{"report_id":"8f0ef32c-2bdb-4486-bc84-9f3bd4c756a8","version":6,"status":"done","tags":[],"date":"2025-12-20T17:01:23Z","url":{"schema":"http","addr":"2025rkt.vip/","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"104.21.27.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"2025rkt.vip/home","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"title":"Home","dom":{"size":110063,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (65243)","md5":"6a7e9ee5cfeddbe3d85f47212b658737","sha1":"f793e8d4fa5de4fad2e941f6d609a9c8485bc967","sha256":"f09f127db6e3ca949eface786821072b112780f02150f32121ec077259748a27","sha512":"ab4459cdadbdced4f4463c1794496d3d44a1872cad2a8582bdd5c8611a83598026bf7f17deead7d22ba5e42201be6b20be942b05cb1d6498d8ed05f3400bb1d7","ssdeep":"384:EXKyv8cLBDHMGYeklBII3G/AxtIhfNLScLAMMPLoh8ycL3jc6ShveNksscS:AKxaBLMGTkXII3GXPkykQ6ShGNk/t","tlshash":"76b3e1318157307b66476d99b0206f5e73d6c30cda2b450423fc6ba6efe7da0cd58aa8","dom_hash":"domhash4c9e746fbdb91959aa64e96029c1131e","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"2025rkt.vip/","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"104.21.27.207","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-24T17:01:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":6}},"detection":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip/","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com","meta":null}],"urlquery":null},"summary":[{"fqdn":"2025rkt.vip","ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-05","domain_rank":0,"first_seen":"2025-12-19T22:21:42.736933Z","last_seen":"2025-12-19T22:21:42.736933Z","alert_count":809,"request_count":162,"received_data":3210693,"sent_data":72019,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"at.alicdn.com","ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"domain_registered":"2008-06-25","domain_rank":96084,"first_seen":"2013-11-28T05:03:29Z","last_seen":"2025-12-15T04:31:52.561754Z","alert_count":0,"request_count":1,"received_data":56831,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"2025rkt.vip/","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"638773db6f487d46eb8203ac5c31c8a1","sha1":"c1d1b80815fd58e5971c41e7105de0d7a90ef05d","sha256":"8bf81a2a70f1ede29a44f33ccd3769055bb8b277b936de3bc849968286a2dd94","sha512":"e71718f3c157da84ef12d61e382cdf58a569d566b13217821293691bdbd5e62104cc32d82bc50e456967ed182da3b725f3d872f1642cff979c320b121a11087c","ssdeep":"","tlshash":"629002960120204c1d854480d6562807a30b404d058cd0cab1094e0a27800ecb0971d5","size":55,"data":"","first_seen":"2025-09-22T04:07:33.75188Z","last_seen":"2026-06-20T22:23:27.433127Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-vendors.ff10c28c.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ccbc24cfb6cd285dcce39469f1200fc","sha1":"0606568c8e73c11c64ead42e51fb2cc9ba048634","sha256":"c14cd07dde8613b7bf9a5470d89d0e114fbc6de76d8501007d1151c030c6b04e","sha512":"aacbe393c96dfca998e4bcffe5a69217a1289d89246f645955f8306028e9667377fc298a4000f0c86587aa6f5cd8bbc46a8a4e726c6872b269d72d3d67bdd914","ssdeep":"6144:k+A2a4W2qLU6ae5vPw31i0iCbgnBikiwWk7AQXva/Vk:LW2q6SQpkiw5nva/q","tlshash":"98b40889f2c5b06113eb70f4802f160bb2376959b40a84ecf665f8e5ac7995e512bf3c","size":528252,"data":"","first_seen":"2025-11-09T09:10:19.132124Z","last_seen":"2025-12-28T08:10:38.64355Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/app.69feadef.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"579834ee12fbc5b60881745f70d7cfdf","sha1":"19e630622a224e23cb50b32798e4da9542f33a77","sha256":"744ff1f99eb4aad1f74d84fc6b141eaf38ce51e08b12fcb04537a39f97ee6558","sha512":"21a2105776ea373a0053d6a233fd976d52b79b2953325c8c741100aa546644204b387b28df4b4cb8dcbf9e8f4b5e1e57c431e2756a18c63e31cdccad554a3a16","ssdeep":"6144:5lQnmYCRM0FlDTBMBlPe6rIp8Dy9sOlJB7DxqtND4/GJjVrcktv5q+V:GmbRM0FlDTBMBlPe6sT3JB7DxqtNMuJR","tlshash":"2f84599ef2c578b18d96602f934b3235f2311c73b602d5d46fbea4d366f5e05821aa38","size":374649,"data":"","first_seen":"2025-11-09T09:10:19.156813Z","last_seen":"2025-12-28T08:10:38.59033Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-1f479b7f.de30d99e.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"92b80b484165fe14bd72154fe7ef0a0d","sha1":"b4ddf5ef490d14d7579b7cbf0305de6986c1e9a5","sha256":"2ca121db59faea15b4102fd3fe5f4174f7182585ccac96526745fea42f435066","sha512":"769a278e5b7cff477d139c19310683455bf3134421f11072b8784a43262e80ef39f7e5d7c8f2cd88902e099edc5da58062886a43f208fcd106da8dd2c3b2c85f","ssdeep":"768:8zzzzzzzzzzzzzzzz2u46bX340sXIGYsO7LMGTkppxjSecuBaCGrFuBgy5j02tZb:8zzzzzzzzzzzzzzzz2IbXo0bkSLMLP3X","tlshash":"72f2d1b53e2ed9f161a39974b42771291cf2083f920c52d197813d0de9e85ecbe2e5e8","size":34843,"data":"","first_seen":"2025-10-03T18:28:47.240858Z","last_seen":"2025-12-28T08:10:38.612823Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"2025rkt.vip/img/av-15.f6133c31.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-15.f6133c31.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2399\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rbAzfXyB5ZCLb4hFy3bs2rUFzSJIZkEhuJZe%2FWNvtxbMrNmRB933P0Q85GvlWRjLzCI1Pt76SBp%2BQNM8DRDSmCD5d563Nft4g5jm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30c9bb20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"f6133c3114a3fdf598fa08adf167f8d5","sha1":"e361e941ca67a4bd41d5acc1b36dc18e112026a4","sha256":"89e630f435b80d3033e4ed05a56d62a34a4abdc396a160b08a2254f53abe305c","sha512":"d9ffaacf335273eb2accd9be33664fe76630ee0abfa9be6e4e9e4853d105fb4b78186ba7e4fd81575f3b19b0620f570c11227f52368d2a5afb692dbad2b71733","ssdeep":"192:kejcxhIHyH93V54EufpTyIlNjEACk3QlbiuEVwxVCpbSIrJ4bRf:tKFH9AE2p+IlNjjQcVMCNSmGbN","tlshash":"c212b0fb39fabc54e68716b281e8ab35392d982f7114478c8106d4179be1020517ea39","first_seen":"2025-02-05T03:06:17.329182Z","last_seen":"2026-07-14T16:42:41.66734Z","times_seen":36,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-17.c8114b85.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-17.c8114b85.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2575\"\r\nexpires: Mon, 12 Jan 2026 06:57:01 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 641040\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5iwo6WQK4eL2I3I0K5VjXi8oVLrC7jP5DmiD1jXvSZ7%2BXuINmHYwM9kMxzEGCXow5cBCUhDWbbfy6Ps5%2Bsr9mtiVfHEUTS7k9bT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30cbbb40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9589,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"c8114b853bc11099f2570be43ffbc100","sha1":"4d99d7e3b53d1194a4f700fc419d68aeec23d830","sha256":"3b8e3dc4dbde8492ca0fce77eab2d9261e72e76178ca7164823c44f7f3a7a36c","sha512":"3a818ccba02d225997c98063e47f65db37105bfd73f56b72a67e9f2b2727a47e23f511e2a98b7181ce3fe0ed2aae1871ea8e52241b754ea988250bb1643368f7","ssdeep":"192:4bTLN7q1a5GFcNoqNSJoN5oPu6FJU/qGH1v0DFGEO35M:MLNm10FNSJI5su6FJU/qGmDFm5M","tlshash":"8912b01239e2322e03bc7599d10bea538b9621e835cff812ba94133bd11bc50a1a931b","first_seen":"2024-12-10T20:17:18.947468Z","last_seen":"2026-07-14T16:42:41.698493Z","times_seen":51,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-58f0303a.a2fc97a2.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:12.101Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-58f0303a.a2fc97a2.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2484\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-9b4\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JO%2Fu86v%2F%2B0tL8wRZQUKL6QZtBMRdOWQ6ogQKisIkIHpgY4bRhIenJsDLPWtKFsxDNYDqWuX%2FkesMzNYmEl1d1qxQ5eJB6SXS25Yt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3469a9a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8763,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8753), with no line terminators","md5":"6927dcb4626a95a80f459cb8c9b55dfe","sha1":"190bb7206661c6212964f4d5a29488f055e67ebe","sha256":"2afe6af93b233874e2adeb42558b41d1771f6e05dabcbfecb91674a1f488cf51","sha512":"4d2735b4f4cb9e3273cc6742d676cc2fe26e1ed52e3f8cdbd1b12c09f89c25be8e633c7d3d5d08edcb72ba27f581621b6f5596049fbf822e54a91e5e063aff34","ssdeep":"96:YMQuCGZMbfk+wte8OeCgiN5+I1cxeX32azm43n8O6OhLNr0NIEsRcznx8sqDs5N3:YGY1dZhqpGcQJCiX9+j1TyjEBey","tlshash":"1b02b755a4cb643fcc7a649520af520820313aeb5155c2f9f2adbcdc1bc8e19fa0e7d9","first_seen":"2025-10-03T18:28:47.286782Z","last_seen":"2025-12-28T08:10:38.613737Z","times_seen":9,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-b70c559e.5b7c2d6a.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:13.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-b70c559e.5b7c2d6a.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6332\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-18bc\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pe13NPnYe%2BoU8xKwyppNj1AODwimXV6y5ExgSBcF%2F0BVBhG5pVDkAslsqdiAxR7VfeSnldZ8lonZDvnZbNgnzgA46fNg9wHBPx51\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b34c9b5b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14529,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14529), with no line terminators","md5":"15d8fc34980a8d861d4ebaac8a6f8fa3","sha1":"1c17c91794f6ebe57735198decfc81fcc2632e0d","sha256":"6bf81669351deac7f929b4457b9caa0253816e6dacfd84c8c756e9b0dd94a6d7","sha512":"7cf5902ecdaccee99d564d27ca210af3868e97f9a1c4bd66a312c805063e66508c3f188318378a0e6930645accec1b66afcb41cb7043027c812c453db85b3670","ssdeep":"192:I8pJHk78XvIVuRNaiE5p5mctEih4TygGZFtTjkgCWkNWqSCWMzSqmiv:ISHkWIWaf5pOCOIfkgCWkNWqSCWMOqp","tlshash":"1962a585a04fa8da8cf67145b13d1260a0f12bc5d036d58bb6bbc5b292c79503f1ebbd","first_seen":"2025-10-03T18:28:47.427204Z","last_seen":"2025-12-28T08:10:38.639885Z","times_seen":9,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":829,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-14.425a773e.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.801Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-14.425a773e.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-27db\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PLswu7TvHeCgUyfwPqqDSzELE7AkVhm3CodSSh5RaREYFSCReK40jqpyoBw6tl9Hr0hIgfKOtDEz5T8LYYuo00Y%2Bnib2A%2FrBc8ov\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30c7bae0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10203,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"425a773e29530c88ba5f1b84a1cc627b","sha1":"a515b736f816eed3973a88fc2584b2acf1025ed2","sha256":"5b6ba56c026d157d0ec5ff21d299a970021140239b4f17dba029d14f55dcedf7","sha512":"5185e9ecea194617beb0d1fa2597252dfcc841eb6d6f3e5fc9aad07f4f2854ab2fa451ffbbccfa8a1693e597ca5a5d8e745aec53a76fc8da194d4d936aba419e","ssdeep":"192:1C0zeJnop2VwCSJadYP6GBSwizotODkMr9KZZ7wHwLO/w:Yye5HwaeP6GT9sLHMO4","tlshash":"f922b06b8e4e9284333f1037638d1b864b9cd7023bf59d6595c20b99ef1612c7b76321","first_seen":"2024-12-10T20:17:18.977979Z","last_seen":"2026-07-14T16:42:41.688406Z","times_seen":51,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-26.ec610515.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-26.ec610515.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1e1b\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QU22TaPBwiWaW3p9Vq7rFCe5SbprTLJhXPuCXN4uxNAtAto83g04P5eBfI0v3Bv25arBlGV%2FYJNjrvpqekBvmtdt2pywYhsYVzdO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30d5bc90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"ec61051561fe28a1b1069d9d13f3111c","sha1":"4ed366349f2941d7dd1083de2cf8823802f25230","sha256":"20bffaa2d3b7678aca39e076262507bc3d34a08dc3412b820be515c71843eb7b","sha512":"27be0b640e475420fc8836cf6d4eb4e94a8aebf22b76141a66b39bc056adaa03d86e553e1c1330f96039a734c823578741169de1291af201575652ab9a455ffc","ssdeep":"192:AodfWKBdKteuX4UgaPDGtwr59CaOOA5FgwHMlx:AWuKBswNUPAwr5gN5bM/","tlshash":"f0f1af643ff74e267b4e969eef952e8e595650adfa02b3442f5d52af00e3400b143c52","first_seen":"2024-12-10T20:17:18.9707Z","last_seen":"2026-03-02T09:06:02.810647Z","times_seen":36,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-59.7a1e8687.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-59.7a1e8687.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2556\"\r\nexpires: Mon, 12 Jan 2026 16:24:39 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 606983\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O8JYxOuA8ppgib%2B08zvZfGsmG6Ob1xxib5f3Iv4yM3P0nGKQFIzyp1JMopUdLzTEa9UOmGrwrcF9D6Av%2B3xNWl4LFhBx6VmkgMHF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3108c320731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9558,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"7a1e86875e3ba65bc56f2b9f9e2b6cf2","sha1":"1991130d384ef5f76832bdf5e04e9d4231fdf3d3","sha256":"9dd18abdb1e6e6803cfcaa9e835faa0a7313fd9c21e0b2176bd7c209539fbd3a","sha512":"6725f19a60e6b1abe5a14a2ecc01f9df0722ab56ddbf5bfc9abab40e06216e65de61b7a5629abefffd32c5fded93cf8912203e0a8ebe9f1faea6cb10cdc97b84","ssdeep":"192:Z+ASK24ee95OZIf+iPkMRSOpoQ2TW7ufPua7JrXocIk3f0nPD+g+i5AdM1:Znl/95O2+utSrq4hBIlr0i52M1","tlshash":"e112e1814bc7899fc81b9f534bb2908afeeeafb010d23ed6059c17608d197f61b00063","first_seen":"2024-12-10T20:17:18.972962Z","last_seen":"2026-03-02T09:06:02.728786Z","times_seen":18,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-69.85b82106.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-69.85b82106.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1c9b\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ryfJamjqSavsrbywM2GN%2ByHzzCXFpuZV44WEYxrVzt39VHYW0DEHIHoAkpnZBbhJlsbQj3FC72dz7zFnlOHCD49ocbzyqlqS5V5p\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3118c550731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7323,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"85b821065ece2759efb1c6345bc8ecc9","sha1":"db008058b7ec664ceb80b9c0f12747293c244eef","sha256":"8d93965d1f95c27c0b4e8c9606ad65fe7c0cbcecf7b6dd232e19eae38f9cf469","sha512":"3abbb09b248b587e74f1ab6eae5fd30928b96fd58d8baa571b39ddb012c6aa087934ac17c0c40249707a685aa81220debe1747ae16499bc0941b302bec217571","ssdeep":"96:J34Wln/v5QYP3Xnie3SlWI+huHtQ1pjm+qojNkVJZSAA1lyT/VKd5um59/KO/iva:J4c/fnnTSsRjmtEriVKdo4/Q4zoE+at","tlshash":"34e1bfc7cfe37d3bf6380c4f2a256b9a091489ed4de68542f506e46361aab931c91871","first_seen":"2024-12-10T20:17:18.983202Z","last_seen":"2026-03-02T08:34:24.443558Z","times_seen":24,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/ClientApi/SiteConfig/GetLanguage","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:01.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /ClientApi/SiteConfig/GetLanguage HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KlOamlneChRvMvuosRnGgeXif6GXKSfzNZ2bFfhoG15ZwltI7%2FT9ELQUZnHe%2FcXTumJ4rwlia25BIRr4Xo8F1ZiFHAJTcryvF4iR\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b10b302caf40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"9bd664411b2c38543a551acb51c19ca6","sha1":"9f53dcda90ad2f378f8d676bed6626c3f50f0516","sha256":"2cb3788794c78d71e39b078942cbb1868b7e46bf4925add1c23decd644af438a","sha512":"3ab3922e0b3bf6c552ea01a0adc6493acfc58f8e3956687c6fc7414e916569c33117d575272a495d296fe858f4dfdcfe92c18238b7c3dd70749aee9ea9b34d27","ssdeep":"","tlshash":"3f60000000000c3333c0030030000c000c0c0cc000c00c00f3033f00c0cf00000000c3","first_seen":"2024-09-28T07:02:05.64885Z","last_seen":"2025-12-28T08:10:38.559978Z","times_seen":22,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/banner04.aa50ed38.jpg","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.586Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/banner04.aa50ed38.jpg HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-11519\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dXca%2Bnb0YBcaXKsJJj22e2nRGiZhHTz%2B3FE5sxw9FwgWvHodBBYzyv9YdbB6vmgKBcT7h1ulleiervEX7%2FcBhXt4nGR1TrRpOU9D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30b2b8d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70937,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 740x493, components 3","md5":"aa50ed38b7534acb65216d5d04e991da","sha1":"76b6b1e94389c04608a84d2c2d8d66790d5205ae","sha256":"8c87f99a1c9d8c9b575b1aa85ea012d4578d468c3d3b91254c3ae364b3bb249f","sha512":"ab459904777b2bc2184287c9e8459f695032ff338b4ba7a85da281619f02a02b04b7b3cddd9a8c5ee36e91c16c7c841b841e03a817567bba5cb5763066a42a25","ssdeep":"1536:A4yLN5/iyTYr6tty1fCg8+BjjbqgVJHWkFQsIrOvOvsWcBI/SEGA:T6j/xTOQpsbqQH3QseOvOvsMDGA","tlshash":"c1630234e4e6aae2c565e6fe398ec5bd9e464c20f4dd882024353d056cdfa01e7983b6","first_seen":"2025-10-03T18:28:47.251243Z","last_seen":"2025-12-28T08:10:38.603875Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-35.e7b5864f.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-35.e7b5864f.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-237e\"\r\nexpires: Mon, 12 Jan 2026 07:08:22 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 640360\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lHcdUtAnuTS4Izh9Zvpx4jP9VatwvcLXV24F2qRyw84iksg1w%2BQAqmvasrK45PJ9QhK0bP0VRXrDF4OirSIvl%2Bfj3H%2FcWfYTksgj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30e1bdc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"e7b5864f6acc3abd16a97c540df8b85b","sha1":"f979df0ed27a84c4be2c078c9396dc80642a9cff","sha256":"deaf716ec02da3e7eb7a14adc7d550484b8b86b6dd92d3e1e9b1eff9cea7889a","sha512":"5b8d9c5d099e695d60ea6e9c5ca07b96e00cbbebcfaa97e432d504744d81a41f5cd7be53ec4c264a6dd3cdff5f2d2265658b36623ab147f5d2e54d2047e54cb1","ssdeep":"192:x1A2rtfpn2nUH/wDwC0B7qheaJVVEHX01YM//8zqq+YRPDI:xLfsnUQCsEqYMH82qg","tlshash":"c312bf6c4c3409bafca92a105b807900106277692438a35bebdadfb5d52aaf45466df3","first_seen":"2025-06-28T09:34:39.859185Z","last_seen":"2026-06-25T13:45:22.939041Z","times_seen":21,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-67.d8c3e31a.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-67.d8c3e31a.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1be0\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5ty%2B0sozPe%2B2GlX%2BpK%2Bkm3gpjuVqaVHh8MZWkxzghjNIfvIYvxcVeulMIzATKfmgyoI6XTCTIbMdNgN0P5P990a5XQH7wscmp5P\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3114c480731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7136,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"d8c3e31a066803c8e79c05c6b1993f11","sha1":"d3359111ea4420bd969b865d440fcef9930b2ef5","sha256":"879297b55f3bf32286a156b9231c324d3e5aa17381f5c969107224f9807de8b0","sha512":"361c50790479c5599b2dd0b72a2069709b667f5b33584ece01f902f3b57b20cf0cc808c85549a2f2b4de13b709f6a0633bf2bf48e8495c97ff4b3d099c2423b3","ssdeep":"192:eCA1grdDqJzYmxxSx16GBt92KqPJX8Hu7Eie:iGDqRYTftUKqhgL","tlshash":"83e19e696be27e4057290d745513ef42e50b474bd335263ea13b414b180e8aaa423bce","first_seen":"2025-02-05T03:06:17.309606Z","last_seen":"2026-06-15T15:34:51.101337Z","times_seen":36,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/partner1.067872a5.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.318Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/partner1.067872a5.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1c88\"\r\nexpires: Mon, 19 Jan 2026 06:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36590\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FJXgevrwf5YG4bUDQDe%2BoGeG2q0b4wL6opg1pwlsWfceadRwQap0JsUOTOu%2Fi%2B53tZF1unGWaFo5pIxSWwvZsDpXJegKqILcloWz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3227e410731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 168 x 54, 8-bit/color RGBA, non-interlaced","md5":"067872a5dd5395b2fd041d6eba42387c","sha1":"645735790ee1177f945e8b64cad0e7e2daa65164","sha256":"59a60c6e778a3121b416a93173c0e31dbcaf67fcd510cc80ef609b11c5b79e32","sha512":"fd412583a87bdf28031e25b24381c39a5f245d686b575998e24ef794cb491e6e9ef61c0e7119e85509ef2b1649ea795b5bb1b2dd40a32fb7fcaf4521940df904","ssdeep":"192:jpLc/2Z12HcC+Sqw7EiSofHfX5bk8Cbt4RTyHvUhXbeX:dLXI8s6ovfJlit4evMeX","tlshash":"3fe18d9c34d2783bae0be551323430ccfe63b7d2a1ada96c3996d962f570a157f91280","first_seen":"2025-10-03T18:28:47.236332Z","last_seen":"2025-12-28T08:10:38.600438Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-261be7b3.98cbecd8.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.999Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-261be7b3.98cbecd8.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3075\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-c03\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EwNiMOzumGi1jPQinlo8MSXfJOKdLyoAmA5UlGYPSYg4B%2BPw1lNJw79bioUxitF2qNEOTsNHlb66HFAcaPJ%2FaAoWy70X1Nc9%2FK81\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33fb95b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6198,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6198), with no line terminators","md5":"6bfb26fb0de715f106213271d706a09f","sha1":"5b6a741c64852198c88d3268858e1016fcba58e8","sha256":"81f1123b65f32db5b4e18bebceb1827d39dbb008fbd403970f634b1ad8f22e15","sha512":"d8884b613f6ad0ffb750220f0afc3071b5470ab2c842a5ee81267b63c7df84ee2b052d892b820889e482b81a9122670ee2fc7c832dfa089c0128bdaf8d549a8c","ssdeep":"96:WpK0BuqkhP2lqwPB+AH36GNaAWnAQCM+A8Edpg7QhW5ilDlMMQNMII:jrhuAuIAoAcKIVuRNI","tlshash":"18d1b7aa50415cda8d7be0d6302720b132a2d987d50b94426bf9854d37f7e874e0d7ef","first_seen":"2025-10-03T18:28:47.425149Z","last_seen":"2025-12-28T08:10:38.547076Z","times_seen":9,"resource_available":false,"data":null}},"time_used":831,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-49662d75.61539c0d.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:12.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-49662d75.61539c0d.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2313\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-909\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7U880Ei3wxglARWrV6vzHlcxq7abbmOPMhY0Ub9%2F%2BmiCcdAnw1mNDpsDs0wtZsud9GCrPvuja2vWHHVeKKES8gpNB0pTmHuJVrVs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3469a970731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4985,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4985), with no line terminators","md5":"ac656c3cffc7fb82bc189cfcf114ac36","sha1":"ced60956b9ff34b6529d8067747909d3f1343404","sha256":"e0765733a7cbe6df12d452ce242bb62281cb4abe2b073511029006d7234a54ca","sha512":"c316603620a8f6a355169aa1b6db84f6b796331000e254d96cb677f552e74fac33ef0b31b84e29867de0a4814e9a294930c137ce4b6158e7514f4a0845358e7a","ssdeep":"96:iT+3zffuZOf1+DEhzLhiLPuG7K0uXj1IMv:iEmZxEhijQT9","tlshash":"c0a1629ab08ab0aaed737012911f313090b22ec5e061d086b774ed9156c4dad576ffbd","first_seen":"2025-10-03T18:28:47.337066Z","last_seen":"2025-12-28T08:10:38.647989Z","times_seen":9,"resource_available":false,"data":null}},"time_used":812,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":812,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-f8ed4334.3de6c174.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:13.239Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-f8ed4334.3de6c174.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:14 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5351\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-14e7\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F2%2F4lx3fbQrnEoc1P3%2Ba5QjvLF0HaX1L0M2kUpzzj%2FCJdw0MvnsrKbDkcPJi8SvK8TGk25pbbB22DeEHjJVmsQbCBTJtD4oPt%2Boe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b34dbb910731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8851,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8763), with no line terminators","md5":"a98fd7155aa914ce5a4bbabff51926c4","sha1":"441e694d9977d38b962b0d7cb1ba518f1087a2b6","sha256":"ef3aafff66b51d91619aa4e4a80461c8d4bc29728e79593de2ed498eaaa72580","sha512":"c66637f2dbe67c30e2dc4c82ea85bf84991df24c7f6dec02b63d54f51f814ba4445bd724a7de300ff0e9fe6504f1e7fcd5eb8ee131f8f048eb9929201c373593","ssdeep":"192:SshDX7nI0nY1xGiUeat0Eex0Ngkbn38Pz9IVuRNI:S6DX7I0nY1xG3GEe/PJIWI","tlshash":"ee022b1da483e6aeed3ef021612e1136901a0efa485899d1f338ce549fe4da4df5e74c","first_seen":"2025-10-03T18:28:47.256449Z","last_seen":"2025-12-28T08:10:38.537944Z","times_seen":9,"resource_available":false,"data":null}},"time_used":817,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":816,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/ClientApi/SiteConfig/GetSiteSetting","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:01.