favicon.ico HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487; gophp=gop; 47d4ecc4464b40b171e31f4cf1cf6ce9=47d4ecc4464b40b171e31f4cf1cf6ce9\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 14 Oct 2025 19:12:37 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Fri, 18 Jun 2010 17:08:09 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: br\r\nage: 763972\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\netag: W/\"4c1ba7f9-57e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vbg5rDa7KnsAsxBt1c3WsgaTKPesIyDNHA%2FUY87r5JsxWXSpZMoPcN0pTEAbhutGOLbOFT9a3ILArJHBarRynETfiKIuGImvRwJZGA%3D%3D\"}]}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-ray: 98e963a7ff124c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16","md5":"522312a38d10c7c02dc2475a76f4029d","sha1":"5ac22f4b814ef30137f784b21449b19d03b70566","sha256":"d028418c26e96b0ddff45a695a3d786c9051e406cf5ed753293fa260cf44a417","sha512":"37aaf6137c0f4c93a1f2e8c9fe51330c0e9b7ae26dc8ca1dea4d0b55d02d4e56f487b4aa061d96761ba357ad3114d251570fc02c8ae8f6804fddc4272c75a366","ssdeep":"","tlshash":"b3210582354ad021fe6d5935cc5897d82f18d255c1e748d744549cfa148e249ace14d0","first_seen":"2025-05-15T14:56:35.275386Z","last_seen":"2026-01-19T17:41:34.82328Z","times_seen":32,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/yandex-metrica-watch/tag.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.175.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.709Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/yandex-metrica-watch/tag.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 103389\r\ncf-ray: 98e963a5ea2fb4ee-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.408.0\r\nx-jsd-version-type: version\r\netag: W/\"40dca-AQ4RdJpoR/FSEwIritYzjcECQJk\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220169-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 5180\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=n14FZggc2Q1q5WprK8jkNdHpWAPoTBKWxjnMyJIYrV%2FR0tXyDiGpNVlLvm1YramAaiTCKdid5QBSJ719LqdaZanWS%2FpZjyETl5mN3uKq6Zo2rfsI00dbRbEfNXbuPkZSizE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":265674,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (675)","md5":"cc6ec7769bf3097669d6bfca7e528e69","sha1":"599c7861f5fb06a3db41cf09d4eee08c84dad854","sha256":"6acb16c41963f237f77a5fcb8a1403a238a076826ce80c163fc2f0407fde32fb","sha512":"51ffa167cfb32be1252a11881989cbaf2001432271f647f07f8a900e3caea7bfee82d7b50f8799f6e078b2c7303fe48a8f6e8a0e7531c5cde59b5b8d517bfe5e","ssdeep":"3072:qS/erQP6UJTutGN6+rSoUa3HoNLuJAjQh7j53EIbl3rD9Q9EiRi4rlJP4:qS2rQS4i4N6WSIo95jOyylbDhiRTr34","tlshash":"cb44d6dd76827476937334b4902f000f71beaca6f14c8955e186e9d93e789a89237f2c","first_seen":"2025-10-13T20:58:13.113782Z","last_seen":"2025-10-21T00:20:41.773134Z","times_seen":255,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":74,"dns":1,"connect":1,"send":0,"wait":17,"receive":5,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aj1907.online/zwsOGsbTe014rRtYym68DiG4_e0aXukkh6xCNU8Hr-CkcUuRjkjFInD4P7OwER8wtewwL4pKrG6B4SzZS6mumOOK9Ml7_uKZtFpiDVlhFoup1nH9kBuiPHobdJtkug1EeffySfd6boekFx2JKeKincaa6xM-O7rursw1KGLCpu37rAqOZeNBwZNEk62W_TAj0aWUClpCsRk821IDnScslDlhUTqZawRx6vRxaqwGrJVg0hAtSDePdbz7Tze