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /ClientApi/SiteConfig/GetSiteSetting HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=re0lmAq5N9%2BzYbYX7QAmtqgBrAzE73ttbqXV%2FeIXjFmCasZZug15UeJIjBL7gl1RTTH4v3vg38UByjz8%2BddS9YKR2nmoxurGkqn0\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b10b3024ae70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2153,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4c826ccb3e9428953a5f0c31ae4707dd","sha1":"be1484cd9fd8633df1a18fb852f67ea1728710c2","sha256":"186fd5a4d55f5b5ba6d5b8f032999dbb3681c82e1ae1b1003cd9fa19c13fcf4c","sha512":"f85a65d8c91493c80362c934908b5b60fd8881db92a2253dbadaad453332d141291d70cae3e6f2d8886ba06806f7a7ee54229c2b18b510bfe9aefcaa63dd653f","ssdeep":"","tlshash":"87413f4e220c04b6dd620390b37a3f4a4e7d53e3459c9e69bd9d2c200afb18ba521db3","first_seen":"2025-10-03T18:28:47.261503Z","last_seen":"2025-12-28T08:10:38.584798Z","times_seen":11,"resource_available":false,"data":null}},"time_used":903,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":831,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/withdraw.ecd5f36f.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/withdraw.ecd5f36f.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-28b1e\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F2GaYnl5SulTf9lBtm3Tr5AiyIDPIpE8bivkJv%2BfdkW8lGNOtexuFeO97w2vAf5LRBJZdxA92Uz3EwAgMj3CJlwTgd6ZQXdgkdbP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30b4b910731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 576 x 800, 8-bit colormap, non-interlaced","md5":"ecd5f36f7c3f209726b8e78ac4344041","sha1":"c6a94cf3245e3e944491c65df2c799acde748d1a","sha256":"de17370a896a4e683e006a0264df5dd595b502c22ac792d9322a60f2d9b4688f","sha512":"7324c32034a3acbfea87e99bd0746889f0c930f8fa9d40db8999eb49b8af4e6d35ba04593338afee9b0e353e66513bbc7680394d89c6fd7a4cddca71166b5891","ssdeep":"3072:0FQ+AvBN1lpC7yPvOyeJuI6m2kUJmUeWGXp2iRkIPRCzQEguwgmB58FR/8M:0FQ+Adlf3RF99eRp2Eko4+urwM","tlshash":"e5f31243e6244ffbd4a3707d647b6aef5a12fa1169d4884d8c0b36b235136e04a6f34a","first_seen":"2025-10-03T18:28:47.289991Z","last_seen":"2025-12-28T08:10:38.681255Z","times_seen":7,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-24.e619c496.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.916Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-24.e619c496.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-22a3\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4CI7jPEzICQjjljqudTE6VTvhsNSfQ5GASRiGJEhtc2xdJJ%2FL0xOWG8pSE8WKnfwqIBOLFr1UofRH3HUnMOcOraPOENM2stifsc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30d3bc70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8867,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"e619c4969e4b7b48108a7482a3066ea1","sha1":"3353c85ae88b071dc91faadecde2bb180242b3a4","sha256":"5f35ee89714eb9a539d7632d2451a0f1fdd97b97b9f2179d185f4549211e7c6a","sha512":"d1016befa9b1b387854f401ce1e595d1ccd8c32f2dec7ecae70e8681befa34cd37a2206ab9e9dfa5fc43156959f6bd5589f35d268c039380d816ba8f31a7089e","ssdeep":"192:teAuHPp7oNukRjsWeTfcLdfO4ewjdYWMIN/PvZDvfCgAh4:2vp7okmsW5dW4ewjdYW7NHvZDvlAG","tlshash":"1002ae88502309c8eac6970efde6bacc4827e678fd7d09153e890a1b040fef07761c29","first_seen":"2025-07-03T01:54:47.239926Z","last_seen":"2026-06-16T15:51:09.67701Z","times_seen":26,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-43.5d7c15c9.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.181Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-43.5d7c15c9.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2648\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wSOxGJc6aNfiOJfiErCamHjKBoYKa2N4Y9BZe7daLRbMjiDRkbCUas9QXwyVh0Y37n0B4ZcddZy9LXAN9QarAkomgxU59PCWA%2Bw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30eebf80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9800,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"5d7c15c93f4f0cc4d4219e7cfd2d9879","sha1":"d8c0a974e32bbcfa0ca1e09a8e4457edadab24bd","sha256":"1e86d86fdca921e93e36fd5cf5c81c593168c9a321f9da454223a0833e68a791","sha512":"58d1d474b50ccf1e0c61bba63914875cfc917ca3036cf07a5429268faffa0b93917614cfed1086b8d5e1a2d2186821a1019741c1342c55a8f38bb3756e788d2a","ssdeep":"192:3MD3bdHhR1/0z0MMsxZiu+ONOg3HvpGCESsXw5fjOxadSvNd1TDrwZz:3MP7R1pqghONOopUNg5qxCY1T3wZz","tlshash":"e812b0db4e5d371b64d5672fa860df89497a36ad1e914693c8402b13032e6b17f93c01","first_seen":"2024-12-10T20:17:18.993664Z","last_seen":"2026-07-07T11:14:32.901877Z","times_seen":29,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-70.ce597785.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-70.ce597785.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-234f\"\r\nexpires: Mon, 12 Jan 2026 11:47:03 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 623640\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wPXJE5vkVv6npC6kQ6D8sRRmqTrcmjGiC0PGw5Pt6SIhyYHGS1VIJg4jSad7mFYQSVa0cNZ7tyWBJBSY6DORLzl5dRuTLb0qa5Ym\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3119c570731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9039,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"ce597785b4576c55f2a88df94069f2fc","sha1":"d582d1f6da27bc627a4dfe9f4c55223d1f442f3c","sha256":"6bd5de2295f47128c7aa97b626d1346742abefe70ed7b8c01d16b2c0e02111bb","sha512":"8d029c8d197452ded1a7a5dade8176b01586c5de233b948ff3ec8bdc778c225b833827f510b1953b6609f93d4188a321404ad5208c89115c2dc8793b4efe5d4e","ssdeep":"192:DRFE62WuV4BTKbkU6wouBnVkOo6Y3sBTiW9jsO8PhhQDuOx:V26DsoUUROolsBTBsvhP2","tlshash":"e512a0cd4fe0e753a7a807dd8609f82dcd275ef39546a854a301496b14382739d07cf2","first_seen":"2024-12-10T20:17:18.942747Z","last_seen":"2026-06-15T15:34:51.034737Z","times_seen":26,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-3dff8a78.0c62befc.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:11.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-3dff8a78.0c62befc.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5868\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-16ec\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZXUhix6fmGX1f%2FWA%2Ff00G5%2FfD4NcpgNgGFL3qlqnTAKxnDX2ye7GYICGyQNHkPc17dLLB80XBdOrgF2DSXUnkpGNGyFn8xo0MpI2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b340898e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13207,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13205), with no line terminators","md5":"f789dfa2d666dc2a4d34066bf84d2b6d","sha1":"0afe4cf83f15e03725b9048a602ba27915e15152","sha256":"720f7c2c2126bcd20ed96e26a85c8cbfd2d0ce45d096c2f341ee5b140c7f600a","sha512":"fd4078df4f247357c8a888b1d980f4ed9db9c59d0666f1c9831940bf6e74b3427e1fa594f61306dd57b54f805f0cc9bd06791054ebf8fe6ea9cce994f3f4fac9","ssdeep":"192:Cc+KF5eMDoPTxjec7SiWAEKeiNgCHEW79SlZT78XEIVuRNI:CDjecQYgHW79CTBIWI","tlshash":"a452f9aaf44ba065ed263a54209f24a493332bd7e4159480f37dcc9dd2e8c24971efbd","first_seen":"2025-10-03T18:28:47.250166Z","last_seen":"2025-12-28T08:10:38.530766Z","times_seen":9,"resource_available":false,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-vendors.ff10c28c.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:00.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-vendors.ff10c28c.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 166442\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-28a2a\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FI%2F2707GyOMdG6j%2BBTss4WnERdRsYkhFQgBIUm3wtvOs4HMQrvo41hnrNLjPlP254WAgHekumkUVG0VbWNT1nhwXiG%2B8ZeyoqIim\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b10b2fbca650731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":528252,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37977)","md5":"1ccbc24cfb6cd285dcce39469f1200fc","sha1":"0606568c8e73c11c64ead42e51fb2cc9ba048634","sha256":"c14cd07dde8613b7bf9a5470d89d0e114fbc6de76d8501007d1151c030c6b04e","sha512":"aacbe393c96dfca998e4bcffe5a69217a1289d89246f645955f8306028e9667377fc298a4000f0c86587aa6f5cd8bbc46a8a4e726c6872b269d72d3d67bdd914","ssdeep":"6144:k+A2a4W2qLU6ae5vPw31i0iCbgnBikiwWk7AQXva/Vk:LW2q6SQpkiw5nva/q","tlshash":"98b40889f2c5b06113eb70f4802f160bb2376959b40a84ecf665f8e5ac7995e512bf3c","first_seen":"2025-11-09T09:10:19.132124Z","last_seen":"2025-12-28T08:10:38.64355Z","times_seen":8,"resource_available":true,"data":null}},"time_used":855,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":837,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-18.0ce7540c.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-18.0ce7540c.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-206e\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LxnpXw41OCkzDGhUNRF5pmQU7eZw%2Bm%2FlfFReHu9eWVAn0oND6yCUl9AH0Ky24dmhJE%2F9yvwHlDlOGa6R4ubyUMnZb%2FLM6OPdGZDm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30ccbb60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8302,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"0ce7540c381f7add09be9ef6d1e82d30","sha1":"d234a10b6fd7e1c5ea689eea90523de4f1619842","sha256":"aee603e7a970ca87c8978ca4a000d3d6e3b80136381b19147e10c96a1db94a43","sha512":"806d8a51ac864e0edc6f14f2efa77b130b3eb028a4d589e2d5c8efdceec4b36f9ce212eacaf27a084c57cd6989048caf1b76d9fab13d45fd7b32946702346627","ssdeep":"192:uA80M4SAMqfefqwKgR5zIqSyzT+MghCf3yOeM4GFietLF9d0p:m0nbw9/zBIMghC//evDwF9dG","tlshash":"3e02905bd6c01c5e0b2e8b55a23d1ec2981730d66071b25240fd925d6e7b426c2bf7df","first_seen":"2024-12-10T20:17:18.995545Z","last_seen":"2026-06-25T13:45:22.976373Z","times_seen":27,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-29.c0832416.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-29.c0832416.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1b52\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lQoXdnMwqnc36Bve0gtSfqXJj7R0YCblE%2Fv7dxE4Xk7Mhv61igVD%2B66xH%2Bt0ETt7c0D1QyXlEmc0zi94bdxN3ASZoKZijvCjW%2FDN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30d9bcf0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6994,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"c0832416777921c17b67d092c106e3f0","sha1":"d1d45e0598eaf12fdd1cd65b34dce6d019a3b40e","sha256":"e5dc1dc317040d1794dd279f4c76636d1ddcd6865cb9bb925e9794058a23e5be","sha512":"e31cb43611de5d29784c52b312ce6aad267446808791dbfa8ec936ccc42e1d7a18021e288ec0c539ee9e906f67908f7e606e894110335040f6e2f98737e74645","ssdeep":"192:kqb0w50o/+vtJATnN7wP1/oCPpgcXBKpsUUAyNVt:kRYx/+vtOTnxwuC78sBAKt","tlshash":"89e1aeb5bb61978838198faa096f18ba4105506a9e9a174f05f3f1d1141f1ee83e3622","first_seen":"2025-03-07T14:29:33.913822Z","last_seen":"2026-07-14T16:42:41.634612Z","times_seen":27,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-20.cd5f71a1.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-20.cd5f71a1.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2468\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YFjU476XKN89lCANBNQ0HYKsLP0cgsPBLEtoFVLQLqus5Ztf5%2BiLbJBM%2F9zFRezV%2Bun9WIXeqgPxlGsxDIcKJ5Q5r2PetMphLIvd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30cebbc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9320,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"cd5f71a19fb480d81f19ff4219d7c08e","sha1":"68d8de46289257d3ac09b731dd92b616c1dc139e","sha256":"02b815b3564bc33daf7a64ee5185b8ea4cdf653c8ca397bbdcdc43fd4704dd87","sha512":"68141af964ab8e94e18a9843b533490c68f71892a2da4c64f7f3dc73665e0766a7fe608633ef8602e1ba0dc8760e7b3ec963b0bb4611e5f2584d61a1d2b5169f","ssdeep":"192:ZwggMM6uyaGDMrE5mxBnHY0GDngjf/R3YN9o4dzY1i9eiDQ:S7MMNGuvx1Y08CYBdzYIIiDQ","tlshash":"e412b0e6cf04dc4e575e231f7ed5f0965a9b85789201d4816d800b0e8ab6211e3a9f47","first_seen":"2024-12-10T20:17:18.975314Z","last_seen":"2026-07-14T16:42:41.76699Z","times_seen":84,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-62.d264b9be.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-62.d264b9be.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2492\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z2%2BQVnYgmZvxtWTdYdw%2FQVUMkdr9Ho4Lm5mXrFw3hwV7nmXMbS9PB4vZixjK0yDBDAo6SgCk%2FIy8VROo9RgjvqFw3MSgY3abthxl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b310dc3a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9362,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"d264b9be97c8788b1b8f58152477f815","sha1":"3432333b7109e2050c430697cc4b2b9f99d5bdde","sha256":"4e8f4dc774cae09e4614da8766fa9be231833bec7fe1669c4806671884f1456b","sha512":"b921631b85c81b5ee601358dc9ab3a0f11381544bc5f5e03dd4beb0b856be777e46a4453c9a9179343c394b6490b4a65cf3291145d4840e4edf17bc49c94b06d","ssdeep":"192:DM53XkomWYgI90MhgP2LHb7nPv7xlPTipm7qukBAesj6ES:D+koH0hzLH3n9lQmAs7S","tlshash":"8912cf6abcfded334eec75eb2974d94e3938d5001cb2e81b504258cb0425e994a7b26f","first_seen":"2025-01-30T09:50:41.425243Z","last_seen":"2026-06-25T13:45:22.974382Z","times_seen":31,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-092e488f.d5c78645.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-092e488f.d5c78645.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:07 GMT\r\ncontent-type: text/css\r\ncontent-length: 928\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-3a0\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FwQeqB785lyoB2Lc62Sf7s2oGJT3JgdnxXiCNTxZnqo90udfdIAMi2YlhoJjAoSrfiI0Bc7dBgogQ4nYzO%2BlyCf9kwMpYgcDdE1g\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b324be710731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4185,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4185), with no line terminators","md5":"38d70b10919ad9dd82fc2676eae9c815","sha1":"f521166e2707811275c60f689a539b5a2f9da29f","sha256":"cdacce52448793ca184c2872cb48d4c04fad2feb6a84ab8a640d6f05fae41d7a","sha512":"4f1cf4722d2add25328bd2b76d9d7db0c4e5458378ff009c1b75dae69695d837a385e215406b65621b07d52c20a6f7144fdae86b239e5e514136ef6370b82170","ssdeep":"48:DwfvBIlRFR0lXUlCbR6eocbR6/lCOfNRi05kr5VLWtgLlhl4j6lku:DwEzmCKVLWtgMC","tlshash":"4c81f11b34143724aa23dc54eb598e269344c133c166b2ee99f17a28cbcbf8317b565b","first_seen":"2025-10-03T18:28:47.42615Z","last_seen":"2025-12-28T08:10:38.553549Z","times_seen":9,"resource_available":false,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-49662d75.3563f709.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:07.943Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-49662d75.3563f709.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 3124\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-c34\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Od0VpHiEMU6Meno6S5%2BpY3ZXbto%2Bqzx5IIS3C5l42gp3sC2yjUB%2FzgM11tlT4HUkuJnnWGIEyOop7wN3okIGvLxKte245B15jqB3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b32caf350731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15734,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (15680), with no line terminators","md5":"0f82983238af09646d0cbe19a38e76c2","sha1":"a97de736ecd4ade0ebbf455930006f4e51b57031","sha256":"9a202a46fc22d470d2f65f6acf08f91030f1908b6fa0cd3d1144b143504d4436","sha512":"9d64e4f8c0883d9b462c1ba8e572684de969b90e7915651f8fd826375f836f465b31df6bf4453b92aea0704423bf86210e6f7add6804404cd77dbe62837abfea","ssdeep":"192:EEGgkdWfpnRgkTFQLFxMBgBWzcOdkTrEj:mMpnRgkTFeM6u4rE","tlshash":"0362e16b604d1f85f337c881966526eedea4e277d00106ab9a712b15cfc3bc326d83d6","first_seen":"2025-10-03T18:28:47.36464Z","last_seen":"2025-12-28T08:10:38.683767Z","times_seen":9,"resource_available":false,"data":null}},"time_used":808,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":808,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/banner02.84271503.jpg","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/banner02.84271503.jpg HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-15237\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BsqYpHaKXbWKQm4PRb9j%2Bd99vsoIit3STVZL3pOvLOhMnKsL%2BkSGFuEnYZLliVtrjZN7zBaDssRRw9pBITH89L2UR9TMdvmFKWIq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30b0b890731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86583,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 651x415, components 3","md5":"8427150343ec8573d12c11999935205c","sha1":"4c7e1364186170fab1b771d8d13dc32c0d530d12","sha256":"da682dac724a348e28f556c06f7034b187b83809c8d6c66f755ff05b3c6a727b","sha512":"8af147dd4d24580f83f44fa19537d35f59e96f0cb02055b134cf67fd89709bcdb622ec62ac8744a6b735cfe803310850d86854c1c9e75bc143bae851d6c50e05","ssdeep":"1536:x0PT3R8tyKOiblMkklG+4Dk0I07+TFLF4aGInEPnNQ9xpWIflSYEaFArhbZGj1+z:ib3R8UnolfkI7lIfTsaGInEPnN2nfnFq","tlshash":"748312a7e89ebe6a2f50821b26453adacb6cde37ba0143450e404bdff614d14530e27b","first_seen":"2025-10-03T18:28:47.3752Z","last_seen":"2025-12-28T08:10:38.61455Z","times_seen":7,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-25.dbdb1d1c.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-25.dbdb1d1c.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2179\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zzY0sU7eOCjXfAxsSWivO2iJ7jGafSKcPbHJA1tmCw%2Fdg%2BcOHnwwH8Ubc5L0qgWic4jfw25iTkzmE9K4JyI%2FnyInd8QzWrgtXyq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30d4bc80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8569,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"dbdb1d1cf19004010abe52dac79ba6ca","sha1":"baf5ea60520863fc981a4008a58f45e8a4d74a1e","sha256":"f293e2a5357e93f5eee1b968576fea4df03c54581828ea3132df3e98b15ad40f","sha512":"5b018ef3dbf3634645b944339228e573c5370c65f29e4cbf36e2d27ad530e57a447826b1ff036a86a6fbdcf4c6c12330cced5f371dcca12b0e023346d2dc7869","ssdeep":"192:t2Pbv3BEmF6OdMwamFARWODFvKIMD/n5dzcXuR4UOMPovt:t2PbvREmcOhaWARcdOLt","tlshash":"8902bfa73f6c37887a16341d2692d0cc94510e96627820ab454ddadb0d9c6d8c3df4fc","first_seen":"2024-12-10T20:17:18.952671Z","last_seen":"2026-06-25T13:45:22.93271Z","times_seen":25,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-66.0e65828d.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-66.0e65828d.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1ea3\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yunp7WGxhWXhE%2B9Tdp0DlJSKyzXnVDtPvT1zY0V5%2Fv6d0knK7m6C3YHx0jKC1Tq5pkA860wfovlGBZnvlr%2FM7tT6g%2BKAoucCe%2BXP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3113c460731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"0e65828dc66129cfd8a6959a8aeb7341","sha1":"510d0e76e986e1bbbe8c8541e2f3ef27ce36748f","sha256":"fd5f0d0fbe4b29f91e59e334b2ba74000bf26498f2fa2718ce277da5457b1c46","sha512":"29a581ccee76c881915d2485ae627b047b71b6a6684ac92bab83af344dadbc69cb564fe0ea739509c70028716d883a15b65f6ff4b7b9f95e4ee1f3e90510eb35","ssdeep":"192:P+G1z5iDpoO+2JaxoxpoqGwD1SyezPhf2O5s0/CW97dM60cnWcW6UX:bB5iDtdJNGU7esO59RRdV5W6g","tlshash":"eaf1ae2cd3e9b39364e3e9e342f6f9341d3503107e93dc5c8f9ab16186200628a17a66","first_seen":"2025-02-05T03:06:17.327587Z","last_seen":"2026-06-25T13:45:22.942505Z","times_seen":17,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-a1c2aefe.f369d54d.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:09.048Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-a1c2aefe.f369d54d.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 2096\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-830\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D64cMm%2BvDDH7ZtoMcjsWG4Rk7ZkAJaTsAAiTn9pS72eIX6exzbDoCkM%2F0gvfkSXR1wm5NyetvJncOEyVEwYHbbcIQPx1UUtItGyb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3338fca0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7633,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (7582), with no line terminators","md5":"e04d0791f4c3add71a3deabb7c813ea6","sha1":"a10742dc7e34492603d7acc869f28659934c3352","sha256":"36f3170f2d8aacebbf9dedd31529064ab8a88245195c93436ac561cbcf4025d3","sha512":"78492d9c14a50263d74fef93912302de456ad4293af2d3590e67d63f7bd740e9c3081a3ae840a14cd945bfdf9d352a5e3020e9b2fd241796fa56c1ee2ccdbbfc","ssdeep":"96:jPLrVuD3Uf3nk38W3rpg8QD15ExHBeRW1QiGxSowR2ByGsbN:TLf3ksWbpg8mnsVQJxFBy","tlshash":"04f12f6f90952a88a717cc527794379a8728e032d5451ffae0167a28cfc7bd316e134f","first_seen":"2025-12-19T22:21:50.076152Z","last_seen":"2025-12-28T08:10:38.674459Z","times_seen":7,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-81c84044.29e13665.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:12.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-81c84044.29e13665.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7513\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-1d59\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=602CsxryLyJI%2BFaOi1YG7j3GQ6xAxggjekMZs1UuMCzXa%2FYPnfGt1hs60T%2BlyikiExjv2e74f%2FumhcDiAbeys3iwX3qcrMeJyXR1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3484ac90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13803,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13803), with no line terminators","md5":"f8b26b903ed2e5eecbaac65b88d16c2c","sha1":"48bf61be4c99c4329abab7d637487619ae5a7b4f","sha256":"70f147c4020bcc8c827d2674681cfbc5bda6d18baae42aae5dbec52dffe449c3","sha512":"c6f1970fb3a5ee3181bf49673395123cb8861ede4c0072fa7b22fb9d78e2083ca7589e9af1c2789a18e83fc5a9fd40b4a2508ffcd6aa91ed2f217813a67b5899","ssdeep":"192:fshDN0DL2JUBrNa9w9Cl9wSn+B7HX0IVuRNraq4W8ypQTmoHh0Q4qF4y:f6DN0DL26Br0w9CUS+B730IWy14y","tlshash":"9452076f72d760298cd261a11a1f651195322acaa410ddcff1f0d9e20bc5c782f5ee3e","first_seen":"2025-10-03T18:28:47.343407Z","last_seen":"2025-12-28T08:10:38.63173Z","times_seen":9,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-b44ab8a0.cc47a59d.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:12.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-b44ab8a0.cc47a59d.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3398\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-d46\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kX7m7tW3aXruIeiRKxG3gBEhV%2BJcpKP5Az2HgCJawBQd0GGPqgsj1%2FUvRI6bsuO%2FYTJQFrDkwQkClImPJoCOlR6vB%2FmI3IkEOIj0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b349fafb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6233,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6223), with no line terminators","md5":"188192f2db329ac2c20334d103e50258","sha1":"20b054d7abfbb3b6f49f4317ba1ed385d6412978","sha256":"b0eff8191902584838e2a0f9bf2e5845f8e06ee3861b48aa7bb5bfdeede4dd2e","sha512":"38afb46ab06d964859245a5cc27d0c5025ccd8f882c87ae1ea6eacf8aa01053a1731dae0fcac8b623ca564adc1711be4ab1a02c0f3ddf2d63b56d0e60645b4d6","ssdeep":"96:iQN6lmN4N9URNcwZ3RlTwAQTtTf6qG33Qdpg7QhW5ilDlMMQNMIz:clJ9ULcwFRlZQBPo1IVuRNz","tlshash":"91d1c66ce49f91bac4fa6014202f6116b1763fd5e409d8c2e379cc44e9c8c5d5b5f62d","first_seen":"2025-10-03T18:28:47.430493Z","last_seen":"2025-12-28T08:10:38.665384Z","times_seen":9,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-b7d6f4f8.365af619.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:13.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-b7d6f4f8.365af619.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5236\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-1474\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m4X%2BkVJUvyAKfowKaSy4bvoZhqyIbUgbeH11IoGihPkQWw2UVmW2BQj5Mc%2FBq1yG%2FBO4szwMWLSOFrMXAliy8Zn9vSp1qsGt5oNq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b34c9b5c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7312,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7312), with no line terminators","md5":"6f2d678d652bf29e9885e4c70c07a7c8","sha1":"f0f1bfcc54e58e7f9751778a43021ddcf0d4a729","sha256":"1f836aad924d6c973f0c1f4601798cc914b4086261f9a76c19ccb9170ebdb90b","sha512":"00e53fa6557f6069b02ea3281341fb8bbc7831a0b5d24a121cb44eb8ae739af4053d014ce3026149ed15b697b072bcebf9fb687a19b9fc69643c1cb865176f9e","ssdeep":"96:R0gO6TKBFHZzd+jKrtFxw5As/D1MWrCWVfqeXwMdn4wCg8Tsvdpg7QhW5ilDlMMr:R056Tm5lH5xsD1MKgoCPswIVuRNI","tlshash":"e2e17db5a59ff43aac137488112b3654e8304ae9841d7cc1fbb68b85c7c4c955e6ea3c","first_seen":"2025-10-03T18:28:47.352319Z","last_seen":"2025-12-28T08:10:38.633411Z","times_seen":9,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":269,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-27.0ccc5f15.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-27.0ccc5f15.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-25e2\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OcZA6pVCriXflUniY09R1jAT7gBD8ujOJz3AVPNuy5VBpJEr6SPrDVpWPZzgnREMSUieVJwEo18K4slvGvMGQWKdwHeXCoKfWRNI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30d6bca0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9698,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"0ccc5f15f0399e24398cda63d09a8269","sha1":"a7925bbaef1f59b11f1b276b27b8ed3cf3ce55ee","sha256":"391a146afffdbe1dfff99e3e5ba3564c8f15eba181f3b4d6022a8023f04ca30b","sha512":"a6395aae28b9fdfdae6d9e6f87eeb3a1d555312089970c48cf91487eab38ea05159648997efe52e227b1a895adbf13c442860f12ad6e7c80aeac67334d1bcd9e","ssdeep":"192:kQZjxOeZCRp+vljUAnSQu6omwUBkkXpP81PAh+ST24dpa7:TOesRpupUAfu6oGON1wLy4dU","tlshash":"6812ce1ba6c4f6b2ed86fce0bbc7a48d5814122b2fb5c210386ac16c3a33dcf859d515","first_seen":"2025-02-02T04:03:34.265165Z","last_seen":"2026-06-25T13:45:22.929802Z","times_seen":24,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-65.7c6540ed.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-65.7c6540ed.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-261a\"\r\nexpires: Mon, 12 Jan 2026 11:47:02 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 623640\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pgLjx8UC9BySW6bZ9g0J%2BTCV27ecCgS4Q4PtzBw%2BgFVfytgOGAmNiiMeW0xjFQUkfXV5S0ppgNOySyOIw19jbyEjoa9Qq83E4noi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3111c440731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9754,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"7c6540edfd96d6993956a0eaae312e16","sha1":"0eaa1b58023fca5436dbfdb752b6f8f867a1bd07","sha256":"a52904fae084ca88f68b4ab166a0301f34cfbe61767b563818410e1245d24b4a","sha512":"c5bcefaf9ce29c13dc0ebebb806ea3183ec071a9f33e29134ad3b1a313080ba789da25cbcf27875769f5b1f79544cdf3132d93cac87cca18c51ce04e9b1a7046","ssdeep":"192:PP1+tmpjawJYZwj7quYoRHJX9uL7hGC9nWKlWjVOrjiEnGgaICYPXn:n6Esw3qudBNwL7V9nNFrj5aICEn","tlshash":"5b12af075d38bb5020ad454b6768ef5bcef430e5a1bd2e240432a9b81a6f7ad4025636","first_seen":"2025-03-07T14:29:33.912643Z","last_seen":"2026-06-25T13:45:22.969878Z","times_seen":24,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-30.a5b7ef4e.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-30.a5b7ef4e.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-20eb\"\r\nexpires: Mon, 12 Jan 2026 07:08:21 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 640360\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tFbIKDgXBCYywqW1Wvxd1OVB0be9cjjSYZNrsCEyc6O%2Bki9UoeOepDNslkHDVFQKgCjm0gyRZiahE%2FYFD4WDirtybXXwOFkGlOEJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30dabd00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8427,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"a5b7ef4e54ef49fb109f07f2cf0017de","sha1":"d468edfe056168a78b723a8824b59b7a17aea09e","sha256":"7c5ec9e0df6f21c9d98d5a390280bcfe03407eb8db37ac8ab4b63fc7aa00ad7d","sha512":"7c632f92b73d54aae1ad901b6a4700df35476b5e37f9894394b1e513ba83299913fd6a523568d93080e18c2131c4283e80a3446be506b0023428d653e8849aab","ssdeep":"192:UL77295p9TofQJFZzGxae4Ez5dHbCsQA7ULiNZtx1XDwz:UL3upxGA28xot57iUtk","tlshash":"a702a0598ba1df0012c868bc7e944f382e89e57b585292ef07ecf52fd5891824dac53d","first_seen":"2025-03-09T10:04:12.554636Z","last_seen":"2026-07-14T16:42:41.675854Z","times_seen":32,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-49.37e82949.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-49.37e82949.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-22ae\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N2FtlvLkEcaUYx0nA5KRskRFjDSkgi%2Bla14sn0bf91RSiFfAzMJ3nFKWBT0VWwL2YrHFZPo9vUaywpYO7jFX5abbeEgp3A0qpA9N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30f6c0d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"37e82949e804f69ac18b926fa96fce42","sha1":"34f358335a85cff1908f6875365709386c367d77","sha256":"a12a09f3a2e9ba9a5c5f4a7cfdad7cf62d84edb518db71c08ffa62e2d85de1dd","sha512":"1f956ffab23a5289ba130372955467a967ce5602f77b9ecc0e76f93a6d451eab051e2ad73b4683e70eeb325382e2da4205aceaaa3458430fb0331c9d5792bf32","ssdeep":"192:E8u7QStkSIS6PfLRu2lz6RpTrGNTkYKmvUABQmeT/:0QSnIDPflu2d8pTrKRKmv2jj","tlshash":"0902b02d49350ceecdf7ba2ac541657326241707ebb28d381948b03d564e1856fbc8e8","first_seen":"2025-01-30T09:50:41.417333Z","last_seen":"2025-12-28T08:10:38.64266Z","times_seen":19,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-68.c1b58ae2.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-68.c1b58ae2.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2705\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vRxrnNIGZ2FwkBgllMJdxlveM0a0UteDMNYvon2ZhiodN07UhgheRt5UaBHTDPzU9mB0pddLuEq6c07kfoCgdPRjo3euQDa%2FK7F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3116c4b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9989,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"c1b58ae22a516222b05e0619393d6c70","sha1":"65dde7c778f3d7ea5902fceab6f49e9eabd53275","sha256":"b7944113babf7bce85abcb74dbab9fc1e3026d02a213f1e8b338683e3272bdc9","sha512":"88f68f63dc58e7d2bcc21b0cb298388e310abab61d30d81723919e4b5162e47095b88f207fc2e089b586bea8de38692aad7fa6e4be9e12c8c75a1d0dd49f734d","ssdeep":"192:3NOWXCq/8CCk6dg9kImB5xM4ej3wZl4bawyzQN40d103JV+N0A8Ypc:3N/Ck0g9kIkx1mbawyzQpyoDZc","tlshash":"af22cf02983eddaeb313a9569f24834dbcd6a28d57202d0462cceb465c4d3bcccd6ae1","first_seen":"2024-12-10T20:17:18.965535Z","last_seen":"2026-07-14T16:42:41.761036Z","times_seen":36,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-d710d97e.9c0088ec.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:01.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-d710d97e.9c0088ec.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: text/css\r\ncontent-length: 3936\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-f60\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8XbVEJz5hNeT0UfABzPp6QGnVku2ekoKqJTelRuhD1cJZ1zTupGUC5jwVSUBc8bGAWJB1hVhf2eRhpX1v60lP71NkEXKV%2FH91vm5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b10b302fafb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18040,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (17986), with no line terminators","md5":"8c1c989ed747ad4c36cd95c8398887e8","sha1":"39df2fd89a60c6eeebd872ace549e41d4851662e","sha256":"34ef2e974729ec9db2e3ec4831e60e450b44cb9f04b4b661e5d0f6124339b20a","sha512":"acd270b22f815d116189c3efb366847bb766d784845194be183f83469908bd5f3d9e97611a7c97f690f5812cafe5697528b8d5a4788326a22f8d044183028dea","ssdeep":"192:TLf3ksWbpg8mnsVQgxVBku1HrDc0oe15qHNX/RGTyo8q2ylyXWCn4QE:Fopg8mnsVVV5Top/0pB","tlshash":"aa82713f5191160eb22bcc616754739e9694d033d5162bfed4aa7a25cfc3bd206e230b","first_seen":"2025-10-03T18:28:47.313673Z","last_seen":"2025-12-28T08:10:38.62306Z","times_seen":10,"resource_available":false,"data":null}},"time_used":789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/transaction.3ff885a6.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/transaction.3ff885a6.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1403f\"\r\nexpires: Mon, 19 Jan 2026 06:51:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4dL1c8X%2FAb2VTr7Siiso62NPCxMUlNwHmT4uOInLu4dTOBAvzk9fVhM%2FX6b2p9a9KfI8sgafINPGcro9ovJe05N0lOD%2B%2BFDlEARS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30b3b900731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":81983,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 219 x 214, 8-bit/color RGBA, non-interlaced","md5":"3ff885a6ce0681e9eba93288a6883ce8","sha1":"6606a76b7e27a084101c991afff85291183d4ceb","sha256":"f661d7d34978258cb3bec4ec369ce58d8231ba7f5147591f4f34b5025f292bf7","sha512":"7b62e927bda56ad45cf61b1e5deab85fad9c21cade35abd5c94364ac37cbea409a4c4bf5d27fdd836a83ef283be2a36724a04c23d0fea8bf605af9b81fb190a6","ssdeep":"1536:Piy6nAsk3orEeqs+o/5nHUWjhtqrby2iF9hBx04ypK95YyfY6zHy:qyiAs3rEeqs3J0WU22BzpKA8Hy","tlshash":"61831247676f04b81d6c6194f903c9a4ed89343949696d06fb3cecff212a1ad6c52bc3","first_seen":"2025-10-03T18:28:47.376315Z","last_seen":"2025-12-28T08:10:38.591434Z","times_seen":6,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/Service.52ee76ad.svg","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/Service.52ee76ad.svg HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-bd8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHZun18QrbCnZe4SRavyTLGM%2BFI0ualjmTvJoLQGpZR3UBwBKrGs0xwypv7CjZwMdMATmaRc8QlwxcRndRd3qv5op5Th9frVQvpb\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b30b4b920731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3032,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"52ee76ade46e9a21e65443cb9fb24974","sha1":"ac90c824381f3357209792e7d9715ac86482c17c","sha256":"e224f7040572a7999ef26f0ee8f5439f6aedea81d78bf6208907a5b4bbae1ece","sha512":"84219d7b74aec5d3f159c356ad3ace37029342ee1d0c512708492485e375560a2fea80f04b06b8c429c07125eba17e1716e88956ae13dc9939af49736e4a2174","ssdeep":"","tlshash":"dd51eca6231d01fca407879ec53a46857f2f3cb9b145f2f8817fa8a429625744f47d85","first_seen":"2025-10-03T18:28:47.292086Z","last_seen":"2025-12-28T08:10:38.625152Z","times_seen":7,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":805,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-12.5024297f.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.777Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-12.5024297f.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-272c\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ylNFUTjGUGCG0j%2BLozfcwVl7cNqZ9fvEmKC1sQHW5zqk4FYQuZEmtkZXzSx9IR6GpwdinCoPnoUi5R5%2FJ8a9LG8ZLlOcNvsq5h4T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30c5bab0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10028,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"5024297f4e138cec9cfd6234a5f901af","sha1":"7abfdeaa42ed2879250aa98330516c1de28991b1","sha256":"4f73101875f8fa1e338d4de64c2230b1d978538b35b4f6c34c95c0bb0f86c949","sha512":"64e3b0ea785cf599212327863895498e022fb2bf1359ad5b5a398cd1357e87df30ceda9b0fee983da006d150f1f3d0e4a2d1cecd58773460434a50e31fa735ce","ssdeep":"192:pxD4lEBtiGBBRx48AAk8vD9+0FFxcAT2hx56a925Y+sr62AL:oiFBBRvAdj0Sx5B25m2PL","tlshash":"de22bfd10a7d2d48fe1c2f61be14a611bf0e54f3a33196977aa34b9798743328891a71","first_seen":"2024-12-10T20:17:18.968143Z","last_seen":"2026-06-15T01:35:11.399156Z","times_seen":51,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-7a8346b1.da43e276.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:08.312Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-7a8346b1.da43e276.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-27\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PxFsZYk%2BwMnAawqrKxsLEq92KFtHR4OGOQSIYL2mXS513kFILWzDMocA2jdf17PK5VvwRDZEIOTkjNHFmQkJ8neB%2BcGcVb0SxzTk\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b32eff6f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":39,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"66508feccad15a5fcd1a04f56be06c5c","sha1":"5073e744f550b329188e78840150f3d82e1b2749","sha256":"76eaf135c65d011ba2299210205d39588b8e9876b56fbb8886251b5a1b2cb26b","sha512":"3aa6c158e818aa498a3170d1ce30c9e0a6e0c373aa192d50f29b59bc73b29892d219357dc1b2a5dc009ec7f9df796217b744b9bc43dbe8bb766d2ddde0c20e90","ssdeep":"","tlshash":"cb9004411c3c341405134d147c531d141d1353c517434d0303c1d1017515700d11d301","first_seen":"2025-10-03T18:28:47.419606Z","last_seen":"2025-12-28T08:10:38.588057Z","times_seen":9,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":834,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-c058e604.1bec9574.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:09.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-c058e604.1bec9574.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 2448\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-990\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d79QZW95wciMNdEUVyBjfLjCM076KCU7rFPaWJzQP%2Bnq81WncbiRI%2B2DduW2tSukWoMbhZCv4YLjyLvzAuDG3XOtDGxahVqGIEIp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3344ffe0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7346,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7346), with no line terminators","md5":"9898ccf1c7e5761feed9c1de95f05b25","sha1":"606ce0b1aa23b6623164463bed4675b89ac4192a","sha256":"26626ebb89e3a52cf890152e250f9d82005f6a5a12536a0e3a5d185a9934a6e4","sha512":"c0f9acb4af85c8e24fc3ce03048a50595047f733721b5ad78437f9d6c974ac6ebd81f98e655c58932d2a9bd98a5878778c839a46c7a61ca7959d0a9995da36cb","ssdeep":"96:40FhOlQC5DPY/yniUc/XF4nJNqw4xaA4c/8VzEXEXnRvi:ROp5DAaivKuw4xMcIU","tlshash":"fde176bb33483338713bde5066a6728df256f23380179379cda82971dfc7a92255124e","first_seen":"2025-10-03T18:28:47.400981Z","last_seen":"2025-12-28T08:10:38.568698Z","times_seen":9,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-2.dd228a64.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.655Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-2.dd228a64.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-228b\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gBeGSiDXO3uIgWeQfUQoSVliFmNoOG4%2FN%2FZzc7Qp8aE92dWCamgNez%2BT0zqT5wk6re7KEu%2FLqYZ3U89wVP8vFBIBJDDtG57FEcsJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30b9b9a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"dd228a6401d70faff4d2d502c91d6a6b","sha1":"4e146df8a72bb8a56c0f414e485f8c6457514778","sha256":"5696133562d82f3f035827e4b3724f307ecb7c0bfbc9bc93db1d388e823d914d","sha512":"7234ed0af87f522e0d8ab0e9da182a612a171c75fd2470e609bf62c7c0b30cd1aed37b786246ee7fa81ed506cf3704d43c7f07ca23e2a37f04890677caddab05","ssdeep":"192:W1c1grD4o0br6qywdTW5QDYPiTdwLhabR5kAd5pKaZB+POJbRM8Cz46x97:Wm1aD4/brLPDoWWhabRJd5pHZ4OJdM8S","tlshash":"ef02bf6dfd345a1848d6a30a379e363c49a5fdcbd7c17192a1f2eb805b406a90cdc471","first_seen":"2024-12-10T20:17:18.997239Z","last_seen":"2026-06-04T23:18:52.320845Z","times_seen":28,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/recharge.8a03578b.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/recharge.8a03578b.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-10afb\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nY4qW4TMd69BB2%2FUfONHxtjlXQPLIy3OF7pktbjQ4GUKR8UOVydULWx%2F6F0wNw%2BH5VBP19UxH9vJSSTrjItrp2VDijLjNePyP2lD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30b3b8f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":68347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 218 x 196, 8-bit/color RGBA, non-interlaced","md5":"8a03578bd4c66b335d682aca8c675ec8","sha1":"4e53742735c979b8805325e3e594255bfe8cdea9","sha256":"936fc8d7c1964f820640965c5380be6e5dceeadcea2054163aad08272a25c5ce","sha512":"80fa47983c4739a5822f5500fb73839328adfffc2ea92ad30b5323e0d5d4b57e2f4138f141868f09487d7586267e40a81404737c76fea9eab892973996314ee4","ssdeep":"1536:s/xrdYL11o9VwpVGo9fu1zPXiwnUnkSAxe6:sprdYL11o9AVjfu1zvukS6","tlshash":"3163025d24416cf91b5ff234087448a6ada2a9b45463a362173fbe4f25c376ef120b2e","first_seen":"2025-10-03T18:28:47.412462Z","last_seen":"2025-12-28T08:10:38.574314Z","times_seen":7,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-7.b96794a7.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-7.b96794a7.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-21d8\"\r\nexpires: Mon, 12 Jan 2026 06:56:59 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 641042\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LOmJPnchHae5l4%2B%2B3h7MuqhhLlCN%2BckDU6CYMvyTWksbI%2FT9WMLCbB9p8OfCLICjXJwo1bgtgfLzdz1gu%2B1nrCjIcuHoaMwtwcQ1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30bfb9f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8664,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"b96794a73f79fec4db00adf3dba0d6cb","sha1":"b934eea451b521ae61bea72629d828fca31e6f2c","sha256":"3bd663d4b5cf38c925573dee9d01ad4817e53c8db871c2b023156f8bd0bfd098","sha512":"0631e2d2b4079a925ff2f4a2946a4816738ee5dc44bd5081c46360bf1a9fae42986ab525fda43acef45a676976b1bf548f100fdad6add152ca117ef96040ee3d","ssdeep":"192:23iv0RIEAiZp7vV/Dokv14u4FwOx0terDT53FW2d1iw/SY5Ood9Ks+3vFmu:23ismkZpdokd4uaJPD1BYw/h5Z+3vF1","tlshash":"fc029ef536a148c9c91c97113a5eb1e884bde279b1b6f30c5b00698f1731668372ab6c","first_seen":"2025-01-30T09:50:41.429382Z","last_seen":"2026-07-14T16:42:41.756549Z","times_seen":52,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-21.770f1de4.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.884Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-21.770f1de4.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1dce\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oz2heKFe7bAigqQOOY%2BmrGDuSr4JoidYap301QaTnZwnVd%2BeNNUv7PmTHZ4jqEnl1O1SoAD1XYzMpiH7RS02zRM838x76EtHg1NZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30d0bc00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7630,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"770f1de40d81ebdfad0e26412621347d","sha1":"4aa408b9c8eceb1fbe43d7a7405e5080dbb4c7d9","sha256":"6e95de6441c2e6f0a1400cf64fade3fa3e5c60e56693f2aee5ff284149d1d481","sha512":"a93908a97707f76d2084811b1fa1493715b1a2b058ed2f77f98c36fd69559cbf16832b43f44c829619453e866ba61a360dd09221de2c9e2cc42ae502e2fddb58","ssdeep":"192:r6EpP4sOIJT3aoTV5Xv/Eb5HKOydsQqwArtRJ:ZpzOIlKoqWAZhRJ","tlshash":"29f19f8061323f6c9c75f65a198a07f1c47ea1bc66a01a1f07027372b7e4bc205e5ba2","first_seen":"2024-12-10T20:17:18.960493Z","last_seen":"2026-07-14T16:42:41.762064Z","times_seen":42,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/partner4.7fb5a0e3.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/partner4.7fb5a0e3.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2bdb\"\r\nexpires: Mon, 19 Jan 2026 06:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36590\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eL7AlvJm4ifW%2Bk9lJd64uzwQLKOYnW4VDgTZ0MHS3qfhLsQ6hPO1dfMXxG5vA5IR28fet1FandsF5DQWzkw8%2FtR%2FlB8e5kuG0Dp8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b322ce440731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11227,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 220 x 59, 8-bit/color RGBA, non-interlaced","md5":"7fb5a0e36369a4a4e2eb2cad6ff593e5","sha1":"543298ff46b4ed804a9f9515089c71d8d6724f07","sha256":"1829c3e0cb6557ab8c56afeed09dfebe1f654cdbe30b39956af01bcc63e03019","sha512":"40162e269a15fc01a5c5551a4fc9595c5c2112d1f840c600c3b8d0a1d4b747b97dc021f63c6c8fb904a96abeee23f5bc48a14d3b00e2d946d93f530ef83e6f31","ssdeep":"192:5NU1Ok/B2Ucsf1HTRZ2A/l9fRMyVBdwE86mtRBT8PbaaLq6WKjoh1V0mXPk+QmX/:1k/B2Rsf1HTRBl9WyJ3SbhDtsA","tlshash":"0f32c0d4b230f86dea6b3a3ba10c6a16ad34558de02730d85132877e5ba594d1608bd8","first_seen":"2025-10-03T18:28:47.3977Z","last_seen":"2025-12-28T08:10:38.57658Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/app.69feadef.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:00.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/app.69feadef.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:00 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 110063\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-1adef\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eA02hUgCmsfxBnUL7BXyIqMphQx9yyBGXvSV1KiDrHYUStg8xa7IUXwV63nb%2Fzg5J5haWbL2OdDKUQsfJpaFCi5Lfb3Ivkoov4mK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b10b2fbca640731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":374649,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (49573), with no line terminators","md5":"579834ee12fbc5b60881745f70d7cfdf","sha1":"19e630622a224e23cb50b32798e4da9542f33a77","sha256":"744ff1f99eb4aad1f74d84fc6b141eaf38ce51e08b12fcb04537a39f97ee6558","sha512":"21a2105776ea373a0053d6a233fd976d52b79b2953325c8c741100aa546644204b387b28df4b4cb8dcbf9e8f4b5e1e57c431e2756a18c63e31cdccad554a3a16","ssdeep":"6144:5lQnmYCRM0FlDTBMBlPe6rIp8Dy9sOlJB7DxqtND4/GJjVrcktv5q+V:GmbRM0FlDTBMBlPe6sT3JB7DxqtNMuJR","tlshash":"2f84599ef2c578b18d96602f934b3235f2311c73b602d5d46fbea4d366f5e05821aa38","first_seen":"2025-11-09T09:10:19.156813Z","last_seen":"2025-12-28T08:10:38.59033Z","times_seen":6,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":815,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-0.2c756f90.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-0.2c756f90.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2ce6\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AEH94KLvVEQVPD7TgDf4gTZvo9Jw9XJk5QoiqyU4lGtdbuI6QCje6BEZ8a77s7q%2FvYovz7bpYdj24FjXsAHd3nLntm2WfR%2FM%2FU8l\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30b6b950731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11494,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"2c756f90a5eb799db2730509ed30548d","sha1":"9c47300d25bd002705e983a3156b9423032ea983","sha256":"f1fc95e1b8e56b41c426bd2af3f0fbbb9c06d4da899520bea7651f7ea6189c78","sha512":"6385920d31877dee3d92867a77b051bd5acbd82efbc35f6a3a5ce34c36ccca92bc465e01ee1c9fb611a2f96a6eca9b0bb8dd05b9cbc1bdef3a4bf9cb5730ba87","ssdeep":"192:aFtTTuoEYnUHpE+XX2CZA64LuIzefBpEIhCoU+y7Ljf+2faOoNbHxEkOD05phxjT:aHRUjXX216vqeZKoU+y7X1yOoFREophp","tlshash":"4232c07ddd8a42678b444f9f2395ec1d3d091ada01328ff305aaa0e7c175a2b3ef1252","first_seen":"2025-06-24T20:26:31.538902Z","last_seen":"2026-06-25T13:45:22.966735Z","times_seen":19,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-1.49f7cecc.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.642Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-1.49f7cecc.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2e4b\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2S3WP1j9ZZapLWbxBj%2F%2F1EvHBYoGPRFU6p3Ch8bvBK5ZjDEnF%2FNvjUQKClJOeCoekLy%2FAUT0uxZn4yWobCuw%2BG4PVSuK903yc1xh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30b8b990731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11851,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"49f7cecc4ea4653e87be1f650b6ac5b6","sha1":"ffb2c2ce613436d8985d82b6e0ef71a7e8ee03a4","sha256":"2914803d1b241853e4a1ee95507879e65a12dd9b325068228898121a7071bbe1","sha512":"591050a03b8e9427790fc8cb486435f56f44348816cc0c42cf2d87100f6e515a7fd7f72b70e78eacbd4d887e1c2505b6b72820dacd91ece4fff5a210b6d27e12","ssdeep":"192:D6O7iBGSqMtBai1Dbu4UTUruKA4kUtlDvC6nLz8etES:B7iQvIBaQu4UrhWlDqMfrB","tlshash":"9332bf62936993c8785d5534aa177b51e27978f01414cdfa5c3008ad226edbef0fd0d3","first_seen":"2024-12-10T20:17:18.940287Z","last_seen":"2026-07-14T16:42:41.746662Z","times_seen":112,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-22.1c161a75.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-22.1c161a75.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1bd5\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tWZYDlcQKTMxFZocVhlya753mFOChncfryjZhe5ujDVc98XBARop5VFf8eOepaOYffjOngGL7%2Bz14xnYi71U7dyAV2s3vvT82MsF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30d0bc20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7125,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"1c161a75e5fea8f80e1891831e9bcade","sha1":"0eef04cc3f8d2b84f9deb6b128d5bb854b16ec7c","sha256":"1e779c61cd53897c04b5d39262eb25faeb27cd86595280c71a16c68c43d1614d","sha512":"a841535bc7fb4f1aaf05c2ba8b6e91465ef0fa922834c0308680df6e738ecf0f96943d1f7ac0c3a4641a3784aaa0f9c19dc1b0acce1d4ce69d25d33b0f9e6e59","ssdeep":"192:Vdy8j47N+oWqx7FHpOzrXOgcriy1Ibty7Wz:6caYJM7FIzr+gzty7Wz","tlshash":"08e19f1a19833c37d034b749da5b376cf639b35888d36928784ee1af501be50ab8c596","first_seen":"2025-02-02T04:03:34.277349Z","last_seen":"2026-07-14T16:42:41.674368Z","times_seen":40,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-50.81fe74ab.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-50.81fe74ab.