-OYu_76Z6wM8to2QTFbu_LWM5kyjXfEGt5bSE7nhmoWtNqsI0EqE0YKUtLTEqJJnFFNlDJhw7mqvOyQuosi8gHFdlSY3PiQSfNzV3XosNt6_qpzn9OI02aXXZyVOIhRuWzsB9RMZt3I3P4_6lHRNyHha6F1kL3p26hw1YW4TA77B4zyUeKIU-bx5UWYZ_ln2EL_mszexMStQgN0jpTJOmkRENdaSY7cCHHVaIPIM8HFeQQ1uurtrBPmadz9O9wqvpH96a-ItPzwv-52Gez5TLf2gzF7tZ6cP9gy6sTMrHgFJ43vXfjynFOFKkoU0NkZomsFIpW2VXDfiPk46FsJ8W3Y53MdCmY7EygzkMYb_yxEFW7LJUWnpIFZUPuTtAuUFVbZmhfVHPf?","fqdn":"aj1907.online","domain":"aj1907.online","tld":"online"},"ip":{"addr":"104.21.49.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.789Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aj1907.online","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 10 Sep 2025 03:34:35 GMT","end":"Tue, 09 Dec 2025 04:31:23 GMT"},"fingerprint":{"sha1":"B9:1E:75:1E:61:7E:44:3F:28:80:DB:25:99:B8:AC:18:35:21:89:B6","sha256":"02:05:B3:6C:A1:77:07:B1:89:6D:69:8B:3C:B3:9B:CA:B0:D8:A9:85:C8:E1:00:D3:FD:EF:92:15:C6:02:93:89"}}},"request":{"raw":"POST /zwsOGsbTe014rRtYym68DiG4_e0aXukkh6xCNU8Hr-CkcUuRjkjFInD4P7OwER8wtewwL4pKrG6B4SzZS6mumOOK9Ml7_uKZtFpiDVlhFoup1nH9kBuiPHobdJtkug1EeffySfd6boekFx2JKeKincaa6xM-O7rursw1KGLCpu37rAqOZeNBwZNEk62W_TAj0aWUClpCsRk821IDnScslDlhUTqZawRx6vRxaqwGrJVg0hAtSDePdbz7Tze-OYu_76Z6wM8to2QTFbu_LWM5kyjXfEGt5bSE7nhmoWtNqsI0EqE0YKUtLTEqJJnFFNlDJhw7mqvOyQuosi8gHFdlSY3PiQSfNzV3XosNt6_qpzn9OI02aXXZyVOIhRuWzsB9RMZt3I3P4_6lHRNyHha6F1kL3p26hw1YW4TA77B4zyUeKIU-bx5UWYZ_ln2EL_mszexMStQgN0jpTJOmkRENdaSY7cCHHVaIPIM8HFeQQ1uurtrBPmadz9O9wqvpH96a-ItPzwv-52Gez5TLf2gzF7tZ6cP9gy6sTMrHgFJ43vXfjynFOFKkoU0NkZomsFIpW2VXDfiPk46FsJ8W3Y53MdCmY7EygzkMYb_yxEFW7LJUWnpIFZUPuTtAuUFVbZmhfVHPf? HTTP/1.1\r\nHost: aj1907.online\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\ncache-control: no-cache, no-store, must-revalidate\r\npragma: no-cache\r\nexpires: Thu, 01 Jan 1970 00:00:00 GMT\r\naccept-ch: Sec-CH-UA-Full-Version, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version\r\npermissions-policy: *\r\np3p: CP=\"CAO PSA OUR\"\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://rustorka.com\r\ncontent-encoding: br\r\ncontent-type: application/json;charset=UTF-8\r\nset-cookie: UUID=8b765359-edd1-5c8a-9867-ae225b688f1a; SameSite=None; Secure; Path=/; Domain=aj1907.online; Expires=Wed, 18 Nov 2026 19:12:36 GMT\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDOGkbqELE1fklZUFwOjDdb62CJaBZ3OoXnXp0ZkizT1ScHn5sxWLAYYhTF%2FJPZYLnnI%2FRqSQADQzrZA%2B57s2OsiW2ZY%2B3d%2BogM5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 98e963a5bfce56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":707,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"9dda87dacda3a8a8bdf5555466086ea0","sha1":"53103c88c8e7e48075949eb3704155194367fd4f","sha256":"8f5427a49fbe32bf565406307715b3f0102e3b6698b1e33dc067b6758f240b82","sha512":"5a0bc93248a79e038f8c1f14d235b7bf5b0e11b7c4c997e9f00da2b62162f2231b49e9c017d0b995cf15f284b1112facb0bc23262ec9d19a477a8e9d84c121a4","ssdeep":"","tlshash":"310144c1dda2c7fe8990c400246f7b618fc44171cb16e718e295548075893d87a11b12","first_seen":"2025-10-14T19:13:07.292318Z","last_seen":"2025-10-14T19:13:07.292318Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"videoroll.net/vpaut_option_get.php?pl_id=29173","fqdn":"videoroll.net","domain":"videoroll.net","tld":"net"},"ip":{"addr":"82.202.165.19","port":443,"asn":29182,"as":"JSC