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-22fb\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GPX%2Fvf5isbwFkEFsxLzuE7CCIeIkKj4o8NW5JrsZTflyVdMlGzT3xlYbEmuiHVB4iQBn4wO4mOzF40Ijn49zhpNqDRox3eU%2BjbY6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30f8c100731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8955,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"81fe74ab3fce4cf8f1b471f15508a247","sha1":"7cb9c265224549131fdc3073c9827761c1e67cd7","sha256":"26a56af38b6132faf33743cee99fd02b48f6b0c713346bedba85f8d2b89ed37b","sha512":"b4ab6eaa9ca6559dcd73508208bff574e081bed21752e0259937356fa6beda0ffd56f51a3ec5d0ef1ca30a52491c9e930fea295f7e77fd8b6400d84958dc0301","ssdeep":"192:LkgCTvLmlag/2M8iYW0wqJgbzDKJzDRosD5TqGLuHuoR:4gCTzmlag/h8iH0ZguRpLcui","tlshash":"2902aef62e8362be70f1294c367b0242cbf4c5fb1e80955ef5a5c6afe51126442462bf","first_seen":"2025-08-10T09:50:08.692689Z","last_seen":"2026-07-14T16:42:41.657429Z","times_seen":14,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-5a116866.0d268599.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:08.302Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-5a116866.0d268599.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 757\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-2f5\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yzPuVXj%2BlZVs875kx%2FjlnQqLhDHY17h%2BHfvvjKYkth8exZ7GzAOye%2BjXlJiBsUrOdVvDWZfc0J%2FkYwm7LxehwqWQB5KN5MhJ7reI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b32eef6d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2357,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2357), with no line terminators","md5":"9d99a9a6df90cef4ad32fb7e83c5eedb","sha1":"852a7dec28d2fc502ec15a688c7134d147e07290","sha256":"ef647814e1ba1248bdfb3b23074d5c4802d9b286cc221d5c2f9a2e2d8ca3684a","sha512":"d98360d60ab457122e5e079cfd0c410d0449ac516b92a5e4a6295093ee8c697db6603b57a3217c87050f7f6a0190a2c5add50657820c2924fa72e1838199a667","ssdeep":"","tlshash":"6a41fd23319ca718f0bfcb9099c956567664e33bc22223f49b132d35cfc75f21661a85","first_seen":"2025-10-03T18:28:47.385076Z","last_seen":"2025-12-28T08:10:38.60213Z","times_seen":9,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-5.186b7173.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-5.186b7173.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2497\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1Lv5NAAxYGL3g6Ml7yp5RPbfXlVC%2F8%2Bmv%2BXf2prsPSo%2FqQCfhi0RpFGyNxP5u7d9xfY5pQ5Tp%2Bot0jFPVmxjwMQWKW7iF2OmEjf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30bcb9d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9367,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"186b7173ae1a5ef99402a6222b6df1e3","sha1":"1f37c3cacbb3594e5323490d3daa16e98a57a8e9","sha256":"f4d85c230b309b4230c4314cc18dedf045a2a898cf64b88ff9285706672ea8ff","sha512":"224a35734397bd25f6c0437097ce4d4e8a31a6c2b670618eb19ee4527850f12252e4ff58cb5e7e7df983c519642ae33e8efcf6bd9e68c456418168e55d8b11e1","ssdeep":"192:JNXk/JaQ03s/2CDIfvjsFFEAv9Xt0RH2fRYHaj5nyYiurlYi:JN0/o8/2nwFFEAv9425Yo+uf","tlshash":"c612bf200162c6b6c877ed748232585d0ed6ee3791fed4bf57c4b35444a24ea623f20a","first_seen":"2024-12-10T20:17:18.95482Z","last_seen":"2026-06-16T15:51:09.686847Z","times_seen":68,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/partner3.d8df48eb.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.348Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/partner3.d8df48eb.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-45f9\"\r\nexpires: Mon, 19 Jan 2026 06:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36590\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uNE1lXtQ2ZOQ7l%2Bil6IaDp47lFecymmtcqsJeeOqkEqDPxogBSwLbYq43OXRqo%2Bgp6C7zZTUsTPahee8sTj%2FC9fNUJ0rN1lRv39T\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b322ae430731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17913,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 355 x 142, 8-bit/color RGBA, non-interlaced","md5":"d8df48ebcfc544c0a7d891dd2e070426","sha1":"23d813277b1eaada73842a96421bc15b9e73cfb7","sha256":"3321c9d4fb23b7fcdb7002ceaa217b93ad20455d661111038f995d9c45b7e4ea","sha512":"8fd0cb740a9bb302519236ad1eeca9fd2430cca39e509a20ee9624a4ef76fe42d6584a619ec54a40a2d6a7d47af4452f661366003b386b62f2190904865008e7","ssdeep":"384:yDnAxYGKyR83b7yeUUbYwSLIaAnbsM5UffBdYGob/hNMX3OZE5:wAqGKyR83b7y+SIXnbFUnjYp9CXeZ+","tlshash":"7f82d1147cc1bd46c9a083f4a15820df7e53ad660371cd6c3b2af77239ab952487ab71","first_seen":"2025-10-03T18:28:47.410388Z","last_seen":"2025-12-28T08:10:38.601295Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-1695b412.e24b52cf.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-1695b412.e24b52cf.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:07 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 21 Dec 2025 05:01:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-16\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJtlABPWWn5zxeHYszitHokllKM0w2jkjmbCPYjlyV6M22EM2D3lUMnlLAgT3Perh6%2BCVZpyAH4m93mV9083p%2FhDyJce3HD9kM83\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b324ce750731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"0ea8fcea94d5ae52e0d9c7381b8825c3","sha1":"876f82b8a109cdf87a638fe15b2418668ec84a91","sha256":"a42a0b32c9106da635f87faafd18927c88777bac8943292f3cd19756da608c5c","sha512":"18ffa502d1ef369ceeed7b5e5294735dbcc1dc97e54695616c1814a6f74dcadfb341fa0946ef1ea2372ac6f1b5ebd04791aeaeeec314daf1215cc93e60b50d47","ssdeep":"","tlshash":"3b7000020820302800002c20382220282803800c2b83aa0200c200808220200c022280","first_seen":"2024-01-26T05:36:38Z","last_seen":"2025-12-28T08:10:38.636314Z","times_seen":16,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-21596304.180156cf.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:07.008Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-21596304.180156cf.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:07 GMT\r\ncontent-type: text/css\r\ncontent-length: 2955\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-b8b\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yDDVMmX9ax1mUqEwf4aEkcMOP7LjgPqzDhUYxaAZbzNafGKw4XXAWc0j5Yx9kDZFJ4A7iyMSCIlIET55%2B1fKNuo1fF5RiAZRihMt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b326ce9f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15105,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (15051), with no line terminators","md5":"ac4c7610d3bd53b7072964845ed113af","sha1":"def6d056148cb818fb87cb57eb4cdbb7ba9505e3","sha256":"add3f6d52902e2a6dc3c4d7e1eca1a3e43c6f08683852a1964af556cc9cbbff3","sha512":"05b4520ab3f61c2f479fbc54478673e22517c55de66e5f9eb0bfc5dc92ec7ce340566ca410f402d778a478cd04470e0bd1fc7505eef08d59c1579f18b01a4929","ssdeep":"192:QMiUkpWDpfZwsL9Q/xxgBk4CbwDVpf9tXm4a:qIpfZwsL9+g23bwda","tlshash":"db62b0577cca3649f127cc3417da1656971ce233e00116af98d1a924cfd3b8e26de36a","first_seen":"2025-10-03T18:28:47.247798Z","last_seen":"2025-12-28T08:10:38.628055Z","times_seen":9,"resource_available":false,"data":null}},"time_used":782,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":782,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-1695b412.798d6773.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-1695b412.798d6773.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1864\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-748\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WscKLxTiCQqZeL7ORy%2B7rGDo9RrJ3zQHD9HM9QTvlMjQVS0JsqC4xmbSvZwHxZF0Jll%2Bi%2F4ukyk1arUiZyQbR0w6fV%2BjSj2NRzdf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33a889e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4465,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4465), with no line terminators","md5":"a70198b9fa669a607c4a31e80e36543b","sha1":"fd4ee71f231858bdf7604f405a1e293a234c3066","sha256":"84bcd1fd33365c46cb80e006602414226f97cf19cd5925c913261b682a6f0c24","sha512":"b10509f9b864864d6a50a100f94882ea69f3d179ad31a08decf284ce74cedf736cea8cc07b9e5b0a5bd6a88e78f4fbd40ee7c3832d42b273c784ed4087d06e49","ssdeep":"48:lDuqjmOqyiw/P95MiTSnzsOLKgX3ZQvZgvKz0L2Q2k2t2O2M2IX2dz0LQJf0LQpK:Q0vTysH5wqZ9cHV9dXvHy+txAHE2","tlshash":"57915227e0c5b5a6cf21e0da3d1724e5e339450c901dac07a3e2ae96f2e5e2d11138e9","first_seen":"2025-10-03T18:28:47.40519Z","last_seen":"2025-12-28T08:10:38.609431Z","times_seen":9,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-e469c90c.f986004a.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:13.075Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-e469c90c.f986004a.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2524\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-9dc\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FHzkFWN9UOBBvT5tLpAWTjUe%2BdUbyB8smjXgtMjTZw4t0zaHTwhwflW67Zt6TLYvHvjNI3mrVVDygiFDhS1h1Cril0Ck82cjOGlU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b34cbb620731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3653,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3653), with no line terminators","md5":"a0c07ac05ed8d7cb2d333f57313587aa","sha1":"6efa9439158f9b4c1e941b7ba4713d9b14615046","sha256":"1c4dcd026e7cc0a837c1faa1ae580581135adc9938978d816ac1a51cf526888c","sha512":"77e72fc2725ba927d9b861de727c6a1d40d9bdc33b01a57c3ce5c2430c2acdc9e0b0ebcad7fbb314f0f546a21a0b6b8b21b30a7305cafa7d3b8d0999058cb077","ssdeep":"","tlshash":"41715baeb0c3f02d893b71e4603f6099f02a16d5540d98c0f676c904cbe0c48df9ea1e","first_seen":"2025-10-03T18:28:47.353531Z","last_seen":"2025-12-28T08:10:38.596016Z","times_seen":9,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":790,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/finger.3bc15a0f.svg","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/finger.3bc15a0f.svg HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-32d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIDXbXhMCKHjWpr9TaC8J4EHVCYlqhWlhd7kvL7e27QRdM8EjUX7qxV7ZOElaNr3%2B2fVe0YuCaj7tsPChsf2yDui7UG6sqs5A7nH\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b308eb620731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":813,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3bc15a0fd32743daa0dc6df3db2a8355","sha1":"0ef6fcdac7b6bc7e36bd219da4c314240e3c59ea","sha256":"deaa0708e614bdd338dc5d35521d29917afc8d57dd7e1c32810599519de40d76","sha512":"ffd89b6fa98a18aec75803939d33f1617d3d0922dec1d8a1955ead8384b886abf4c9166703a594dbb2e2430edf87d907212f5d8a3c3ba3bcfb0394668c601f6f","ssdeep":"","tlshash":"17014178e9dd4b7eac09d78d071569d973dc18f230502464cd6ca1f960a79a0fa0bc9e","first_seen":"2025-10-03T18:28:47.408066Z","last_seen":"2025-12-28T08:10:38.640578Z","times_seen":7,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-56.46bfc9a1.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-56.46bfc9a1.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2224\"\r\nexpires: Wed, 14 Jan 2026 07:40:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 465637\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srT%2BVqtkDV9uQr7MwgGvgh5hUEI0dOhPvDQHdbwbsBflzpPcao1wOG6ivj3JE5PBbqHMI5%2BvPDjcLuijku5xYDAlUn7kEVB01x%2Fq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3104c2a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"46bfc9a1b5625c5ea32f311d5a02d2ff","sha1":"adc375f1bad1c5836f1d43d6ba2737a651d7066b","sha256":"eeaad8c8ceaccf6350052ba29739af3ef472d949a20329cacbbd270a8f82b344","sha512":"0413babcf1cc0828cee2d05d453e46c65a96b3f7918ecfd4c9b1bd07dffa099fe771e2852a7e477a3aca34b0d6cb52338113ab03ce3f1b122af4d5f6e7f08d73","ssdeep":"192:+/7omQc567rYoBDY2BRnR0Kd9m+//CN/FCKPQTa8nv:+/7pOYt2Bb09zITBv","tlshash":"8002afb794b1a8d4afe9b369f46cf5f0e22294344fa70142a006257d4e2cc9310da9cc","first_seen":"2024-12-10T20:17:18.989888Z","last_seen":"2026-07-14T16:42:41.709302Z","times_seen":35,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-0ff1fe33.06426160.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-0ff1fe33.06426160.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:07 GMT\r\ncontent-type: text/css\r\ncontent-length: 1928\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-788\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3f9aB9LdsZP2g%2BUIi502z6lnMgCHFe9%2FNu7ZOhIAU7Mlv2wAhwcP%2FO9yzyM59CsaXONVRiKlA571EP0RIgDqeabYLPXoUJlHIgk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b324ce740731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6823,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (6769), with no line terminators","md5":"6caec0224e088fa85c7833f00f6163e2","sha1":"6dbfc5dbc2e3be9691fdfe09ce2b7e09fd105c4d","sha256":"9c48c5a9db70e3228db44da8b02f607a06bb88c8a4e8b8f4cf9513d5596f474b","sha512":"d9d33a79227bf8793c16e9540ef733cba541b8cf49b3d50539a30fd9f4bc1c2b67cd16b15ba45016c7c64bba22161aaa661d5f267c2f6d4a11d5c4646ae266c5","ssdeep":"96:jPLrVuD3Uf3nk38W3rpg8QD15ExHBeRW1QiGxSowR2ByGujSx:TLf3ksWbpg8mnsVQJxFB2Sx","tlshash":"d0e13faf90851a896717cc2067a4779a8728e132d5451ffee0667a28cfc37c217e234f","first_seen":"2025-10-03T18:28:47.391292Z","last_seen":"2025-12-28T08:10:38.608422Z","times_seen":9,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":801,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-261be7b3.6973cb0f.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:07.471Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-261be7b3.6973cb0f.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 1974\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-7b6\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R06B2b35%2FQ2gjtStfRz7n%2BvJEvR01cxiSrxmvW9uCNRiEejKbuD89NpR4rPl8%2BUctARqeFX5jwxfDXaqqE1XjcLs4QLhintrHfjL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b329aee10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7134,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (7100), with no line terminators","md5":"6deb7a35895d564fba96a6f3ffec28be","sha1":"6a9646717801c1e0f3985036cd7a63122fe94574","sha256":"e842a726e52bf8c472c5f05770f40d6443c4ccd3c962c9141b18b6b81fc7fc6c","sha512":"382c37474e20d0d138f68865ad8bca97cefc3710b9ddb820c7c619974cfd0c8d003430f62391959d4f6fa16e3521b693a3fcecdfa3353d2e4c6d1de29a40bd2f","ssdeep":"96:jPLrVuD3Uf3nk38W3rpg8QD15ExHBeRW1QiGxSowR2By03v802dS7J:TLf3ksWbpg8mnsVQJxFB12dSN","tlshash":"2ce12fafa1851a897717cc2077a477aa8629e032c5451ffde0167a28cfd37c616e230f","first_seen":"2025-12-19T22:21:50.134826Z","last_seen":"2025-12-28T08:10:38.555857Z","times_seen":7,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":824,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-3dff8a78.dfd284f4.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:07.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-3dff8a78.dfd284f4.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 2164\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-874\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nGF6C8D1q9Gkc%2BBvE06OqAIvbfDt71qFPqmzkaggYXk6tKcI5maQd1JgWvC8UHDQ55sx4HhIgF2dc8PjbehNxO2muqv5fmtH5xhy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b329eee80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5421,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5421), with no line terminators","md5":"17fd1d859e85920c9220ba2c6f4e1289","sha1":"c4bf4c1bb43ce432a1989af4147170a38aa620af","sha256":"d4003b27ba3e56e15d967a460d92de8b6b5f57f8991d55e533718a41433da810","sha512":"45ec12ae22e00d3671a06c90385e60bd44d0f63b9e253c2316224449415435634a282c52df0c524d5525c15890b25b210f15cf648b8f894d585a5a9e16999046","ssdeep":"96:b0f4IJ7OlQC7k22D94gUVnZXIv3LgmAfZYJ/j2xSx:pEOp7j2D94zVnZYx8A","tlshash":"91b1a8274115272db12fdca46bb0a1c7b150e877e95733b5c9927932cfcb69706e130a","first_seen":"2025-10-03T18:28:47.418664Z","last_seen":"2025-12-28T08:10:38.647253Z","times_seen":9,"resource_available":false,"data":null}},"time_used":781,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":781,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-d710d97e.9c0088ec.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:09.322Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-d710d97e.9c0088ec.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 3936\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-f60\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 7\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zyU4ZXD2E65zbqdYG%2BQpBWHlMF0DCw%2FwlfF3Uy%2FjEWu4ENNCAyvsRA%2FABeSYhniIj6udjZ5Wk5GeY7lzDQ%2FPeAikC0MQD0iuiXut\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33548240731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18040,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (17986), with no line terminators","md5":"8c1c989ed747ad4c36cd95c8398887e8","sha1":"39df2fd89a60c6eeebd872ace549e41d4851662e","sha256":"34ef2e974729ec9db2e3ec4831e60e450b44cb9f04b4b661e5d0f6124339b20a","sha512":"acd270b22f815d116189c3efb366847bb766d784845194be183f83469908bd5f3d9e97611a7c97f690f5812cafe5697528b8d5a4788326a22f8d044183028dea","ssdeep":"192:TLf3ksWbpg8mnsVQgxVBku1HrDc0oe15qHNX/RGTyo8q2ylyXWCn4QE:Fopg8mnsVVV5Top/0pB","tlshash":"aa82713f5191160eb22bcc616754739e9694d033d5162bfed4aa7a25cfc3bd206e230b","first_seen":"2025-10-03T18:28:47.313673Z","last_seen":"2025-12-28T08:10:38.62306Z","times_seen":10,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-0d042dbd.813a83ae.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.017Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-0d042dbd.813a83ae.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 5859\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-16e3\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=86RJHqxQppfZ7j95NotGphZ0ifkwdKg%2FvxsZnbpGksfH8Yd7QHiNUOYAOEBp5GjUg%2FURTVgGQ0z7qtCQ5hOiTH67Y9KoXnR2qjcD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b339987a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16084,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16084), with no line terminators","md5":"71ea1ca431545a29b2bd5f4115c05da3","sha1":"cfeaa1edef4bd9d2a526e11814b3a3e206f43970","sha256":"93e326e5378ed5cc158a5b8836cad08902bb497a08d2723dfb500716a19e1f0f","sha512":"cd418deed9252149a87a7a56ae41e47a7fa70b7288528601a14fdadccb1bbcb2fa3a4c8e9db4db77ce57c4137fb75e05d4b871e17a5d55ccc309ad45b08c937a","ssdeep":"192:5hXk6kMV78X3chxi1CU9VEj6Ue1oS74WkD8xfh48HxhGiCiXl31Itv9jBNgIVuRK:cUVQbL9Vce1o1OHGiCiXt1IV9tNgIWI","tlshash":"e872d969e497f9b9ccb67060117b2710b0b13eebc062c1e1e679ed8947d0945ab0e75c","first_seen":"2025-10-03T18:28:47.380943Z","last_seen":"2025-12-28T08:10:38.6635Z","times_seen":9,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":867,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-d710d97e.5bd3588d.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:13.066Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-d710d97e.5bd3588d.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 12760\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-31d8\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 10\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o%2BBDgbx1ndF2piSwtUc7R5Fwfh2X4FMipdF6a9Wzw3%2FYlbdKjEdL4y%2FXu68CUsgAuDasvxbqVde51s3KhsJYY6RmQUHIM1XE3401\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b34cab5f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41125,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41100), with no line terminators","md5":"cbfdaf95da49b0e86e5c9ea2ae274aee","sha1":"cab79a78bf59477ec7eeb5eb2f5ea195c51216cf","sha256":"ae9414f95aa7329baad4b16e0dbf8d7777b6cde0c8462aaffe68541d6f0b3f87","sha512":"7907dfc243f827b21aefc530c86902cc7696af26487a7f1e3e131e0041fe536716a4c4a1b40889372e344a8d7de9dbeca1d0c58cfabb72872250b01e210ebd05","ssdeep":"384:lShhQplA++4EPL/+MGSECDmLdzz8+RIlHuliluzn398vN3XOn2JFBeNkg:lShR+rEjvECDmLd38+RIlHulabYNkg","tlshash":"1403a58bd511ecad5555e08e023f256f00fd0a04609dcd1a97bdbeb1b6f268e061ebbc","first_seen":"2025-10-03T18:28:47.30739Z","last_seen":"2025-12-28T08:10:38.549258Z","times_seen":10,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/logo.aeac7b44.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/logo.aeac7b44.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-5740\"\r\nexpires: Mon, 19 Jan 2026 06:51:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tHKlGQexztONsVX8WPotuisBbAuBrQdtjC8glAEZtaaoUiG1w35t3ZkwmLdl3PG0RwX3VBaQhH%2B2snFZvMdjErKxfu9dCHVfSjBa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30acb820731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22336,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 305, 8-bit/color RGBA, non-interlaced","md5":"aeac7b4428a00202780a1809ce15d944","sha1":"f5a09079c797585b22325f5137e3b42778850644","sha256":"62a6cf6445844c379c006604320cc8911c1759d507ba6192e67040330d34004a","sha512":"922a0c4d3697966e3a88610dd0228ad918aef1d4f7c11b1082f3dad1e3e9d35c27562559e185dfb0e41b7ea460335d70a190058e03de3a602e82188ac6467668","ssdeep":"384:Qge+Tah+Hf8M5H98Ewpco7glhR3GY/NwcNXyTRzkLbWYXFMv58h04UtR7ZPb+71m:DT39toElhwqN/XyTlGWYXFkr4S+7F2zx","tlshash":"75a2cf808b87f630cd3f50b7a894444ba294695d933f5fb0833dd79cd3a6329ad94729","first_seen":"2025-10-03T18:28:47.311386Z","last_seen":"2025-12-28T08:10:38.677079Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/partner6.fbb26566.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/partner6.fbb26566.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2224\"\r\nexpires: Mon, 19 Jan 2026 06:51:16 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36590\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tz41J9wq19meoI3maECOM%2B0sImBCls6YHKQlNOXg7iJAUv7uNvPINokv6MhFqJbtSjzNn1BsRjPuOO3vVu03hVfTfQoHwvGnjVPg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b322ee4a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8740,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 68, 8-bit/color RGBA, non-interlaced","md5":"fbb26566d5d709a48c4ba1c7154510e7","sha1":"2e069ddfb8c61d6e913b905f05e7348ccda32827","sha256":"1912020bb4375d3a53a308a4c5010af9644826380a08968ef18a45cef6acdbe7","sha512":"4ad9bf5f372d3964f7a11e2849c6fde8aea69abe20bf3e4661db4e54641737b1b243975001f49cba6ea493a99ac704dedce9921b0d8833a070fd5a3fe7f3c89b","ssdeep":"192:Ihk5tjbLuGAoAa3I+8dXwASqnZeg+EQPPQIQxw4xI81bT+8l6n69zdTCSqWt:I67Aa3I+8J7SYLK1LcI81bTRl3","tlshash":"9102af9305bffc02e33bf641f376215c16a4c01d9d09acd5feb9e9a8d94b09409516fa","first_seen":"2025-10-03T18:28:47.390268Z","last_seen":"2025-12-28T08:10:38.682828Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/order.848e4939.svg","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.222Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/order.848e4939.svg HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-5be\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BqUfC0uJKMExSV%2BccC67wdX9h5s6vJr8PSiwfEi84NGPEbqXMNIsbntdaFzdlaomCJgnTLy6ef54Wt8VTiChwpefDnpPuxi2cLtB\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b308eb5f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1470,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"848e49399e53466e3233624fbed10800","sha1":"ac34d55ed1edfc53e2ff3f2ecadf17795bcd77a1","sha256":"6549ce8ecf72f4efcf6da873b8823e56e59ebf747baea7bd3cab985f6554fd5f","sha512":"338f3afe8c6bef16137a8110de851ffaed65ca4109732b90882f19c8dc8994aa322ad718ba0b5cf3f61aec2c4958d2987063b5dcf72013047bf73ebf55b50c08","ssdeep":"","tlshash":"4931f0c8e534a578d448434eba70095eb1bb68ca32a2072cc196ae2584d3d6e7f40a9b","first_seen":"2025-10-03T18:28:47.361081Z","last_seen":"2025-12-28T08:10:38.527314Z","times_seen":7,"resource_available":false,"data":null}},"time_used":863,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":862,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-11.dd228a64.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-11.dd228a64.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-228b\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=54%2FV0qh1b%2B4r2AofZFm07FblMZja61528seQGKYwByPAfQAjNAjwGGqjk5Dxp%2FQngyMH3M6J0Bd20WV51pyid%2FdzK5HPZul7UwiN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30c4ba90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"dd228a6401d70faff4d2d502c91d6a6b","sha1":"4e146df8a72bb8a56c0f414e485f8c6457514778","sha256":"5696133562d82f3f035827e4b3724f307ecb7c0bfbc9bc93db1d388e823d914d","sha512":"7234ed0af87f522e0d8ab0e9da182a612a171c75fd2470e609bf62c7c0b30cd1aed37b786246ee7fa81ed506cf3704d43c7f07ca23e2a37f04890677caddab05","ssdeep":"192:W1c1grD4o0br6qywdTW5QDYPiTdwLhabR5kAd5pKaZB+POJbRM8Cz46x97:Wm1aD4/brLPDoWWhabRJd5pHZ4OJdM8S","tlshash":"ef02bf6dfd345a1848d6a30a379e363c49a5fdcbd7c17192a1f2eb805b406a90cdc471","first_seen":"2024-12-10T20:17:18.997239Z","last_seen":"2026-06-04T23:18:52.320845Z","times_seen":28,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-41.0c06f48f.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-41.0c06f48f.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2601\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zEyE8IaapVmJIygLtTOghR%2BG4yzzkMPNvXCT%2FPEvf0DoSHxF%2B%2B8Vcf%2BZDo34JUmnJTOVLV4dDz4dqFRbtlf7KVwmZowgKXb5JoyC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30ebbf00731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"0c06f48f2cd08d7a88373a0bd63585d2","sha1":"23575897bdaf01e8bc7d071aeedbcadcc7f6e2a2","sha256":"2c82a8a2fbb9fd59fc1aff3d53250edf06147ea5713f3e950011d505c9f6968f","sha512":"f3c909a6c33f71e22639439b2c47ef5f27a71eca550d1ebfa5171eed267dd060379f093db41990d5ca7c1f13febf7a5b03dd5bc9cf973a465927e6bc6c385203","ssdeep":"192:24edJmG/pUyNgJyazwbHVhn9V1loWnM8cKbiroHYblfMyr5rmBiqEJv:24e/v2y2zw7Vhn97jVbirUYbVMyJXnJ","tlshash":"9912e15f7df6130d0877191d3dbb9c1020c1cc34453eba0db89a846e5a6f8e7192a0db","first_seen":"2025-02-02T04:03:34.257421Z","last_seen":"2026-06-15T15:34:51.128108Z","times_seen":22,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-71.0782f63e.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-71.0782f63e.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2563\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hY%2BphB9UDvzTkVu7yVilslhxSHZgudN1WSaLDTz0M2IEh3qCodTBqGoDTrJi62I0B6NnaSnKp3c1Ow5e2TRLE361qKv1t4u5FVcV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b311bc5a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"0782f63e6108cc88ff25ace355a8d343","sha1":"2d0d442dc8fdb5e1af3f5270bf4455fa66020580","sha256":"7d291f2e4a5d4942acaef919aab71bcdebc8c79ef1afe1b1b6b63df14360ead7","sha512":"ccdab2a4a6e1ecc82a4c739da943976e658ebdbeeb753723ca6d0b27c07cafa66ae8486b5d2cfb1b8e8a018dfc2cbfc10ae7d1dcf5b57af0af93df41a70dc3ad","ssdeep":"192:NEtJUqFYexkt/LLwvBrcbW2biYfKUU+ugxqApKb9MNbB:NODYD/HwObp2YFhvQVE","tlshash":"9412be99c130c4156b5b47f4d9fd8a1d22e8fb0ce8ae9884c9a44c0c26132dde6e3cb2","first_seen":"2025-03-07T16:04:56.909926Z","last_seen":"2026-03-01T02:03:49.244804Z","times_seen":23,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-4047516c.b926e997.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:07.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-4047516c.b926e997.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 2060\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-80c\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Zwq4pReScXOnaLhK7r0ZOjEXc3kfeOn4qj6iqxiSUUWjEL%2BZIISgVPVW6C25Ti3zU2JZg2cyj0sry6OZuFyH03Xo2EB%2Fibxz97Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b32a3ef30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8574,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (8520), with no line terminators","md5":"5c792806804f76bcfdc9b59bff784c19","sha1":"df9727f5bc52ba9e060c94a9d14bc8fd5fdc54bc","sha256":"55429dee943c866049702e6f629df18cac76267a42716f31bf282fdce3aa64d1","sha512":"1f1277d1344ce2343d7bc14eeeda58b4a1a4149bf6c820adbcd8338ea516c092214dd2e37112625f863c46ffeb1ced85fbdbda64987bce8d839cfd46f0d47ae3","ssdeep":"96:cZzPrVutIUE3Wk3nW3XpkcD81EEKHGREf1Qi8fxvKVzBi3p0T7Q:i+EmkXWHpND8CN5Q9fx2BiG8","tlshash":"2302b05a704a3b4666f7e810ee506e5f4632f323c005ca67b273e5148fc3faa2591f69","first_seen":"2025-10-03T18:28:47.249017Z","last_seen":"2025-12-28T08:10:38.6194Z","times_seen":9,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-500a4fed.092f3783.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:08.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-500a4fed.092f3783.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:08 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-af\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7hEPBIe9K8%2Fa5PIbkhQfYw1bPvPJbXPZeKd%2FzWyMc6KufBfIN41czSukWIbCYt4eWlXNZV7IKOdIkePwkV8H2di6hR1GruGp%2BpA9\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b32e6f540731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":175,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"3eadf5285160cd1acdc324e44320f555","sha1":"a4401db7d39a1cd1574aafcfd1a0bb8615ed0dfc","sha256":"e4827a0f03a2dd1b348b40a2545a02489bd97bead259ab75d26657f1dbe7ad2f","sha512":"98c17581ef08025262d6eb718e3fb7f55c6d10f000db728ce632d8079686636f0aa8fc4c7960dea5b14afe564480f344ebe6073a38cedae0e14dad81ad5c5419","ssdeep":"","tlshash":"3cc08070dac5f03ff725e01575449ccd25d54036f0151667df513032cfc459249a3345","first_seen":"2024-01-26T05:36:39Z","last_seen":"2025-12-28T08:10:38.586964Z","times_seen":16,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-131c13e9.8318419b.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.067Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-131c13e9.8318419b.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9313\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-2461\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxX%2BMZEVSJr1x1k1OTHjwtc%2Bg4pI010wu9vs7mzsFkNep8AZAyrdFIL%2Btg0GdSUexLXIpkuLoINysn575Tc47z3PMAlOYwBP%2FpZL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b339e8820731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25364,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25364), with no line terminators","md5":"661b9aefc53c0342734b4816a12bd101","sha1":"7f6bb20d4e752288ce46fd90756b1190a0bbe962","sha256":"ae94e59099948ff1d59093cb2c12307299aa7a7cef8a7398e53810e82d27f3e3","sha512":"d98ed875daeee332ca04471ab7c1370aef1f1b7ad9944ba7164dfc2353050fc22750bcb1fc0fb1ee1cecc2ab2be006c13d8d806d815dbd36e85605a6be186dcb","ssdeep":"768:rTviB2nYChqYpsm5qPef2LdZ6A6zr62G0HN3bUibBINXPU4FHzwy9oeqyu:rTy2vqPef2LdZ68c4k+dEsI","tlshash":"6db2e899b391716b53d715d6002f1406e2faa864391e45e8fa08d8d3bdb8dae40b7f3c","first_seen":"2025-10-03T18:28:47.411455Z","last_seen":"2025-12-28T08:10:38.675319Z","times_seen":9,"resource_available":false,"data":null}},"time_used":865,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":865,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-34.8be73bc3.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-34.8be73bc3.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2a0c\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B4AAFyDFbXlFpieaHeMA8nVfyOsk59ZtUHdZVFMTbFZIN4tTVK9gJGxgzzLI868TvMdoDipM3TTXC3z%2FFLYWBSDLbf73HepNHis%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30e0bd90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10764,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"8be73bc3a0009cc7b9e994ecbb3313e4","sha1":"d9321742b1fdf25c39a5a11cd7a75ed3459e901d","sha256":"4b283293e9652c63d2b9cf550e0077cdfdcd68e95bbf39799b1cf31ec37e55df","sha512":"bcf6a456bbfa861bcb89f7a6061d318c65803caaf89fbffc2a9759ad2cffedac42081652798a801951a4baecb08e16c6a5714778daf49340400c5ed8d4194600","ssdeep":"192:g65XG9vxxK17c6EHXkbQKrdhdgOOuYBbLcXIr2/zB7d5iD1kj9KB6JELKG3Nhv8R:g6Q/Y17c6E3kfbouWQs2bBRkBQI4MKG0","tlshash":"7a22b0d2ce0cee0ac30e6adabb1d6786ed95c895c74a1c2584361de0d1167dee227e13","first_seen":"2025-07-03T02:30:09.831624Z","last_seen":"2026-07-14T16:42:41.676627Z","times_seen":24,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-48.34f8351b.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.252Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-48.34f8351b.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2412\"\r\nexpires: Wed, 14 Jan 2026 07:40:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 465637\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=msqu5jkym2sVzyCHbAwn3nSLFymgt1%2FoUwoguwSzQVLL%2F7D0zU1NYdTUWrn3%2Biv2Ebzyl7YdqMkUSWIcBqgdlDt3mEkE9Cp4YvlJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30f5c0c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9234,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"34f8351b5a455e03b6e6b19349aaaf30","sha1":"1b424aef208e27fccc9bcbd66ae50e2d45e4804b","sha256":"d7fb9453b49c8ca57b2f88d837ed7b2a7ed173cbff2e1b9563df2f1e11b8cf79","sha512":"f719718b2151d112690a105624caec55f2e7532b3f95c4394502427b42d1b603a44d829857c54a102011fcbd02c78de42bef332e31a3912d7e423385956a44e0","ssdeep":"192:OFerg2MxOqCilqJo0hRNO4alAy/66stzNjdgzepkZlAFDEJaj6H:Yl2Inn+HrVxAq26DKac","tlshash":"a312c0f7a86397e0c16cd9fa4b6747ccd15a138208bb1125887289b981d3392dc73ecd","first_seen":"2025-06-24T20:26:31.574196Z","last_seen":"2026-06-25T13:45:22.955756Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-60.3fe0a57e.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.462Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-60.3fe0a57e.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2977\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHi3yjfbEe95fHw40HYexU0zLRI3%2FD1UivV0BtreiGjZsNYvPIwQeZal8pcGEa8wV%2B0oUCpPl1mXLxP83xSa%2Faze%2FUlPun67%2Byb6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b310ac340731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10615,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"3fe0a57ed9ff2d08584d66395159206b","sha1":"0bf0522dd1ed7e8b9a2be292aa1df48c576fc37e","sha256":"e5c256fa5d030fd8f97517fa2b18fc328c117623faa710a70a106304bba12c01","sha512":"2cbe2002ba320f0ffb80bff7366f49eaa469eefb2b0c46112c20c96c5ea75a20082af9d617dc96a1195c88661c89bd2f230b1110f371010ba49709b650d9b2ed","ssdeep":"192:K0YQ9LQlFLTvvf4uwRQim5jk74fzm4adN6mAFvUcejrLUjSEPvxoKIfM/PJsc:awLYFLTv4sI4bm1dgmAFvUc6/U2i/7","tlshash":"1e22ae734ec6ac3d350cdb669a761350ef83d7209bbf67c262b7d0f041201a282dca59","first_seen":"2025-07-20T08:41:35.878119Z","last_seen":"2026-06-25T13:45:22.972503Z","times_seen":19,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-61.2b09d93e.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-61.2b09d93e.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-246a\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQO7YqnR5%2F90owfyLhQVZiN4xwENWieztqbVRufYEbrNwbKkT%2BLibLwAsVhcx2%2BYztItG7QIr1sqhOFGVZy1zTzpN5YefJQADtge\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b310bc390731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"2b09d93e7c30400eee27ed9f554e81f8","sha1":"998920d67d9841dc292cfba4fd23d25ed6072a54","sha256":"12910be9fc5496902edcd82a1d6c6b89db7f901faf05b838b979d98790f6d8a4","sha512":"2624539a638e0ff4f1ffa8061079e753af9d8412853af399eb87abe650e6facd0971929bbad7d6d18b8adb82698cada8eed99b042ad77f1f429189f064ea8034","ssdeep":"192:Bych8UBEAZGHSixWbnMlGCfrKl34wR03n3LYs9fXOOvRHYmR:B/vEgksbMlGCOlITrY2feOZHb","tlshash":"3812c059edc58260ac1b86074a173d107b7d392338db8f838f615ec19ada7b4dc4da86","first_seen":"2025-03-19T19:39:22.15932Z","last_seen":"2026-06-25T13:45:22.921311Z","times_seen":22,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/partner2.3ca28a88.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.332Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/partner2.3ca28a88.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-7a48\"\r\nexpires: Mon, 19 Jan 2026 06:51:15 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36590\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HeH8WlZs2tvcX%2BJSaA3BgmWdifu3JxPsuXgid4u9NuEoUKfh71zSryX2sKvsitKuWi%2FRxW59hNQ354tifurWgM2tv%2FVlz4TY2dBE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3229e420731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31304,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 274 x 91, 8-bit/color RGBA, non-interlaced","md5":"3ca28a88f991e109885ea0e2fc0ac039","sha1":"8c9953a73fb402a4614ed173ab0726edd63b5ff7","sha256":"46ca1f630469d782023199bec64f0b3ffb4b197670fafc8bf0c5c0abf1d30b73","sha512":"55573d4c4d5059046ca255626e768ba636923665550a9c33f677dc0e3b58884f330b679569cefea4dd3bc0a2dcfc1e6afc4a8ab0de9a87c5841415c165ef7cf0","ssdeep":"384:dxp2inpn+gQ7nj2VLqr7A/SblJ+D0S61XMNCHyDUYwAdMiDe8opgDdaY2bQ7DqYa:deypZQ7SAkg38Xg1qy8opgDdITL5","tlshash":"2be2f28e6a5b41eb34c51ffb5f303d756f14f9b0b5a2ca8c0443a25227fa90c3624956","first_seen":"2025-10-03T18:28:47.326476Z","last_seen":"2025-12-28T08:10:38.635631Z","times_seen":7,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-e469c90c.155ceb17.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:09.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-e469c90c.155ceb17.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:10 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 21 Dec 2025 05:01:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-163\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BCUfxyQs2H5f14ulwzUuAv0glYVqTUauPaOfprAReIio6FF0LdFMc80YwIgQ%2BW5ulDUe507fo%2F%2Fb3ahITO4%2BmP8iwiVoTOcevaT\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33558250731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (355), with no line terminators","md5":"ed15935096752286f5f4df6d9c9a153f","sha1":"d4920efed9a5866af484beb6618189b46482a7d4","sha256":"63db0a4a447997f430053d8e849ef6d32cf90a1f55b649e84bdf4182b58eeaed","sha512":"f8d66790e10d98a5c317d031d314ba5b4dc045522baf7afcd4be0e88173efd472fdfa6ba8454ef393bc5c9807d87c99c241c749189907ab8627fa58c9e249976","ssdeep":"","tlshash":"f4e0807bf5891428607bd480b402d5ed77917327e11453f3fd9314295c5b173603527b","first_seen":"2025-10-03T18:28:47.424006Z","last_seen":"2025-12-28T08:10:38.623763Z","times_seen":9,"resource_available":false,"data":null}},"time_used":823,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":823,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-1f0cb4f4.b6b79bb2.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-1f0cb4f4.b6b79bb2.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3414\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-d56\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=31sFNhDNQFLDrW%2BUPKVEFWcskQ%2Fac0ffTsPzrNPWIj3U%2Blbg1mSU6oyMh63pgukgD8TvhdAzLKBA6b7qoibN15%2Bh9uyl8RE49a7J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33b58bb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6313,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (6303), with no line terminators","md5":"e1625d947c0f8057cd8ff2b6b1fb1a9f","sha1":"11a39fec32b402b60a8d7f496f1273e3b55d3e98","sha256":"5a0b20578b9a82b94a9f40899aed1cc63bcb3e061eb634d8844ea132af926f22","sha512":"ef3370ad1482f6abd8c1dcee6141ac417b6426cd650b56028ec4cb47156593fc2253b5e90b7814c18d04013cd71a45f73fd22e48ce517b3dbcdf1bf9d0a4ecff","ssdeep":"96:gSqGn3Qdpg7QhW5ilDlMMQNMI3+Ntg6RmW3N9PGcwZ3oodQWP9WW:gfa1IVuRN3+pR/9OcwFoodQQ99","tlshash":"0bd1d46cf09fa1bac4eab010202f611ab1763fd5e405d8c3e37ac844a5d8d5d5b6f62c","first_seen":"2025-10-03T18:28:47.369887Z","last_seen":"2025-12-28T08:10:38.679621Z","times_seen":9,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/favicon.ico","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\nage: 2491\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"68fdd7df-21ac\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c4z%2FOMQ3NvvspSjKt%2FWuem7L8P4B%2BBMiMxQCV4DdrjD5jsaDkfeqzOHLpaaYF5BZ8Ovk3EV4LNsELgQZR0F5ttiGbe42ZhWDNqRt\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9b10b3083b500731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8620,"size_decoded":0,"mime_type":"image/x-icon","magic":"PNG image data, 134 x 150, 8-bit/color RGBA, non-interlaced","md5":"23618323bba50e37c94869ad8e4cf781","sha1":"9c8a59d78700bd3f048ca4f354dd54211849d8e7","sha256":"a632bb3366406d8120808480e2b9104f697c13b5261489bf08d8f1899ab82fd5","sha512":"71774e1169fe6fa7aff9f5ff39fb82388f370a9d77f9a212778fbe026b936e4de5d105b830ae27295716b610c7330ae6390a39865995dacf69a6040f8a51f047","ssdeep":"192:rMnalwo5x6kNZ6+EC77MoBCROtxKmHByFTfsYE:r+b8VZkCvb0ROKSyFb1E","tlshash":"5202af88ebd65ceb6f5bb02259f2bc88f07a849b1424fb984de69506101bf19f323745","first_seen":"2025-10-03T18:28:47.233981Z","last_seen":"2025-12-28T08:10:38.680451Z","times_seen":12,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-37.eeeba49b.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-37.eeeba49b.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-237e\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VSKLf8I3h%2BaX73oJ4thg9C2Mn1fpaqFKIe2LFmOq%2FDS73tRphRhI9GYrEqN%2BskFRuJcXJXO8i40ryzfOCsKFUSIEwZDhKDIAt12K\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30e5be40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9086,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"eeeba49b04f7fe7a4e652b0c35c7d9e5","sha1":"ea6647d8f0d1c6fea3b3e78b5c0311635983f0ba","sha256":"55aa50bde79c2076ef05fda1fa6f0243e901334ae08d14e4f3d43fc65254024e","sha512":"bc32fb15b18d00bf5f904268cfa49139d5d657499fa4f3667b1de8765c381f061853bb2d5b94b03d9da4dd4947c3732908d4674024452501e355af4201c68a3e","ssdeep":"192:uqbROts086RzAUK8ouvG+fQXn89tXfBL8bioYREBlzlDevq:/9O5ZM8oCQXKJuiGJDeS","tlshash":"f612af18296efe8fc8dc3195441d006c19b5945eabebd5d2dfbd0f78a4a0e92c0ec99c","first_seen":"2025-04-16T22:17:34.848846Z","last_seen":"2026-06-25T13:45:22.986971Z","times_seen":18,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-42.d8663853.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.166Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-42.d8663853.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-240c\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxEjgZFBu94Ph5qgbU%2B0LWjsAr0TThaPAuedCQtQJ568NIeiqK0AD6hVBapx2%2FYjKtJ2y8pDxb6v5zyNQmihRTsbNhs%2BBYbI2KGH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30ecbf50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9228,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"d8663853ff28cd1493fd2de1acaab77e","sha1":"3c83a1edfd90d74f6d61b90200bfc5122b2063cc","sha256":"90feb60e7a50433ee11a7e7e4a48b26a48462de3dbc615bfef9bc6f28acadaa1","sha512":"8186c9304541fd7cad40c0ff643bfca779f1c23891262afe09176bf851a68f1b771865916849881701ee6be2495c1c7aa474cff10c69a1967977639367b09924","ssdeep":"192:hLOmYVWSE88xwGMbK5znAKPer6nSe621QpQ+VBB1LG0GR2gnZmg9PqizcvB+52:himYVWSE1GPbeTnSe621QpJjngxDzcvj","tlshash":"2612a0855feb1c6b7c63ea0e12f6350401256e3baba99631c2099db9201758f4f4f9e8","first_seen":"2025-03-07T14:29:33.971987Z","last_seen":"2026-06-25T13:45:22.957565Z","times_seen":25,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-f8ed4334.10ee4fe0.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-f8ed4334.10ee4fe0.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:10 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 21 Dec 2025 05:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-4b4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KKaZ4hBS81N8BKHiiiOWbEfPqJ2JNL%2Bd24iAKtyb5qnwLOaNEq47PxmqPGKHXd%2F5sddmMfib8BIxUfoLre9pcg0EKNZ7wyiyuFgM\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33988750731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1204,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1204), with no line terminators","md5":"e50f64f968a79dac5f32dc4411fa8de8","sha1":"b02bcf8c8ab37cc1a002236f251292b9073ccc25","sha256":"c2d9ec35100bd577d9e4bc98ccbdce18459c6cac0c440a380c49969b265b3619","sha512":"0037110e2de3b6288113237daa575027abeead179fa5f885898afe73a9e3b4fdd37e3b955948b4a17e67a1927b3301f8fb56b2b16ff1f5acf8a8bd5fb01014a9","ssdeep":"","tlshash":"0021df73b5081904f83bee07d3e1b5996558b29399295379dc0f6925cbc3ac132933e4","first_seen":"2025-10-03T18:28:47.260309Z","last_seen":"2025-12-28T08:10:38.628785Z","times_seen":9,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-d710d97e.5bd3588d.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:01.287Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-d710d97e.5bd3588d.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 12760\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-31d8\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgS8bWj2494EwXvJ0x4zl%2BUKrIRKG1nvfMmUnpr4K5O6WeqR1ZWJ44Xtg0IZBqEJ1T4KP9iRrQhH9BKIehN8HtZM5L7dNIUIAx5h\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b10b3030afd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":41125,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41100), with no line terminators","md5":"cbfdaf95da49b0e86e5c9ea2ae274aee","sha1":"cab79a78bf59477ec7eeb5eb2f5ea195c51216cf","sha256":"ae9414f95aa7329baad4b16e0dbf8d7777b6cde0c8462aaffe68541d6f0b3f87","sha512":"7907dfc243f827b21aefc530c86902cc7696af26487a7f1e3e131e0041fe536716a4c4a1b40889372e344a8d7de9dbeca1d0c58cfabb72872250b01e210ebd05","ssdeep":"384:lShhQplA++4EPL/+MGSECDmLdzz8+RIlHuliluzn398vN3XOn2JFBeNkg:lShR+rEjvECDmLd38+RIlHulabYNkg","tlshash":"1403a58bd511ecad5555e08e023f256f00fd0a04609dcd1a97bdbeb1b6f268e061ebbc","first_seen":"2025-10-03T18:28:47.30739Z","last_seen":"2025-12-28T08:10:38.549258Z","times_seen":10,"resource_available":true,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":827,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/recharge.fe5909a4.svg","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/recharge.fe5909a4.svg HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-336\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uMttuSA85Pe97y7WPw8wQLmpE8yDHEFAVKl6OR5t9oq19bEdmUwNLO0GTYxwj2WYs68TDywHvtBoYK3vINsiB%2Fz7rDP%2BWWZDUPsm\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3090b630731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":822,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe5909a4991281a89d7762907368f081","sha1":"217daf976ebc7501037e986868432b67d1ab1eb9","sha256":"2934eea8b2a17d0d99b5cef4e777f48ba458542f08cd9a75bea53aa03916a20f","sha512":"ae057f5307d06b5066e09587ac271c248478928e4953ddea2e3ed8d65cd83ee3d6bff94fa0509c081241bb48f0e5c092b34e3466bb26186ca5261d6ba94e648e","ssdeep":"","tlshash":"1d0152dce3602830ac88d3dee2642b78640a189cb8a116f4c1521e9c62c1e902e697df","first_seen":"2025-10-03T18:28:47.262811Z","last_seen":"2025-12-28T08:10:38.533419Z","times_seen":7,"resource_available":false,"data":null}},"time_used":792,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":792,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-64.0e65828d.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-64.0e65828d.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1ea3\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DGGhxNtFn07LgGvxgQz%2BJVELHT%2BC%2F9k3rUniPBxSkRn%2FbOUiMJt5UYptD2AdOMaSseNySKuPdUJOUn7L2%2BTlwcRn8%2B3P90bMlWNC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3110c400731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7843,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"0e65828dc66129cfd8a6959a8aeb7341","sha1":"510d0e76e986e1bbbe8c8541e2f3ef27ce36748f","sha256":"fd5f0d0fbe4b29f91e59e334b2ba74000bf26498f2fa2718ce277da5457b1c46","sha512":"29a581ccee76c881915d2485ae627b047b71b6a6684ac92bab83af344dadbc69cb564fe0ea739509c70028716d883a15b65f6ff4b7b9f95e4ee1f3e90510eb35","ssdeep":"192:P+G1z5iDpoO+2JaxoxpoqGwD1SyezPhf2O5s0/CW97dM60cnWcW6UX:bB5iDtdJNGU7esO59RRdV5W6g","tlshash":"eaf1ae2cd3e9b39364e3e9e342f6f9341d3503107e93dc5c8f9ab16186200628a17a66","first_seen":"2025-02-05T03:06:17.327587Z","last_seen":"2026-06-25T13:45:22.942505Z","times_seen":17,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"at.alicdn.com/t/font_2225171_8kdcwk4po24.ttf","fqdn":"at.alicdn.com","domain":"alicdn.com","tld":"com"},"ip":{"addr":"47.246.44.178","port":443,"asn":24429,"as":"Zhejiang Taobao Network Co.,Ltd","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tbcdn.cn","organization":"Alibaba (China) Technology Co., Ltd."