IOT","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"videoroll.net","organization":""},"issuer":{"commonName":"GlobalSign GCC R6 AlphaSSL CA 2025","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 21 Jul 2025 09:28:20 GMT","end":"Sat, 22 Aug 2026 09:28:19 GMT"},"fingerprint":{"sha1":"8C:AF:96:78:0B:F3:EF:64:90:78:DE:97:85:F6:B1:B7:1F:AC:AA:90","sha256":"78:57:71:F6:CA:D5:2F:2F:80:0E:A0:CE:05:D4:6B:4D:B6:B0:2C:B9:05:91:B1:0B:60:BA:97:EC:69:E3:42:C8"}}},"request":{"raw":"GET /vpaut_option_get.php?pl_id=29173 HTTP/1.1\r\nHost: videoroll.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Tue, 14 Oct 2025 19:12:36 GMT\r\nContent-Type: text/json;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: *\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/json; charset=UTF-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-03T16:32:07.917373Z","times_seen":616289,"resource_available":true,"data":null}},"time_used":136,"timings":{"blocked":37,"dns":0,"connect":29,"send":0,"wait":33,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustorka.com/forum/misc/js/jquery.pack.js?v=2","fqdn":"rustorka.com","domain":"rustorka.com","tld":"com"},"ip":{"addr":"104.21.52.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustorka.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 13 Sep 2025 20:09:07 GMT","end":"Fri, 12 Dec 2025 10:02:58 GMT"},"fingerprint":{"sha1":"E7:DA:0B:D1:80:71:29:EB:95:8B:B4:70:B5:DC:C1:D5:62:8B:05:C6","sha256":"31:0E:83:6A:EC:7C:AC:0D:85:0B:6A:E2:FB:B5:49:35:D6:59:1C:5B:5D:9E:64:AF:0D:BF:97:20:DF:45:2C:DC"}}},"request":{"raw":"GET /forum/misc/js/jquery.pack.js?v=2 HTTP/1.1\r\nHost: rustorka.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6\r\nCookie: bb_test=593665487\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 31 Jul 2020 13:28:40 GMT\r\netag: W/\"5f241c88-19777\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 4200671\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uyCf1VGoYjoZhHsy3zntvv%2B417ogipDHwNT71d%2F5dSgeVXbSosnQ0S28D%2B0YMj1WeT%2BdoG9TPD7aps3hbYvxo0boGNEAInzS6Ag%3D\"}]}\r\ncf-ray: 98e963a3cf6956bf-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":104311,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65497)","md5":"68b82e48569e23e76ef073f2be2b4b82","sha1":"34ee44c208c769a514fbb1cc52740c1884b77134","sha256":"1c54dde49999f9366ece05f6f3cfe5ec3cbceb7fe2be02f6a188f4db758a6a51","sha512":"644d4a487e891ef6664a50cb92fd634d6c17dd60b41df777ff844f98ec1f12a9a81704dc6160b0f0a37a200174c51590871d0af6a273fd0e20ac0863c0ab7e71","ssdeep":"1536:dqPSu6aXlmaGWfiI7elzk3JqfuoN3b9TV67+xjZYpCrFSnPj7wtQBxA4m9YOmtdJ:ddFKlVeW3gxFSnwtMxA4m9qjGwgPy","tlshash":"87a329d9b2c3317383e770b854af020bb17a68a6654c4860f06cd8e5adb4e8554bbf7d","first_seen":"2025-05-15T14:56:35.269735Z","last_seen":"2026-01-19T17:41:34.813944Z","times_seen":32,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-14","alert":"Sinkholed","trigger":"rustorka.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.79.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:36.