},"issuer":{"commonName":"GlobalSign GCC R3 OV TLS CA 2024","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 16 Jun 2025 09:41:05 GMT","end":"Sat, 18 Jul 2026 09:41:04 GMT"},"fingerprint":{"sha1":"64:77:72:8B:BB:58:44:79:90:C3:B0:8D:35:BC:EC:6C:D6:35:BD:83","sha256":"3D:49:49:78:42:46:FF:F7:52:9B:6B:82:DF:7E:54:4B:F9:BA:D8:34:14:1D:21:67:63:4E:5B:62:A1:D8:85:B5"}}},"request":{"raw":"GET /t/font_2225171_8kdcwk4po24.ttf HTTP/1.1\r\nHost: at.alicdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://2025rkt.vip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: Tengine\r\ncontent-type: application/octet-stream\r\ncontent-length: 55940\r\ndate: Thu, 04 Dec 2025 07:01:54 GMT\r\nx-oss-request-id: 693131E29628C33432225EC3\r\nvary: Origin\r\naccept-ranges: bytes\r\netag: \"B716002BF601F727176AE7901BDF4E4F\"\r\nlast-modified: Fri, 24 Dec 2021 20:51:06 GMT\r\nx-oss-object-type: Normal\r\nx-oss-hash-crc64ecma: 10201830100077572647\r\nx-oss-storage-class: Standard\r\ncache-control: max-age=63072000\r\ncontent-md5: txYAK/YB9ycXaueQG99OTw==\r\nx-oss-server-time: 2\r\nvia: ens-cache6.l2de4[0,0,200-0,H], ens-cache27.l2de4[1,0], ens-cache8.se2[0,0,200-0,H], ens-cache5.se2[2,0]\r\nage: 1418352\r\nali-swift-global-savetime: 1764831714\r\nx-cache: HIT TCP_HIT dirn:8:255052710\r\nx-swift-savetime: Fri, 05 Dec 2025 12:59:00 GMT\r\nx-swift-cachetime: 30996174\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\neagleid: 2ff62c9917662500664953251e\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tengine","description":"Tengine is a web server which is based on the Nginx HTTP server.","website":"https://tengine.taobao.org","common_platform_enumeration":"","icon":"Tengine.png","categories":["Web servers"]},{"name":"Alibaba Cloud Object Storage Service","description":"Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.","website":"https://www.alibabacloud.com/product/object-storage-service","common_platform_enumeration":"","icon":"Alibaba Cloud.svg","categories":["IaaS"]}],"data":{"size":55940,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 18 names, Macintosh,            ","md5":"b716002bf601f727176ae7901bdf4e4f","sha1":"e87c1130c27fa42d822c198f5ea8b633b5118b94","sha256":"4bc8cc97559c0a52ea4f5ce0563e1bf3a7f89d660f74792e662e76d49eae4707","sha512":"cd4d86bc27a8055bf4ba21730991acb71e32d1d8c3176b6aada3c8fcfbaacfabe3cf1c813665b4434b16c757587d38afb8fd61f3a84a440053a96b545187e672","ssdeep":"768:00Yo6KrRwXJDv2mjQ5PMWCUPQnNqcoocj9MNb5+kYfcUFO++wEMjQYVEh/gG+VeV:xY1dCpj8+kYfcUUXwjjQYV8/gBVE","tlshash":"3c437c2b835e4fb3d16a86f90c4f011b5fefd7206636f99664ca5c1e4402afd085cb9a","first_seen":"2023-04-09T15:26:02Z","last_seen":"2026-07-20T06:04:17.523584Z","times_seen":3713,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":96,"dns":39,"connect":7,"send":0,"wait":9,"receive":16,"ssl":47},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-0ff1fe33.ee273c97.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-0ff1fe33.ee273c97.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1318\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-526\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZG%2FJeHVJ6z1qK9FwJENtWaFkqwFsqi2TP%2FleTZItFF9QPTP74OgOtgs3wchqoEAXeDr5sW0qH3fT1DdVdmydrTZn5hB%2Bi3BXHFz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b339987b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4555,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4555), with no line terminators","md5":"41f55163f730c728aac9718a1d681ead","sha1":"03a1d38c32006439d86a9afae564dfaa11d82b89","sha256":"dd20310a03aa6eb9418d3022a3226ef3d78faca4dada38fdc577ead79ed74d54","sha512":"7680a38b464fa72dd592f19a83fdcd6142273ad2f01528b1e5d0e3ad87dd26b319e214f5bd1dd02343df39e489086b6e090f22051a1d95f206ccab5bcff73c49","ssdeep":"96:zDFfDlcf5f0f9lofSxfH1ENYGvOuA+QCi1/AJ7:BuJh","tlshash":"f391341f6993641e04efe496106a34b0b0714a98752ed29f63bec8b566c083d3f273cd","first_seen":"2025-10-03T18:28:47.379807Z","last_seen":"2025-12-28T08:10:38.583578Z","times_seen":9,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-1f479b7f.de30d99e.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-1f479b7f.de30d99e.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21033\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-5229\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 8\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66PB5zZ08qPmByCxagTTOCScvs2iCgTRVB9BuN4VGvI%2F8olZa4N%2F4fUnGzW7muwJt8dfMCHlAxi6vAHIwwsyTSiGa7qAGD%2BFLpkL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33fb9560731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (34843), with no line terminators","md5":"92b80b484165fe14bd72154fe7ef0a0d","sha1":"b4ddf5ef490d14d7579b7cbf0305de6986c1e9a5","sha256":"2ca121db59faea15b4102fd3fe5f4174f7182585ccac96526745fea42f435066","sha512":"769a278e5b7cff477d139c19310683455bf3134421f11072b8784a43262e80ef39f7e5d7c8f2cd88902e099edc5da58062886a43f208fcd106da8dd2c3b2c85f","ssdeep":"768:8zzzzzzzzzzzzzzzz2u46bX340sXIGYsO7LMGTkppxjSecuBaCGrFuBgy5j02tZb:8zzzzzzzzzzzzzzzz2IbXo0bkSLMLP3X","tlshash":"72f2d1b53e2ed9f161a39974b42771291cf2083f920c52d197813d0de9e85ecbe2e5e8","first_seen":"2025-10-03T18:28:47.240858Z","last_seen":"2025-12-28T08:10:38.612823Z","times_seen":11,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-4.dd64e250.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-4.dd64e250.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-267e\"\r\nexpires: Mon, 19 Jan 2026 06:51:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BvHihFbCjraeMfpCiiLhoR4CgaVwCB6OPE4xKZjYdybztkwDR2eSncce7vylR08i1xLqmqAMPQkwGxxPRwzAwqvwMNqt0eoANWSd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30bbb9c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9854,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"dd64e250dc1eb287ab4cc42e3ce813d2","sha1":"a3976458eaa541b3faa77866fa3dc47830835d89","sha256":"39b6842998afb3684ca5abeeb48036d8ecf712d1e8ee207f802a27c0a1e0cde4","sha512":"cff8926ab8daafd9ec65088a012d95b83f75191cbdf6ed58fd183e9b3070c1f0b21282fc3e7cc1ef507344759433d52db921eef6ff49bf648646ddde9dd780f0","ssdeep":"192:1CvmjZ3u4vfUl0HzX6UoSwrh8QJ+zoPYAR6FZqJgK7:1Cgu4vcl0HZyrpJ+zoPYS6FQJgK7","tlshash":"7b12a0fd8371242df949c1f61748d8cad8fa944a054e3b70d5a08a183a868e897f46f5","first_seen":"2024-12-10T20:17:18.957831Z","last_seen":"2026-06-16T15:51:09.67235Z","times_seen":58,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-33.a2e15edd.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.032Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-33.a2e15edd.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2e21\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R0kawbk%2BVz61SsS%2Bq7MOZBqeyDhAF4pcRllB5jbL20SCraVSd7C5JFziqG1UR7UOMcQQSA9QWAeY55ud8zKLo8Wa2Qf%2Bn5OvDc41\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30dfbd60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11809,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"a2e15edd8530b6462ec45beebca32cfa","sha1":"db52a5ecb532cd2a9d497996f3632d62b809095d","sha256":"cc32a841a74a3a1a8ceead617502412e62d5b96b41237360fe4fbcba5fb72947","sha512":"ae8b85f16f6114b70c48e581e795460c22ebbf91a5db592d76c7cb6f59be0271122b9362f478f3a2508ac099ef228a99c7976bb02b871fb6b2fc64e89077d714","ssdeep":"192:sRywGk2Nvk/bdFDYKHN5I+NXBP9U/Dbqp3mA3UlcRhegHR4OQLd25cwtNpFJ03hO:sPGk2Nv2HMcWqXc/DbGE8GdR25cWf43U","tlshash":"e532e093afc5af1a506892c9af0f44958c5f0d5b49be90acbe3845c8034aa6dc47364f","first_seen":"2025-05-04T03:00:19.74882Z","last_seen":"2026-06-15T15:34:51.062643Z","times_seen":25,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-46.58a06b11.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.223Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-46.58a06b11.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-162d\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0wjK65txslXopW%2BHL5b1P3Najc72r2bNKBqAwo%2FWGeSXVRZmPNN6z77sFSPe1uB14X2Z16jdlzW%2F6Ryl0i%2BXjTb%2FYOmIEKutLLUo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30f2c0a0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5677,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"58a06b1120b53f5aec022788a3156113","sha1":"c7b631296ad6f79e3fc4e3fa90965ebe69a53927","sha256":"3b820538b7b7608923f273d736aa58385320469a38aa5ce7821004b51a0fd22b","sha512":"de0ccb45b31c8836ce814d92c0acff7bbcc16362886d7a94af3196c39f8e19f603d28cd1c32665e03a6b5f6ea8eefdaa8330a396afe96a96c5b851fe6dc763cc","ssdeep":"96:act1gmH+OiZl2nYj/qBU2Q/o28vD896WMG+M/Alo/EjCkOfqleS1J5kVol1noyWT:zgmHpiFji5UfuM//cGfqlx/kGnmT","tlshash":"72c18d7328fe4e15f560ac052b3dad67ca4bc1251f129b0ffe2d8c80bb11115517b975","first_seen":"2025-04-28T17:39:17.784078Z","last_seen":"2026-06-25T13:45:22.968536Z","times_seen":20,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-21596304.b7028780.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-21596304.b7028780.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4342\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-10f6\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wj8Ex0yH0Tp1ndyAce0Fh%2BmSKNVyc2eOusE203CX%2BpD6cfF0l09gKvHnT9TM1sxkDjq3ZSwFnEnSSSFk75yacQqtsY0oHvsa6%2FDd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33fb9590731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15323,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15298), with no line terminators","md5":"558f5a34af9173745e6af80df0aed28c","sha1":"5ece92f3bb8f3e9700032bc90683a2ed3192134d","sha256":"e70d0de0a006e4f03248ab72bfbcde0ef66a91bd8f420606ec240cecf5cdebba","sha512":"5993084de207d868720cea649030236158da34867f6adbbda8c004536219dc8390c95ad1b718aec3a17f2e26a7dc238fe8d772e6ca5ff9792913b36342b885b1","ssdeep":"192:zIoM4FLvEVK4dD/u+oSzRwj5ZqI6YJslDD/Ham3:Eo1FLvSXM4","tlshash":"2462410fb885f0995b36a039573fa93a242a0644f14dc996573ce694edb4b1f2b0f83d","first_seen":"2025-10-03T18:28:47.406454Z","last_seen":"2025-12-28T08:10:38.610291Z","times_seen":9,"resource_available":false,"data":null}},"time_used":830,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":830,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-c058e604.ba02bde0.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:13.061Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-c058e604.ba02bde0.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4244\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-1094\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9Sb%2BqO%2BKz8Wr66EXaduibghKrLBpx%2FSz3iHfEBKZUblC%2FRmObgz4oHHiROUVNAmibA1nIV2nQe9bklGqNeBsbaE1rN9JUStanE%2Fe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b34c9b5d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8999,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8999), with no line terminators","md5":"e573f903b37be6722fd660dd93088128","sha1":"a0a4cfe382abc463f08b1e7a6c32257e03dccd03","sha256":"5fa51ce5fcee148e424bd2e495185c1245711d3374ab20abb0d549c2b7710522","sha512":"1a43bdf27aa2d2efb0061ae4e66716c135e5b346f417f3aba3dcedea67131342bb96d0568672edee9da2d57d0831fb4a2400c593176dde9773fd8527a0e4bade","ssdeep":"96:a0NmArju8xTPXoBGbJtbJJ0nQXfPWSwzRX1P6liRt0iIv607W8oXSdpg7QhW5ilJ:ah787sGbJn3XLTie78XjIVuRNI","tlshash":"ab02b849f84fa8994c367181319e9e14612adbc4e017d489f37986f362c0c185bdebbf","first_seen":"2025-10-03T18:28:47.386071Z","last_seen":"2025-12-28T08:10:38.526142Z","times_seen":9,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-20T17:00:59.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 20 Dec 2025 17:00:59 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GrH%2FBNzL9xUFcLbqeg0cure7IG4JyGR2hF8Yf6E8SSHf6nDBA8kx7d6ROXegMMfcDpI1Tpha%2FhZorKv3kcwUGqjBBI7kFE0RGQ%3D%3D\"}]}\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b10b2f51f6956a5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4337,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (4033)","md5":"661e67627e71d943977fbf65e1682063","sha1":"db817a631b8da28a79daa5a60557a0b0a0ef7a1d","sha256":"d4042d943accca176158d30b5f42885e27fd815547d4d73eaf5c3ed23d17427a","sha512":"cca74bed7744e540ceac1cca2fab47b71fc10ffbe5ffd8e7e3860e186ee9316c3975989abe9204fb270b2d01f5082da88d36fc8c623348089ada1fe51df2d6a4","ssdeep":"96:gRK8L6imOtDA4chnffEFNCFxOnLtwF3n5n3J+b0KRhK3DybenMM2jx8RNBoFyTht:gR3L6imYDA4chnffEFNC7OnB83n53J+O","tlshash":"ba910471c05465af6930ee77ffa8f79ac1cb6b6d0930d82085698f6ed568fc44362087","first_seen":"2025-12-19T22:21:50.186148Z","last_seen":"2025-12-28T08:10:38.603007Z","times_seen":7,"resource_available":false,"data":null}},"time_used":907,"timings":{"blocked":33,"dns":11,"connect":1,"send":0,"wait":841,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"openphish","sensor_type":"url","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip/","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-vendors.ad6439e7.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:00.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-vendors.ad6439e7.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 35084\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-890c\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eEM%2FWAFVgTisLkKEVpc6fsOTKx9TxGE9SgifQrL1ib1lcgAxSw7ot88oavmgA0VgglUE97NmE2ewNyfolLRziPW24%2FWJHUxzS3Di\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b10b2fbca630731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":96806,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8decb2aec5c20dd2449910b3e5af1b32","sha1":"41602b2da0c4fcf599ba0d02c1a62ffacba455da","sha256":"62d14f7a5a05e2f0824407db62fe5381c2c941eca9824781624e21e5f1985797","sha512":"acc325e544706b0e7914c8f37f6ce971ec75dc5d1804031951e391d5f8b4fc42d0980d09f067401be8843923b88457e5b08599350a2a16b4ee58f7fda0e7c26d","ssdeep":"1536:Pm1uN5J+jOkiHcniNEBVcZH5NHMja4drY71V+Nkh:PQmeVc5HMjajmO","tlshash":"fd93f77785c022ac7317cd219bc0a6d8e264d133d9510fa9f1557a2ecfcbb861293b6b","first_seen":"2025-10-03T18:28:47.232174Z","last_seen":"2025-12-28T08:10:38.539627Z","times_seen":11,"resource_available":false,"data":null}},"time_used":801,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":797,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-3.1a86851e.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-3.1a86851e.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-220f\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G5bjE78Sq6wnu%2FsFD86prKlCHQAFsCuQdrBiJGeP4JyF%2Fgm2Elu3%2FVBZtSDGfxndKiZoz6NAh31%2BMpZukhcJvGyQLvTbOM91fX%2Fq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30bab9b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8719,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"1a86851e41a7da348cee742b37d5d981","sha1":"6b9946f1c63f79bc34aef6cba0b5e0d9740861ea","sha256":"967524b3df62059ce864d383173b38861116d17ed8a14da9d9382717c03079c9","sha512":"ced4422df186ca20ea5f5d863abf9a546ee1fb2862246e9c13aa69651b7c6f4d4a7692108a7598d20c18a5a62b43a006d3292cfc1945d94982bb2cbfb2d9e28c","ssdeep":"192:v5V4E/YFFBnElLiWqiU1R/eNPYhurHkY8Ucd5y6CYE2oHJf+CZ86yZgG2i2plwC:T4EMdElLCOPDQ8c3Cb2oV+C26eg3b","tlshash":"d502bf603db72c02d47f62412f746ac6c515c6a9467c35d7e477ff1a0a49e4761a8824","first_seen":"2025-01-30T09:50:41.415337Z","last_seen":"2026-07-14T16:42:41.641116Z","times_seen":79,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-58.9c58d87d.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-58.9c58d87d.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1f8b\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VPVNh%2B%2B8R%2B3UN0%2BrbgZGiyI2bwPBOD1rNQF7GSZqLOL%2BT1OxiQ2G1gEal4wPdUbTzA%2FadEiTiH%2FBZFBuyMlbyGLsR0r2Y%2FNSdY5I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3106c2f0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8075,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"9c58d87d67f5c231f214edec005ff27e","sha1":"321c7de6c1b481ba617a2dd26f26b28f3c4c3765","sha256":"36b5fb5532d37e8d2b3f2bd59fbc38bd1e397dc15f54c2a9b5ef0dcef207f108","sha512":"0fc46e5956819de96f3ddecab26de0dd6f894140cc9135eecf0d77f72b4f5629e40cc2fef76fab336b50996565222b6acf02ae84cb6b0fc582332654d164d134","ssdeep":"192:PsS2S9NsZfEILXsK7gLBW8aY9rFRL8UGh//Tew0Y8q5LHxv6:0ZZBLXsK7gUfY9rFRIb3awyq1Rv6","tlshash":"3df1aeacf76caba9c1cc0efb164510ad21755a54c3292f87c3968b8230bc668c5b77cd","first_seen":"2025-03-08T17:05:50.339814Z","last_seen":"2026-06-25T13:45:22.926577Z","times_seen":28,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-b44ab8a0.3e7121d9.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:09.051Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-b44ab8a0.3e7121d9.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 2061\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-80d\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BKowlskdzJ%2BTvfSzCXWYm0Gtblcn%2FjH6xSCWGG7QIu%2F22FvsNgLAKDuNoIM3W7UAtlu%2FC8tqdeIlDOWN0OZZluQMVcXw5vd8ljHf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3338fcd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8704,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (8650), with no line terminators","md5":"9701d110dc2912cf834b2a70a0ecb31b","sha1":"78dc169b533918b70b711be3464ac809ce86889a","sha256":"3e668e5936a335d010e6d827d97a18518a5fdb555966f0f08a7651f164ea00b3","sha512":"1dbbc3d63da1c6391f38a8ac80f29f3204cae29b75e1ae420ec5acf67ac4c87e97b2eefee6f134ae9edf3ee211fb826b72c9571333ccbd65a3e9ce56d59b4fd5","ssdeep":"96:nNP3rVu1XU93zk3qW3Ppk5wk15EHHB+nc1QipaxAma4BBjd0lN:Nn9jk6W/pAwkDMxQIax9BBs","tlshash":"ac02ae7a78883747ae77ec106ed52edf4732f32380851aa9a652e5158fc3783279134e","first_seen":"2025-10-03T18:28:47.422753Z","last_seen":"2025-12-28T08:10:38.622306Z","times_seen":9,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-b7d6f4f8.8c954c68.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:09.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-b7d6f4f8.8c954c68.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 21 Dec 2025 05:01:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-1ac\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cjz1s1hAA9tyz2HLehVTq3YAGaqXMJGfFscqkmWLwQmkPDDbYgPIDZw7%2Bz%2BV6xdJNQNlN74uNvUce1fJVjx6zrxK6Rzqun0a%2BTCX\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3343ffd0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":428,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (428), with no line terminators","md5":"882254ea658ccaaaa6877494ddfa968b","sha1":"9cad0a849971fcb1ff34ec0a1bd8f39f9ef6c8db","sha256":"642dc0b6fc44200afa8cdb04cb97433cb95a79ccfe4c0746f15eb8b023791956","sha512":"9eb70de0d7e6c7d32710f70c01d046daeca81421d4cac733438b59809fb24322b626c5d7670670b31dc9e8964fb96a78f85b113bab92edd24f4e38a1bbc9a9f1","ssdeep":"","tlshash":"2ce0a7a5b318111870faae0358e685cd7980ea1b4ae0a502fe461813fe02416678035e","first_seen":"2025-10-03T18:28:47.239542Z","last_seen":"2025-12-28T08:10:38.672739Z","times_seen":9,"resource_available":false,"data":null}},"time_used":793,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":793,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-2de24081.51738a01.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:11.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-2de24081.51738a01.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4055\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-fd7\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LjIGLjE3TVxdzpcgazlwQcqpi63Vvmfdot0BksGaUJm%2BEvyEbs%2B7Y185oERJlcll7QtTvHedVxgiLPPBeB61F9UXssViS7wY%2ByWK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33fd9610731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9679,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9679), with no line terminators","md5":"74c320e02901324255b6bcff632580eb","sha1":"7c4068d663e884c8957339fbc38d95f3fce83b67","sha256":"85be963d02b4d99e10446c963575f0f1dee4038acf3bcb59171532b18ed7cc08","sha512":"16372de0fdf0b1b740061bdaca55202c8547ba29473e31917d55c5132b9a505cd01aca0a32e6a41fb21c4ae346c775578967a89f977a05c4c2b893fcfe1484ea","ssdeep":"192:ZdcIVIRVNIrScbn5DNWI38YQMW14dLZ1m5pgufeRl2F0zHxhbHz9q7GpIVuRNT:ZjVIRVSrScD5x3Hw14tLm5pgufeRQF0j","tlshash":"4412a90aa48bd9ef8d76f051a02e5530f0791f94d416d18afb39c8a09984d3d3f1ebb9","first_seen":"2025-10-03T18:28:47.392259Z","last_seen":"2025-12-28T08:10:38.650918Z","times_seen":9,"resource_available":false,"data":null}},"time_used":790,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":790,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-4912e469.7e70d202.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:12.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-4912e469.7e70d202.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2680\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-a78\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LQAuG1Ajz5tilXIZ9vv%2FpveeAz0w9JLwGqmVTAyL9tjjNHOedb%2Ba9EZdrpJrTZcdHFBRWFzBIUvz9pdD11qcC%2BA06%2FvHKYPTG5KR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3468a950731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13119,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (13034), with no line terminators","md5":"d9e762cbc590e6370503fc2a00cde3e9","sha1":"ac8f2d56de47b3a85127d858eb3789f43a822a83","sha256":"d3da6b052d53286079f8426e833e8972de5d69e7548980b319329ae70375599c","sha512":"57fe6db124ace9b6037114e07ab3b9e9afcab15bd8d5a9dbb0e5477d19b2d993ef867c46f9eafa6eb738c7015c7ee0d8240849c099d1096c956c5783a920d743","ssdeep":"192:mAA745QtlrT+tuOh8tqZABCzC3P+pJo+1eXRVJLIG+1wly6sPO5POuJKz4wRoIIT:ROGi1JJKzNkFbR7ND5DDLL","tlshash":"f242200ed083e67eed336086741e5934e0261fe0e515a882b3795c9013d6d7c5bae7ae","first_seen":"2025-10-03T18:28:47.357459Z","last_seen":"2025-12-28T08:10:38.624459Z","times_seen":9,"resource_available":false,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-40.2c756f90.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-40.2c756f90.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2ce6\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cOKIElmXaD6Q%2B%2BXf56wFxx5d6Y8FPOnYgeivVmMsE3ZDM7ZndnGrpRHq3FKpSy8frw7MgGDYa93AgaKTvPutSviAOTcf5n2uFTZV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30e8bec0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11494,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"2c756f90a5eb799db2730509ed30548d","sha1":"9c47300d25bd002705e983a3156b9423032ea983","sha256":"f1fc95e1b8e56b41c426bd2af3f0fbbb9c06d4da899520bea7651f7ea6189c78","sha512":"6385920d31877dee3d92867a77b051bd5acbd82efbc35f6a3a5ce34c36ccca92bc465e01ee1c9fb611a2f96a6eca9b0bb8dd05b9cbc1bdef3a4bf9cb5730ba87","ssdeep":"192:aFtTTuoEYnUHpE+XX2CZA64LuIzefBpEIhCoU+y7Ljf+2faOoNbHxEkOD05phxjT:aHRUjXX216vqeZKoU+y7X1yOoFREophp","tlshash":"4232c07ddd8a42678b444f9f2395ec1d3d091ada01328ff305aaa0e7c175a2b3ef1252","first_seen":"2025-06-24T20:26:31.538902Z","last_seen":"2026-06-25T13:45:22.966735Z","times_seen":19,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-44.644afe9b.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.193Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-44.644afe9b.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1eeb\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d7LBPEqktLnC28a%2FvoHI60OMN9VxwaKsltmpzBn92VxVd6hc3mJdqLpL5ZrRXlWhQPnwxE09SF74xzkfduLN4Tb%2FO28deUo%2Fw%2F0k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30efbf90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7915,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"644afe9bc6ca42d7c6626172f02b4e4c","sha1":"ab69464c12f531c27ac66ead12770d8440db8d49","sha256":"454fc805a1c69984d03d8d5a93f15f556db8553053e8111401600b6f16099d6e","sha512":"82671017ebc22709cf35eea5b88cc262866986cc48d37b463132e59e419581d6f15d399d2f9d1dbf0ac8105756b1e94d41dfc8d05cfdc3a3339bb726c4b95c34","ssdeep":"192:rynYIujcHWHeGJLTemRmadlU76/seK+zm3t:2nYVxNJ1RmaE6/hKI2","tlshash":"50f1aeab1be31da8ec1ab11a78f2efe5bdc7545b72412c43fc813c022d858931324479","first_seen":"2025-01-30T09:50:41.426246Z","last_seen":"2026-07-14T16:42:41.740062Z","times_seen":35,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-81c84044.3fac404b.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:08.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-81c84044.3fac404b.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 1315\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-523\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cX9LfWFjPACJJxKO8Dd7CLMVkuBRTNaqcNitNEHcS663udXUOD3djBevjHqFXDGAFh1nlcSz%2BmHxaGRLRLUMs1kmiSNsMHM8je9S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b32f7f780731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7090,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7090), with no line terminators","md5":"7aaafb11f6b3fb3a22fa20c908abf5c0","sha1":"e1130c61f5a9f42e5a25bc86fff47aca4bc090aa","sha256":"88a7f34c6be1f316c11c59eefe16714bd8c11678ce429dbd0652cc133054fa09","sha512":"a7652607cc256f5cfe0ba2e09a92ef8503bc25e83e9f5cdb0a1a35435828e71fc91d93e8893d8f01dbe0c8f10a544bf856783a8f040f4b614a448c6e8a97eb65","ssdeep":"48:d6bTVlN1lutdMiWmlPv1CrvjlHc5v5QgCU4B8gXmxm2lAyFJVlNvC8KFlppVRHC:W8jng1c5voIVQNi","tlshash":"52e1fc972e0a172aa9a7cc469f5cc1a3a2d5e3b3c05501f99d942627cfc7e0125eb20f","first_seen":"2025-10-03T18:28:47.347262Z","last_seen":"2025-12-28T08:10:38.671867Z","times_seen":9,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-500a4fed.1525baf5.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:12.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-500a4fed.1525baf5.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2989\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-bad\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HFrgSvYQ0vzdGmFDVJq%2BVhv7NfKEDChKQgCmhsFMWJkgwQeODtkBwkfeU1sfqMptbPFPSewC1iBjE5cCPFP8JZLQDg8p6PadiuLN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3469a990731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6584,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6584), with no line terminators","md5":"9bf6116053fe27b5be2becc8584caef6","sha1":"b23a40fc753ea0b392b127fccf459f3f71dd6c72","sha256":"2398a620a1c5556d7d350308e6d2bf136913c21c6a525d914e7d7c68fde1b98b","sha512":"85badfbef5044beaaa3833b45ba948f638e694f1ef62bd28cc6af772d37981e55e93c056f0caf538194e86f5d4b6e2edccec12ee5a4344d9c5ca4390f6d7a236","ssdeep":"96:iUXpYX+XejT0VKorYgiT3Ks8WDgUsqJdnHzXuRuL1y/9SB0Dvp7jgnYluQvNxKa2:iqsHJdHA9bDvp7youQlxbSeM","tlshash":"00d1da1bb32c33370fa21251759f2ae5933d4048a767806d6c8c497c33b5a66d3b6ae4","first_seen":"2025-10-03T18:28:47.381966Z","last_seen":"2025-12-28T08:10:38.631015Z","times_seen":9,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":258,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/app.23be8638.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:00.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/app.23be8638.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:00 GMT\r\ncontent-type: text/css\r\ncontent-length: 57309\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-dfdd\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:00 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PI3%2BrKq%2FUMscojehOOj3cegDahjQiG0pn20OFLs9JKqbLur51e7X4VGamDql3XDtVSwGEXdaKIdLn5k98K1s7QgwtQFD5N38%2BtvK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9b10b2fbca620731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171222,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (65482), with no line terminators","md5":"32c34f08237e0cf4fe28de3cad81c104","sha1":"efaa557087eb6dea94bd60e21c6d1dc59754d617","sha256":"b1859c4713a8d8275ed810164d517178b1fdddf5d277b06aaf64612c36ef8fa1","sha512":"90e1415a466a50d15848b9d016858f93de1fdc09425ddaa61089e6890a8244f9b3392c8af9435293984c9f7d0c6138a1cf0e5c597efad9445189419eb3e7b5b4","ssdeep":"3072:JoUnsQ9rlir3K5zEIqtJqpi0K66k3cG8cZP6/kqKg4Ppxom2G+jyVFPzNrhlCCWk:7hZNBbW1G+jyVFPzNrhlCCWKuk0CdY7A","tlshash":"98f32a7756812d48f9678d46b2c03f748e29c4237612cedef146ae2ac7cb78e1a2115b","first_seen":"2025-10-03T18:28:47.300425Z","last_seen":"2025-12-28T08:10:38.596873Z","times_seen":11,"resource_available":false,"data":null}},"time_used":779,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":772,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-9.295beefc.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.744Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-9.295beefc.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1af7\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=inS6Z%2BJ0FvOpX4G5bnmGBJ%2Bgty002LEzeaSVm%2FX1h%2BdD89bhCCmWIqhXzntDmPL3diqmJkkDL0teWOfYJ5tP3hGUcAqrxV1jVhaH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30c2ba40731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6903,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"295beefce8372d3fd048b806902526cb","sha1":"24de4b72f473da08325224157216ae422082ce22","sha256":"53b16fcb0b720800e4e1485163e726120d22d94028ce8892b5053299d3884520","sha512":"4bda1440596e8d646f0c0f9de7e25799161688e9ca8221ff33ed5df36a8eba77761c52bd3e8025dc3c79c9e805e8ef6f18fd7969043258bb0b9ccf1c4fbca38c","ssdeep":"192:VU0p/IpebgQ1nhmkWln64ZqPOlekuk7SmY:6IlPtyUPOQkukI","tlshash":"a9e17dbbe64ab5b5368529857522e04381605858dafb130aaecfe941be9e9420c04ee5","first_seen":"2025-02-05T03:06:17.320274Z","last_seen":"2026-06-25T13:45:22.993692Z","times_seen":47,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-57.67318057.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-57.67318057.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2501\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4U4VTrF1FQn9P8jGYeHSxpBIIBDiRqNQdAE3mXPD3GiH2%2FgfQ8yTB66aAiE5P86r7iIoR8sUjA0wQ%2F36z0a3g9qgIvRIIkCisNtX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3105c2d0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9473,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"67318057cf1ead023d1d190b30b74e19","sha1":"e8daf2ef505fe1d4ccb1115fc09f5e775ee8fb2a","sha256":"d2230002f83487659d24962a563441567d5649cc7116d7a12835b645db5b543c","sha512":"2ef3ac7d7c45faf8cd92db6053fa7f0e2040c8457e2c91e45761eabb5bdac82384bfbfb68a0febf73a6c46480bde5d0380a37ab2d60f9fec990224d2a9e1fc5d","ssdeep":"192:Q5QTMBGJkRLMqudZ80KlOokuaY9eZlg3m4DMo0y3kQBQX2Tyw:Q5QTy/RQvjdoku5eZ6D/53kz4yw","tlshash":"f112aee00131124dd2ebe9000d8873e5d9694813315e3caa7db9d1cf31957e9b66eae9","first_seen":"2025-04-02T03:53:21.07847Z","last_seen":"2026-06-25T13:45:22.970549Z","times_seen":23,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-63.6eb231dd.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-63.6eb231dd.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2817\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N5et2Pvtp8nepHFGsbA8IBQjYrhtQfgy8dtcltbW96F0C2BpXgylpE98fEPGQ%2BuDwdEY6%2BE0svmuf36CcAaF6YCDV%2FdNliaFFvs%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b310ec3e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10263,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"6eb231dd643c11c83319b8f0856356c5","sha1":"9be486daa78c4cc6ddf917d117f1fa4b291dce51","sha256":"d42a9f3656fb1103a7ecbef615befe29da2b0682da5b6235f563b397df38c4a2","sha512":"07b99ffeb227924038838c1138e6a34d356521e22dc7367225f74430c4a5a2c17fc03f60060b2e1a53c0219db291577c08a43357cf598c50c2f643cc341c6eae","ssdeep":"192:w5hfCGe9BIT/M4xyqRRRcgzKnl06gdVoqSIkLkyrXeC3JA3jZXR1A71SOs:wHfCGe9BpWjqg43ganxrZJEXR1AAp","tlshash":"ad22c0dbe26ab3b140ca164a73734b87a5f51ef1c3f593c92ad8035ad481da853434ee","first_seen":"2025-04-16T13:04:17.485115Z","last_seen":"2026-06-25T13:45:22.923524Z","times_seen":13,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-0d042dbd.d59ea100.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-0d042dbd.d59ea100.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:07 GMT\r\ncontent-type: text/css\r\ncontent-length: 1066\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-42a\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZrT5u6LVJi1ounn0qJpywaqLy2rUalb3Sggh3iZX9Pjt0tCowYKAXI3C%2B8JRsl2cVkzgIG0F3V8Lotnys%2F%2FqOm0c%2Fpa18vdSvySX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b324be720731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4145,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4145), with no line terminators","md5":"9b8d98f47012c33608ecf9d67ebe0106","sha1":"5410167aab0553e2f3036cfdf21a33e1710c96c5","sha256":"1ada746f84a860ceb18089dd0a57d93e6afbb1464b51b4f6c65c5a0e40e1c6b7","sha512":"d87cede4c7eb5a652a7613168eb603d867e6911166ccb24e2173eae945be4eee7b8ec659818e3c6d077916c20ba93f2ffc128dfd9d5ffbc3c877aacd76487dc6","ssdeep":"48:Pyt0EVd1lfPKOryNAYVmcQi3w1l8+93yi6S5RlojZnYg:OzVxXryNA4mA+9Ci6SGd9","tlshash":"9a8144f773586f74b23bdd0126a61f9b3314de73901156b4e6a52831cfc7d4328a128a","first_seen":"2025-10-03T18:28:47.378561Z","last_seen":"2025-12-28T08:10:38.577702Z","times_seen":9,"resource_available":false,"data":null}},"time_used":787,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":787,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-c64aad1a.8d94c17b.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:09.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-c64aad1a.8d94c17b.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 1964\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-7ac\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\npriority: u=4,i=?0\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNMv9sXB5ZrbqlhOmmYtZaYMSYuB8wKE7WEjbJ8epZNddUHCmCGk1Mb6I7OiQRowBG5Br9T2Mf9FNoF8PyDmHwfwWFxVRYRhtTo1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b334a8110731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6921,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (6867), with no line terminators","md5":"0c70a6ee05490550d78f582d3d200880","sha1":"4cac036b6743256e5922485905517d3c821e5f21","sha256":"48c9f907ef0dbc92f12a4aa65a1e00a51e72244e0f63fc817ce42d763ac55c8f","sha512":"ea054f6f3706869e424b66fbf320ae4d103ecbb93df1820948ea075351d15605914f212adf3774dbbce53d4371c5ca7ec11701eb7c5c58eedc46ccc9918cd93f","ssdeep":"96:jPLrVuD3Uf3nk38W3rpg8QD15ExHBeRW1QiGxSowR2ByGuj2:TLf3ksWbpg8mnsVQJxFB22","tlshash":"c0e130af90851a896717cc217794779a8728e132d5451ffae0567a28cfc37c217e234f","first_seen":"2025-12-19T22:21:50.08912Z","last_seen":"2025-12-28T08:10:38.567541Z","times_seen":7,"resource_available":false,"data":null}},"time_used":833,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":833,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-4047516c.8ea5beb7.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:11.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-4047516c.8ea5beb7.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2935\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-b77\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gu8Gfm%2B4n1nHf%2F8AIZM1yTNDGdwL9UGTZ7I0%2FMRIIXQV75zt9EZDDPFqXSOeBXk7PPW5R2PHNgrplJqFWc4W5iWfbU24xtFnIjkx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b34239f50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5706,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5691), with no line terminators","md5":"19d54d6290ff9d7c3decd151c23b5913","sha1":"537ecf7633724f01830fdcae175776bd5b59f8bf","sha256":"b93d30b0ab96385bc7dd120001c60efd6e7c18780d584f4035c8574b462e5d4a","sha512":"26444f376d38638cacea3c5d25ce7cfb33612e0d7f75108c3ea18252744920451cf83af0966fa005e845ce9fbff93fa3ce22fe34fc568eede797d884ce21a4a1","ssdeep":"96:kRVOTHz4X0Pgxj7VwF3KQDswgQRFdpg7QhW5ilDlMMQNMII:kmTHUYY7VwJoQkIVuRNI","tlshash":"ddc1c8c2a49fe6aaccee7085703e6130b1b53ff56419c1c6b779cc149584c25af0f6a9","first_seen":"2025-10-03T18:28:47.32872Z","last_seen":"2025-12-28T08:10:38.557355Z","times_seen":9,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/ClientApi/titles/ClientsGetTitles","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:01.172Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /ClientApi/titles/ClientsGetTitles HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:01 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RQfScYK%2BgVGayiEYKv3P2Q8Vl88JQrFp90WzfWpyUyio0YEKEq%2BnWkLnf%2BPJN8INfTd69hZgy4yIYQhf8jLU1icrW95LAqQ13ABh\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b10b3024aec0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7885,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"b61af6563e3078f58d76e1c57ef467bc","sha1":"1570b2a3f85133173f33706280773824355251ee","sha256":"cef3da5dcb79a1092469cb9a39977aae6b3243649437ac385e66652e293f3a64","sha512":"8b053c7a466bb25808a5f8cf74dfa3b134905b00bc8ed5859b09203418682c4ec048e5a1669fbaeba5b2de49feefcec5c544638696111ef45eab9df267997dd6","ssdeep":"96:KsrejTtVKorkgid3Ks8W6RUsqJdhlaUuRuXv1y/9SBr+c2ipIjMI6nYIoFjQvNxO:3bHJdm9Ap2ipIwHMjQlxIEx09","tlshash":"fdf1d5a7a3b812370aa70592fdbabbdef72c51880b17402f4c7e49399360525d6b57e0","first_seen":"2025-10-03T18:28:47.365644Z","last_seen":"2025-12-28T08:10:38.666273Z","times_seen":11,"resource_available":false,"data":null}},"time_used":822,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":822,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/banner03.17f6cfb8.jpg","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/banner03.17f6cfb8.jpg HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-476c\"\r\nexpires: Mon, 19 Jan 2026 06:51:12 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JTvHrpWxQE08YL%2Fd4LE06tco%2BER8rRDKbiNJgisOnl8MexlDuHLv5pa%2FaXu6FApQW7k1vWpUitXsqlkbHcIQhRtmO9crWQlbRpH%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30b1b8c0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18284,"size_decoded":0,"mime_type":"image/jpeg","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 600x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"17f6cfb870fff82f7ee11489fdb824f9","sha1":"b80443d7d108a7fdf8681619df9537079f832ade","sha256":"ae2a92e54290c0d8f8586ce807489a8e5370bf35e99394e5ac473106175901d4","sha512":"a1cf2cfbfc557914f597396ee05530f7695e35f567825482bfdd2cf1325ec83f2bfcff0f7ea35f7928dafeb786641818715062296e8c8f44b2ee4c5465671f25","ssdeep":"384:jThR4BbTGeLULVTgAmLsNHdhN/YPSSlhBa2RQm8f:jThRIGe2EAssXE6SlHalN","tlshash":"2a82d0f16e15ac8364ffa7fceb161962c55b707392b62b5201f3e667a358a4c2018902","first_seen":"2025-10-03T18:28:47.428407Z","last_seen":"2025-12-28T08:10:38.667445Z","times_seen":6,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-31.68a92f95.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.002Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-31.68a92f95.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1df5\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mJICQjDSRG98R1n7wJTbR5LmgYKmr%2BTHKY3ALKomXQKxQcPkiT95Za4US%2Fn9bqwN9p7NsLMyFOUob5tHUbbDHfiJ4Bo3aua6DIBR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30dcbd20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7669,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"68a92f95914e6aac04d319e170be19b3","sha1":"9642f3b3ee6f4170301b28f9bf1e8bb085770e23","sha256":"1b09f2398df11fad05e570662aa141bd510eedf8d7caff4064ef274a0f89f231","sha512":"57b622b97b534679f5c349f16419e48baaea2f974203493d5c4f8909dde2e8e724a4c1b7b59cfb19aa665473fa819f9b83d05bf8d3c0e404e763224a7139f540","ssdeep":"192:J+aKY6bPkruGCJ+AFwGvT+Jr6AhrVOiNAPumXEMIttp:fKY6bmuGCwAFbTKDrV38umXC3p","tlshash":"68f1afee52327d78c1dd3feb024dace5d053610a8910d447912bdd0db94736299768f3","first_seen":"2024-12-10T20:17:18.962953Z","last_seen":"2026-07-14T16:42:41.768892Z","times_seen":70,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-47.9bd5777a.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.237Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-47.9bd5777a.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1c7c\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cyqPUV%2BjvjWrtSJnxXTXavhvlsZmVLQroNamucFxMVwktMcaCKAfdEw2MMSlsBo1zYjBgWS7Bgc0CTewv4ujLx%2BZ3%2FO%2FNN82GCuE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30f3c0b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"9bd5777af6709f8a7f0d090c15024baf","sha1":"c6ceb22883b4ffb54dc91ac5cd7bc525552e3bfd","sha256":"d114efba7a3f094364a581b39151c7deca705ec67921af2c21c4d76a827fa655","sha512":"e1467d2e2d40506549420a02103876abc9af8dab07276bc4379d5f3ef90c09f74133fcddda9c628a631353b9ce24f5db2473114bccbec64d9409a546cdee04b3","ssdeep":"192:swkvmCw1kywOVzvBwsBxVeGLhzIWGwIDXUr:swkOCwJ5VzJwsBTJdzIWRIYr","tlshash":"f4e1b0b4bbc46e7a213b6452c932a3b482cc110e243b7fd79a42c7909c6493c6c1dec3","first_seen":"2025-03-21T16:08:19.196966Z","last_seen":"2026-06-25T13:45:22.949302Z","times_seen":19,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-092e488f.dd45c18e.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-092e488f.dd45c18e.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4646\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-1226\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:10 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rlem1ydCaBeItkpxo2MFVBVsbSVFEC9ciYkk5n9G48LCWh0ZNsrE1l5xfg6J71cR%2BEacqrj0Pza1fUXjQSJFTea7dGrhc9RWJXra\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33998790731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11457,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11457), with no line terminators","md5":"18392844b84a4fcbdbb1db5a5dafee0f","sha1":"7ab96ec4bfc03e06a3668572f751d38a196ae028","sha256":"96bce2f7f263d2f572e089d64a809dfd634bf97b641d5c03a03a567ecee05d89","sha512":"fab01b074cccbb8bf98d43365719c3f9716669bedbce5c82e193519b2f783c7eecd5369cbd0b50eb75ab7aa382f3a4c4314a5f7ba6f10f699bba65f06e1175f2","ssdeep":"96:qrt3+Ex1vENmI1nnL2++5EPaBt4Icy0j4qwA2FG5F+odpg7QhW5ilDlMMQNMIn+j:FII1nnLGp0j4xeQNIVuRN8","tlshash":"5d32ec4f3ce0b4dd1327a09e6a1fbe5f64ba28d1a19c994243f48744eeb570e1507d2e","first_seen":"2025-10-03T18:28:47.374189Z","last_seen":"2025-12-28T08:10:38.662229Z","times_seen":9,"resource_available":false,"data":null}},"time_used":835,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":835,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-16.a985ee17.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-16.a985ee17.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-23d5\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AGWYJoW73jHQ4au3v1bU%2BCvBBxPSpLVN%2Ft6XRnlGA7ocTjuf6gjjRVEtSgrIW4sCQi4MAAhcY6KcL5Q0MXmSmkFLTrcM2TVR9QMR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30cabb30731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"a985ee17ebbbb9cca353766e48d2cb92","sha1":"1fb71c86723225b8126be48c1c7ed5a5ad9e9395","sha256":"f8c1796ba328c6b78747d0851988994d0abcb305244be86b04f9f25919324d4a","sha512":"34c4544ac418afe4b3c9a4f70ecae3eee854494ed650abcc84cd4491a7dfde58a6fe71f5ec1e6bf74f32d01561984bf2440c496cea196b4b622750289fa81d2c","ssdeep":"192:dJsYTHmqu5m04d22tUbd35qsPaB6INDXiZBKyWRnV/fgwEwekPa:dyYTHh04gSUb/PaB7NDXGBKygnV/IwlS","tlshash":"f212bf33155032fa1d1ba5b8a28c9b5781a58a55b97e33313f80bb76a1f73dd7041018","first_seen":"2024-12-10T20:17:18.9505Z","last_seen":"2026-06-25T13:45:22.985868Z","times_seen":34,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-36.2c9b49fe.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-36.2c9b49fe.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2890\"\r\nexpires: Wed, 14 Jan 2026 07:40:25 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 465637\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2IJ3ArIgATwwihHP7Axh4gesRcV%2BxIqnwzDgDpqSAKjnMaVY4VPc%2F3R%2B38rEvtkvYTebwAiM%2BFpb1dzg%2B5vaRNcNC%2BJl3k3NVU8i\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30e3be20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10384,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"2c9b49fee116e59decdfd1aa2d1ce29c","sha1":"0971b53f6fba9eeaf422200571aaf723638dacb9","sha256":"aa751d0b800746335f2546ed9729485c7f72dd139982fcd5903170f9c4aff00d","sha512":"c08ce489bcd38eb452ca561b321d18eab050708cbfb6f09a7fe0ce42a78e51be78726b731fbdeb9e9995f3b701f5103bbae9ef1929f8ad00f2c4e0374855e125","ssdeep":"192:SkIl/s4YZuHrozcEFwAxSYo6M+8kioYjYC4FlO7sC1OLWYtLtiCiOUg/J:wl/s4YZuLobFwLYDMDkdYjx4291OLJ","tlshash":"1222af24beacb7fad7f96b84979d5492b10d455e9264ec400302e8cc269eec18f8739c","first_seen":"2024-12-10T20:17:18.980428Z","last_seen":"2026-06-25T13:45:22.994795Z","times_seen":26,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-52.cec39669.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-52.cec39669.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1fe0\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H2nxi5GES6vi8IYK8cNC4oFG%2FeoVp09hdPCGwRoRPYWMAzMammA%2FZTRyxhOuad9qlcbogW1HzB2RTgdMl7DLWJDB6XiLYse5e8Oa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30ffc160731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8160,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"cec39669412022e6bcf21876fbdfa82b","sha1":"dd684c204c1aa4081d60199a5b241586c559deb8","sha256":"ae001762c7107a10f1dab77a1eadc4fcebd4aa20592c64d2f2a1401d547bc327","sha512":"d8e49a34cd1aee318ca5a6cb4a2e7fc214601d1b77404030e47d0d5d0e54e283f2f47b02fbc79908c8498d98dd10cef856274bbfebb49db9766ef720da66d5e3","ssdeep":"192:fct4G2FYne7Ry3F5pVCgNTLWgbXORhdvkLeGVjiRtSB:GkYnyy3DvCgNTLvbWh9uZVjiqB","tlshash":"2df1bfb1604e5fc2f844e4e3bc7d32208711c71da8892b95e1614ea2bf2a216a3d69c6","first_seen":"2025-01-30T09:50:41.422094Z","last_seen":"2026-07-14T16:42:41.770182Z","times_seen":53,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-1f479b7f.de30d99e.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:01.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-1f479b7f.de30d99e.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 21033\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-5229\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:01 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UZvPQTP0eF1A26HoVL4VGx7ZWPJCs8nFrmZs61q3B3IxR6g8FwkPpb7zNk%2FYOacQKfz7p7SSvBHDEGCc305wNzQsRv2Zx%2F4Pnavo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b10b302fafa0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":34843,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (34843), with no line terminators","md5":"92b80b484165fe14bd72154fe7ef0a0d","sha1":"b4ddf5ef490d14d7579b7cbf0305de6986c1e9a5","sha256":"2ca121db59faea15b4102fd3fe5f4174f7182585ccac96526745fea42f435066","sha512":"769a278e5b7cff477d139c19310683455bf3134421f11072b8784a43262e80ef39f7e5d7c8f2cd88902e099edc5da58062886a43f208fcd106da8dd2c3b2c85f","ssdeep":"768:8zzzzzzzzzzzzzzzz2u46bX340sXIGYsO7LMGTkppxjSecuBaCGrFuBgy5j02tZb:8zzzzzzzzzzzzzzzz2IbXo0bkSLMLP3X","tlshash":"72f2d1b53e2ed9f161a39974b42771291cf2083f920c52d197813d0de9e85ecbe2e5e8","first_seen":"2025-10-03T18:28:47.240858Z","last_seen":"2025-12-28T08:10:38.612823Z","times_seen":11,"resource_available":true,"data":null}},"time_used":796,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":795,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/banner01.852646a9.jpg","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/banner01.852646a9.jpg HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-5500\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2UgF7S8WuG11eTxSr%2BiFgXQ7QD1szHSOXwamOj4QOPNG1cRukqu%2BSrtnsRv9TLoJ0DkXWJv1gUh%2FJ79aPsi9kwDYvHLjaVwjlqOq\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30afb850731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21760,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, xresolution=74, yresolution=82, resolutionunit=2], baseline, precision 8, 651x415, components 3","md5":"852646a9e94ec7034c6991eae329d429","sha1":"47224407ba758f9cf14b6d662674af805540daa3","sha256":"ef6ef15ab5950a238ea855f3b871448914e5bb5a81ddb31e65728bc57a8d2975","sha512":"44d9dcd51f4b7b940d23842e768beb963384cced63f8d647267095251f3f889ac3a295bd43276d0778aa48b7f43a2c2943558c40974f349da3e1dbc0fb1eb140","ssdeep":"384:K8FssCq2/3LVmn2qvTirWpdsdS4vPT95WVbhrdYVUEu5YzEJ2YXX:RFs6g3srvur6dmb5WFh1YnyX","tlshash":"04a27b13cc2d8adae93890b4faa34b4c6519ff9dfa4338a781510eda78381719c4c0f9","first_seen":"2025-10-03T18:28:47.367101Z","last_seen":"2025-12-28T08:10:38.611119Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-13.b449d43d.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.788Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-13.b449d43d.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2b3f\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGoo%2BAmBy4u1aYH%2Fa3%2BEklY3HxBtzCGt02F%2F%2FrNBwOMOBVTOCYWRQggpJPUQZTXAOMgWoBWz2DiLw6KrRlflPtv0JRbhNNwbcP52\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30c6bac0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11071,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"b449d43d67af53e0db8fde75d599fc99","sha1":"29ed27284b62b30b8e776b8df17caa9dd58823c3","sha256":"b372dd7d372bdd468561bbec3958bc29cb026109e5ce3a0c3223d3e83fbe4875","sha512":"d92d256e088045d5fa173e074ef5e02d090774fdc7ff8c9daead3cc80ca407a30a5349ca81cd026c644fd0f4c674f1625ef0f3d4cc6457a8102872866c87733c","ssdeep":"192:x7SBWm5l8GGzMS57l6d8/GFUchlERyRSNmoPzp4ZRbnabwJYTl:xSBWm7YzMS5EiGF/lDRSNmoPzp4fWUaZ","tlshash":"8d32bfb9abab8a1ce53a3c1bc00c60dd1a3cb0dd7841275b02c5de7b063abdc25205f4","first_seen":"2025-01-30T09:50:41.414373Z","last_seen":"2026-07-14T16:42:41.7155Z","times_seen":80,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-23.bf2b9797.