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 24 Aug 2025 02:39:12 GMT","end":"Sat, 22 Nov 2025 03:39:06 GMT"},"fingerprint":{"sha1":"B4:6C:D2:16:CA:52:EE:BD:22:D7:B4:2C:64:FF:A5:EF:67:D8:E1:F8","sha256":"FF:3A:23:84:D6:B2:73:DF:50:6E:1A:45:A4:AB:03:37:0B:C4:4A:8E:82:12:99:10:80:A2:F7:FC:71:E3:BA:1D"}}},"request":{"raw":"GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://rustorka.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 14 Oct 2025 19:12:36 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2024.6.1\"\r\nlast-modified: Thu, 06 Jun 2024 15:52:56 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98e963a56a64712d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19948,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19948), with no line terminators","md5":"ec18af6d41f6f278b6aed3bdabffa7bc","sha1":"62c9e2cab76b888829f3c5335e91c320b22329ae","sha256":"8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f","sha512":"669b0e9a545057acbdd3b4c8d1d2811eaf4c776f679da1083e591ff38ae7684467abacef5af3d4aabd9fb7c335692dbca0def63ddac2cd28d8e14e95680c3511","ssdeep":"384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65","tlshash":"8d92d7def645723613f76076913f220b733b35a528068459812adbc22c3d98f6267f6e","first_seen":"2024-06-07T09:21:23Z","last_seen":"2026-05-03T16:28:23.364852Z","times_seen":334655,"resource_available":true,"data":null}},"time_used":438,"timings":{"blocked":183,"dns":1,"connect":3,"send":0,"wait":17,"receive":0,"ssl":229},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ev.adriver.ru/cgi-bin/rle.cgi?sid=1\u0026ad=790715\u0026bt=21\u0026cid=AjXzSlQLN2dCvV6u7Gok_pQ\u0026custom=180=1\u0026pass=ifvfq6stnriuytrsmrbxmvrwou3uo33ll5yfc---","fqdn":"ev.adriver.ru","domain":"adriver.ru","tld":"ru"},"ip":{"addr":"195.209.109.26","port":443,"asn":52007,"as":"LLC AdRiver","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustorka.com/forum/login.php?redirect=/forum/mytorrents.php?u=2258656p:6","date":"2025-10-14T19:12:37.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.adriver.ru","organization":""},"issuer":{"commonName":"GlobalSign GCC R3 DV TLS CA 2020","organization":"GlobalSign nv-sa"},"validity":{"start":"Tue, 18 Mar 2025 12:42:34 GMT","end":"Sun, 19 Apr 2026 12:42:33 GMT"},"fingerprint":{"sha1":"3F:B9:BA:38:47:CE:F2:25:95:F1:35:74:F5:54:EC:0D:58:DB:8A:78","sha256":"A5:6E:66:35:51:56:89:6E:F5:B2:74:73:A6:B4:67:C7:38:C8:A2:1F:53:83:F0:AE:04:AD:58:E8:5A:B5:22:48"}}},"request":{"raw":"GET /cgi-bin/rle.cgi?sid=1\u0026ad=790715\u0026bt=21\u0026cid=AjXzSlQLN2dCvV6u7Gok_pQ\u0026custom=180=1\u0026pass=ifvfq6stnriuytrsmrbxmvrwou3uo33ll5yfc--- HTTP/1.1\r\nHost: ev.adriver.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustorka.com/\r\nCookie: cid=AjXzSlQLN2dCvV6u7Gok_pQ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 204 No Content\r\nDate: Tue, 14 Oct 2025 19:12:37 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:00 GMT\r\nCache-control: no-cache, max-age=0, must-revalidate, no-store\r\nPragma: no-cache;\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-03T16:30:47.886967Z","times_seen":14589457,"resource_available":true,"data":null}},"time_used":328,"timings":{"blocked":133,"dns":6,"connect":61,"send":0,"wait":57,"receive":0,"ssl":66},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}