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-23.bf2b9797.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1b68\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nzjvDiOFKJjyWRJxBZ7YXl7jZ6dZXrZIFmSuxv%2FCvSq0fU%2BvJWL%2FgdwIa4rZJGF06KLQKGseQZeFpe8f%2BtodfHVAY%2B3Dn0Tr07Wr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30d2bc50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7016,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"bf2b97976cd4e7c571ed78ae8be9800a","sha1":"2f21ac4e19387a4a0fe8eba4c6e46bb5f82d0968","sha256":"3c8324d9482134cdaffb67bf75854847814d350de2dddae01c5c72daef5bbaad","sha512":"807c675d47923f66f26f1ce33824ee1acb59dd3208173686ed18d6c635f9e04a0cbdac267f095f670c1cb9a91b6f317393bae331b201f095b368eafc11a7fa1f","ssdeep":"192:lyPdkphYrILxwIY8H79x3QRtN4RsnY+dyiLlCXFaAuDi:GdX0LzY8HLAvN4Rs4iLlC1aAuDi","tlshash":"dbe1ae91cb70709feab31b3c442de8523eed008263f1d2d4a3f6ee75e16d14608e8598","first_seen":"2025-01-30T09:50:41.418236Z","last_seen":"2026-06-25T13:45:22.933911Z","times_seen":48,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-45.2d7ba26b.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.208Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-45.2d7ba26b.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2845\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jq%2F1%2BJhB9gNFdXFPLytCNObmA4NVzxFSbBwdr87me7rdwPd45lpZRPplx16f0yxALpMtLj1hopwEG8%2FVpCCvuAEFoRaOkqJHDAYF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30f0c080731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10309,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"2d7ba26b6b73c1ae51d51f7593c1c983","sha1":"bce3fb522dbabf28f8d330f09340caa795917aaa","sha256":"a2c06c0936b5199b76397e0da30f191e734a0adb18da9f9a8552c59bf98a6169","sha512":"5ef043f784fc8dd0ad98c0fc5be0a9c22a104934859c1ce6cbaec1a6d1367a2f6ac1402644ac87f931ce8694067e197d32aec6ae021f176fbc5957b8fc748ea4","ssdeep":"192:XoWdNBK4cdnoJyyRTvUKnZxVn3ZzA5sRMIIN9vdnE3QN/uIMyu3pP6Z9:4woxn7y1rVnyrPN9VnEIOyMc","tlshash":"a922bed76bdb0a98f3fe6a6747e1cc325c1d422d28c5facebbc4e94090106958d79398","first_seen":"2025-02-05T03:06:17.308451Z","last_seen":"2026-06-25T13:45:22.98001Z","times_seen":27,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-55.973a983d.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-55.973a983d.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-23c0\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1IxMq%2BtGBcp7Y8vbb7rLT5Xiy7aTP6OwBl7mSwJpOtFZEeaGDnK4iUai%2FvxQzE3r58c9CRCk2P9wcz7EPg7hEwJVxOP6OOha6gh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3102c290731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9152,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"973a983db9b1b7d51a35804bd74d673b","sha1":"3f51eeac6645e5a8059994470c9658277bbfbb02","sha256":"366340e3d04449cad253c92d22f42dc338abfa0aa3e3da55bf36e6c8cfdc389b","sha512":"f4da983848bc7d9acbc139712938af019d6c82df31bae2ce0f6de0e57055d330ba699102cb5977aa79a33f730fa4df619a56d4dc8734dbdd09f40a9c9eb8e6d7","ssdeep":"192:AtBS0Ee1tWrqCvOGLW4aZEhpJnaz2Ki6InX2cnqNkx7JfcuNulH9sFr:A34rT1Ki3nXsN07+uNulH9i","tlshash":"ab12afbf4c477528e8e1c5996f2bc0313c065f85a0d888bddf0a2169742ab6d026edd5","first_seen":"2025-08-10T09:50:08.676558Z","last_seen":"2026-03-02T08:34:24.514583Z","times_seen":15,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-10.12ec3002.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-10.12ec3002.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-286a\"\r\nexpires: Mon, 12 Jan 2026 06:57:00 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 641041\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uKil5bpclheE60vtJ5%2Ba5dcDL4h7B3A79JEieMBhvHv0xPUL6cUnxVxOCWWokVChPZvjATmwwdJ1C7iypHiiTEkY1nFhI8ILZy0C\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30c3ba80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10346,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"12ec300297f7f7e948eebf6e4ad81cfb","sha1":"e94e043c8dbedf29080dbbb429e29773dfab56c4","sha256":"ea2485bfb43a0b9fb51a65c9e02b4a5eb848b08729df2904a37abb2328f810ad","sha512":"8220027ae6a7abb1414afb8d1423c08c8ff63560429dbae5c5905088dd4edd6a177c91ea09cc3d0b1faaa50f6042df6467ff9ba07a3e3361ac6c7529500a32ab","ssdeep":"192:YHHL7BUaB7lxykZLa9q8wbRxIpp6XOMc+uMdUn5ZRIjNjrVqOjQMa:cH/jUU80x86XOM1uMq5ZRotZcn","tlshash":"1422cfff8487f28418a7ef2879b058561bd3748208cb67c437a3deeb12e75650325272","first_seen":"2024-12-10T20:17:18.987643Z","last_seen":"2026-07-14T16:42:41.716224Z","times_seen":58,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-19.19565729.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-19.19565729.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2a8e\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FEgx2%2FtDHEcS3rp0T5I51xBvWeJRUfUtV5BNN2pewRt039YYklMp0g563Xw2opgsOvHhwZY9D008Fe5csB%2BQSBxL%2FQhMyhZkDAuy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30cdbb90731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10894,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"195657297f53fe00cf5b8a428a09c32b","sha1":"c83bc7e2dc832ff76cfd4a7c96010b0c396a3b59","sha256":"cf786ef7a277b89e557778bd2fe184863f54f61333fa4e2c391c4e87c8f49e9b","sha512":"93ae9e5dceb06d23912127b4d484e5d56f20f35f7094f7a2c8270d25134808d7d8b290c678318af89e859d2842c47b9eab90d0e8e929f46bc586b02605647ad4","ssdeep":"192:USodETIpaGbTx9GfYqB/yeRMSNxYlR4Y6JLszHeFMOPitAVEb2B6vzo:UP2uFPxyBuhf4Y4LszHeyyYAVEb27","tlshash":"9122bf5c639ed3580304cffdc9d7d30d4060aa15c76ad7100a4e6bbf27a6e284e58297","first_seen":"2024-12-10T20:17:18.985389Z","last_seen":"2026-06-25T13:45:22.989642Z","times_seen":33,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-28.f254a7bf.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.958Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-28.f254a7bf.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1e73\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RoALHH%2FiTbLfMwN0na9UjN1RqhByrf5oydQMCAUXPe5QuIV68ETh2XZoNFX0ZSKptI8PD8kTJnimJFBdNmv2FdRaUIZ5aAm%2BxCBo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30d7bcc0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7795,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"f254a7bf3e6825df099f7523cfa1dae7","sha1":"0a139757a2b911df6901de22d42177949d9929ce","sha256":"cabe017b3f8a61623c3c5ce0f18c1b35efae47747bb3c77b71e4f9f51ac935c0","sha512":"bb9bbc70ba9aa4dedf4abbedc0673f5a39487be66f5b486bd3f97487ab5019cefe0833ef7fdc0d98c82f450d31288420785ed96991afff9fc01ab5d606493463","ssdeep":"192:MCN3o6sdcQwF0rn0nYsugnqABgT1+gTRltEj8ZfRR82Y:MCNzQwFrnY1gnqAB4BTR7ZfRRe","tlshash":"7ef1aedfb8ed2cb45f5f2711bb7e26d62cee5199184b6600c9cdca200478e952b6b121","first_seen":"2025-01-30T09:50:41.431542Z","last_seen":"2026-06-15T01:35:11.414855Z","times_seen":37,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-2015118a.05cf0420.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-2015118a.05cf0420.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:06 GMT\r\ncontent-type: text/css\r\ncontent-length: 733\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-2dd\"\r\ncontent-encoding: gzip\r\nexpires: Sat, 20 Dec 2025 18:51:16 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\nage: 36589\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=04VLLWkz43i%2BHnuaHxP050yrKtD5SNreHtw%2FjQHoNa54JyjAbmKsqZa1vmHdzlRcdO9u1WCeaQxxowYiN8aApy5px1LUqHzP6zpY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b324ce780731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2281,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2281), with no line terminators","md5":"8b0790942bd6b6b3ebfd05a7c80eec08","sha1":"1b2c89ccaa77e0a94ed5fd97cd626c5d2aab550f","sha256":"d97deda0749303b5053cd9db568c89afce31132ad4386733108853986c2c40b6","sha512":"68759e2f43b780a1fd4d11c1e3fb303634d6a29eea5c61672b458b65f08ae706181352985b530698675fa0e0986648f84cb49eb172540898a6cab777a98587ae","ssdeep":"","tlshash":"c541df1331b9271a70e7c89095a11576b2b4ba63833123f49dd32937cfa77e23523645","first_seen":"2025-10-03T18:28:47.299337Z","last_seen":"2025-12-28T08:10:38.61851Z","times_seen":10,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-5a116866.a55f8be8.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:12.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-5a116866.a55f8be8.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:12 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1059\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-423\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5LsVQZGgsxdEaGPuG%2Fw1XfczbJGiFIYPBhbnJ90mfImcV2CbjiJJPtrRo4CjLE%2BJQusapJgjnQHJ0efQn0ksR6zdg7Q1rGkOHNC2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3469a9b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2229,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (2205), with no line terminators","md5":"95e6936d28acaf24bbfee9eb3e10309c","sha1":"2d02a0e8be0cb7f4ac827f81c2412fca1f99bfdf","sha256":"0d4f19366695da224ca48711f4f8811d5968d09efef8af1960fe170a27203398","sha512":"36440795936e3650ab7db0ece2fe633fb25d4cd7f6b9e624c4d31af6a597f8f2c2feb92d880b557283130e03cb7cd2847cc4569a16ed6357d875bcecf5dff33e","ssdeep":"","tlshash":"e441650e69b3a8586a3ae025000f5d1960561fa82a28c7dbdb75cc749694d3e3b1f6ec","first_seen":"2025-10-03T18:28:47.429469Z","last_seen":"2025-12-28T08:10:38.676137Z","times_seen":9,"resource_available":false,"data":null}},"time_used":794,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":793,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/rank_title.abe98fb8.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/rank_title.abe98fb8.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/css/chunk-d710d97e.9c0088ec.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2045\"\r\nexpires: Mon, 05 Jan 2026 07:01:56 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 1245549\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oCU82C1DDu2XcQvFuj838X1AKEVJzzmsDmeXRY03FQxQ89hzg7DdG07Tju06SVLa7hX%2FpwVHHT0MQg%2F22q%2BagVs2N2AvWY5YLwU0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3232e550731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8261,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 590 x 124, 8-bit/color RGBA, non-interlaced","md5":"abe98fb8660908801b8b8a4e7c5dd31d","sha1":"1ff1a3ccaf8dff61a930e3d4003c9fe0894a9fee","sha256":"af0c00db0f9ed5202533e2e98e38c5710b9fcd1547f607c9d59de4effc5f7f3c","sha512":"dd69d01f5e059a380a5c54d8f33d92bedf6435b011029d96d704f6ec4a551c623596250cfa1e6676f9a231f100ba6c0d1c059579d89ca1706b184f33baa5c23d","ssdeep":"192:egDhYGGmwvNIhF0QDZQxz+QNo7i4pMD/YUTF9emlQ:NomoydWR+XOTY+y6Q","tlshash":"97028ea9822ddb763c773d21cc47d5a5ea9f0d7c297410f714a08b2eea22494df0ca0b","first_seen":"2025-10-03T18:28:47.3987Z","last_seen":"2025-12-28T08:10:38.658803Z","times_seen":7,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-2de24081.1299bbb3.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:07.478Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-2de24081.1299bbb3.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 2166\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-876\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hm2J0IKJ3l%2BgkOXpP20nsPqwSL9QQmwZdKTFTakGnLiOu%2FsfB36RjK6lNQHZSL1EMjfH2b9pBQOJZ%2BrJGwyxM3QCy8sxc%2FiBlr1D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b329bee50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8360,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (8306), with no line terminators","md5":"d239f7bb8c2059702a8d95eada401593","sha1":"9a7e750983b475c9ae0cc257c264cf274bf86837","sha256":"4bd6ff299e1fdec5c1d0f45e0c6f89d28863f7405bef2a80e635d6176e1c6e57","sha512":"8188a4fdd339fb421758da67e94ac5a1a82506643601cc58fac9b4f2aa87c0220262385ee6e56772dd9829aa1d593ca76ccba04c67cd248c7d5cdefdd8698a38","ssdeep":"96:jPLrVuD3Uf3nk38W3rpg8QD15ExHBeRW1QiGxSowR2ByGuUHzPA3+rVuuLJx775g:TLf3ksWbpg8mnsVQJxFB9suLHR+j","tlshash":"e3022e6f90851a89b717cc6067a4779ac628e032d5491ffee4563a39cfc37c206e235e","first_seen":"2025-10-03T18:28:47.342347Z","last_seen":"2025-12-28T08:10:38.678793Z","times_seen":9,"resource_available":false,"data":null}},"time_used":829,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":829,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-58f0303a.b54257d3.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:08.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-58f0303a.b54257d3.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 2038\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-7f6\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CpAohdbSdpWTvlD4q%2FfZZti4fiKM8jMn1yuaSBgYT03u1m6cV9pk0ktskpY1SfKXultd%2Bl4efHcSpS5UeUq09NEjgLj7bhpOOzbo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b32edf6b0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8469,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (8415), with no line terminators","md5":"3ee259be20cb4bb3ef247ab07782fcf5","sha1":"98aaeaa60e121995ea31b3e12b3a4b33e58d141f","sha256":"a24eb44c019e0494fc962e84c3b7a84e3d5b3e325aa7c9dc8267878331534837","sha512":"e277c62adcf615db2f6510b7b27d0559da40f8ff710a65eea64431ee2c12d61e5229f86c17e7cf929df79c6e0cd7f019174c33430130cd6b45999904090ea9d8","ssdeep":"96:J9A0TrVul5UD3lk3MW3zpkHis1PERHj8V61QibAlxKja8OBn/47J:jhD1k8Wjp+isBuFQC0xbBnwd","tlshash":"cc02d076f0ac156f6637ca98275c36954e30f623ac050eb9a36135249fc3f8226b137a","first_seen":"2025-10-03T18:28:47.399934Z","last_seen":"2025-12-28T08:10:38.671012Z","times_seen":9,"resource_available":false,"data":null}},"time_used":868,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":868,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-b70c559e.be218601.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:09.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-b70c559e.be218601.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:09 GMT\r\ncontent-type: text/css\r\ncontent-length: 2147\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-863\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:09 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lOc5QtjgP5ECWr8vuK6%2BxqwllGzRfuRxqOF1DOBJ5uJpZgqtZft0Odi03oDsdVvM1oaHEyEir%2BeDI1eGWr57SV8nKWGJOVIRsqIi\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3341ff70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5806,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5806), with no line terminators","md5":"5c5abb39ea491d6c3ac51402111dbb93","sha1":"cd80ef308a770364f2524e2396a77323b3d36297","sha256":"46430925feea0fc074b800d315482f87b4b9edc0dcc6bf573a87e46b09f3a97e","sha512":"51fc29f11a24c59095b50f0e32e595161288fee2045f2e9d3e598cd5d09ab3934a63db7ff454f82476efcc6ff25a3553a246c813bc7bff91399a1e8a50c3bdb9","ssdeep":"48:Q5kzB5M3NJ2O1QqmO7ZHwC0Pm/m1pl541WVQyh4be2/plAV3Nw0YTxYVXys35l/L:G0+NJcOlQCxrOKintYd4XitVFDkniC","tlshash":"15c15333764c123c733bee9a26a1a7c57360f233d00692f9d9b57822cfc76922561607","first_seen":"2025-10-03T18:28:47.35866Z","last_seen":"2025-12-28T08:10:38.660554Z","times_seen":9,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":867,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/ClientApi/SiteConfig/GetSiteSetting","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:01.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /ClientApi/SiteConfig/GetSiteSetting HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAuthorization: Bearer null\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: application/json; charset=utf-8\r\nstrict-transport-security: max-age=31536000\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nqdPjsQFK1edj8oTD4fQ0%2Fi6NcA392Nkm6A5Z7kz10bzG2PpL6qL8MFAXPRmMjVGjxqHiLPb7wbz6aNZQ9jyGah15TAFSMVQPnDR\"}]}\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9b10b302faf80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2153,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4c826ccb3e9428953a5f0c31ae4707dd","sha1":"be1484cd9fd8633df1a18fb852f67ea1728710c2","sha256":"186fd5a4d55f5b5ba6d5b8f032999dbb3681c82e1ae1b1003cd9fa19c13fcf4c","sha512":"f85a65d8c91493c80362c934908b5b60fd8881db92a2253dbadaad453332d141291d70cae3e6f2d8886ba06806f7a7ee54229c2b18b510bfe9aefcaa63dd653f","ssdeep":"","tlshash":"87413f4e220c04b6dd620390b37a3f4a4e7d53e3459c9e69bd9d2c200afb18ba521db3","first_seen":"2025-10-03T18:28:47.261503Z","last_seen":"2025-12-28T08:10:38.584798Z","times_seen":11,"resource_available":false,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-8.f5b3f051.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-8.f5b3f051.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2206\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lobaFfFYjKvtlg9KUV3KT8u1MwQZEVbptOw%2BqKyJIKMEztL%2FMiX7aerwzYgNXuoY6zLFOznu8v2GC9SvTVSuuhTq6zoSUZ7iWw4Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30c0ba20731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8710,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"f5b3f0510a22a1747432b89ce42a196a","sha1":"ad6042a007644f32c63ee3d281e72541bda38d40","sha256":"897327d45b70d991dbaf5b67340702d4991a21941eae8d46b534b51a84fb1c82","sha512":"e6ee1b50d5161b227686f5c20599464280308d69df304642bb81fb7393fe3d055f5303dd26a67265cc6880c26d4ba5a8c3c8e710240e1e09e00350a3f5462824","ssdeep":"192:IOnOCWn5wmtEoDpaJMBx/GrmGTLBfcSP0/+/WDx4jGpotT:IxamxwmGpUI0G/0KBt","tlshash":"1e02ad73894d0f05032b5ab7c69609cc699f417f1db37d8ce24ec9e84070469cc8aa7b","first_seen":"2025-02-05T03:06:17.303015Z","last_seen":"2026-06-25T13:45:22.925157Z","times_seen":36,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-32.82a1daf1.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-32.82a1daf1.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-1c38\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tmf2C5W1ofcP2txxlVuu6KJ%2BV4nYJGr2vqwoB5Gq2PQi8X8b0S8pA2x%2BgramwpTMrhAgF4FogYVRBRGbOdDPfWHF8oJn6oMTAEJT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30ddbd50731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"82a1daf17deddb39c5a1cf7cd7877fb6","sha1":"eaf9b529c003ada7ac5498d34719c27903753348","sha256":"bc28dcd053dbd65648e1c54be6d3b5f08576bfeffd2022074e49ed7819398541","sha512":"90838adf42cf250bb43ef8fe12f699e60e0137cdb416c85342ec5cf8daf4e41bd4dc76244bfd539d5ffcf5286ed6b0f68861ec7869ff3fd2082e6c4753293df5","ssdeep":"192:Gct2uD9cAWUAhqIPtDijJPgvQseEsxr42YF:O4cXUkqgQIv3+MF","tlshash":"7de1a034b4fd974e04e39ae1377a01e9cf89f9502e01fd7ddc2880eec586d4a7226501","first_seen":"2025-03-07T14:29:33.925045Z","last_seen":"2026-07-14T16:42:41.689935Z","times_seen":55,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-39.aed30dd6.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.112Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-39.aed30dd6.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2ef3\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tyMPpW3uBWFhHBzbQrdtFBPdqrUuXpu1eHx9QOjbL3ogGTOSS9sLH3nGu9jJ5nP%2BdTNYWHbtwyH%2BGBNqtWlMf6s7YVLwdqUVntu0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30e7beb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12019,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"aed30dd625052902e8985055f6062a06","sha1":"9e53ea65b6a38f389cdda177f7f31b0bbbbb7d0b","sha256":"4d65e8e9b156b4e571908da1d80621b4a2de7cf199860ff9e9d224a9ac6ae058","sha512":"8d6c6510f6c24a63f1893fdc9aa06fe2a1fec1b9e6b7b3e75c675c6b4bb607131ed0a2b476bb410634f7581ca56b8f62c7dc1b86947b775824ae9bfa3fc65267","ssdeep":"192:44Hq/kCF+8PVKsxTkv9jzWKpxV8zGYyGdKKGQDUA5ZkvodrOIlKgpUhR205aVq15:E/1F+CVNx8jvV/YyGdtGQDtUvo5Kgmh7","tlshash":"ac42cfa3f8ca9e7f13dd943a966e5210282fb6010074466fca3e2c96fac717d4ac5107","first_seen":"2025-03-04T21:00:24.817268Z","last_seen":"2026-07-14T16:42:41.765439Z","times_seen":29,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-53.3d012bee.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-53.3d012bee.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2472\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovgd%2BfsFmQQFeEOcEzoj3i8NntA39i2p3CrqSf8FXItJGyZioAhgeXpuGx85Gxd9YNFoHqiFwOtArIbwEcH5epB6TebEh6%2FfaaSM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30ffc180731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9330,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"3d012beecfc2a07d43e8f01be955569f","sha1":"7ad757d6e1bb085c5790b15032b24ba0d517d08a","sha256":"58e7e8020291945b08e65e8a581a3c4a15b3bbdf26c90d52d3a264335f260c6b","sha512":"3c426e96462d549f2a96062c515bf91d09c8e244eace39ad0319a2abb79f2f335438e47cdd2ce5848f523f013735adb5480a20e2b206b3bc8089983022798294","ssdeep":"192:7yslBgK6LZFNgsFjLJIa/pLhl2ztVrEaA/zrCdibPSi6xpYJpv0tr84d:7J2dJxN/pLhYjGrTbKi6xpYJitQ0","tlshash":"4812aec7b7a3c8a3cca2160bcd0ce0ee596604d4fbe3cb52855b4599cb1fe15c9202e6","first_seen":"2025-02-05T03:06:17.307494Z","last_seen":"2026-06-25T13:45:22.939596Z","times_seen":40,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/partner5.d607d839.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/partner5.d607d839.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:06 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-228c\"\r\nexpires: Wed, 14 Jan 2026 07:40:29 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 465636\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jkdtji7ws7B0f6gMqCrNCMjoQ8AQfxGqCdi4nGQMSm7B2KkCoruCk%2FXR7swfmZSPFrkJmILLbB5X3BtxNyvVxBL6%2Fvnn1SQZ5Nsv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b322de490731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 239 x 75, 8-bit/color RGBA, non-interlaced","md5":"d607d839c229ea2287fa895734401ed1","sha1":"e5cfb135bf6b8a22914b2d01fdfa8539425404ae","sha256":"7fd1d26233ea55272cda711e1ee4e7d6741e6de0cf513a2affadbc1d7c3d637c","sha512":"bf294ccf39d7a3af9de14960be9fba7c78fc57fc4e3a5aa2a72551daa7c95b8625e6e912ce5d122a3ed40542ff7b607d14d130f0e6609a22ca602b03f314f8fd","ssdeep":"192:TneGKx6gr84KyrfRyUiHZ8CchyP3j9FM7Arquy5Z:reGqbISfcUiaCchcF9rpy5Z","tlshash":"fe02c0ad01b7384175f0aa5321f3af3172da1eb052ba52cc71add5b8691ccc744b6a47","first_seen":"2025-10-03T18:28:47.38401Z","last_seen":"2025-12-28T08:10:38.60747Z","times_seen":7,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-38321c14.8a8c4576.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:07.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-38321c14.8a8c4576.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:07 GMT\r\ncontent-type: text/css\r\ncontent-length: 1913\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-779\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W2%2BaAHcMwntHYqoLdus5CazkvyN6fj23D4WZ%2BTsclNQmgjyqXF5bwEM5rZvkRhXPMux0pKGV74pcv4y6fPa2muUT1%2B%2Bkb2gU%2F6jC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b329cee60731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6793,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (6739), with no line terminators","md5":"a1e6008ef42d90e0cdfe3158502444b1","sha1":"029ada8461d31117d67d96cb96699d7b5128e9b3","sha256":"6394df7e8222b4fdabef3c399470f785ea71ec15f5a99f1f7d96d9e6425070ff","sha512":"88db21f1c0a314ed7c394df32db0c7353e16b15f45a841b53193c73fe6906163bb10bb548da2e655e4d9eb813f22311f12465d037742dd4d1b4017995780051f","ssdeep":"96:jPLrVuD3Uf3nk38W3rpg8QD15ExHBeRW1QiGxSowR2ByGujd:TLf3ksWbpg8mnsVQJxFB2d","tlshash":"56e12faf90851a896717cc2167a4779a8728e132d5451ffae0667a28cfc37c217e234f","first_seen":"2025-12-19T22:21:50.193012Z","last_seen":"2025-12-28T08:10:38.606553Z","times_seen":7,"resource_available":false,"data":null}},"time_used":287,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":278,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-51.e62d5cd4.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-51.e62d5cd4.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-267d\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZK99NELUU9luo1DrksgWTFtwg877J8mXzrvP86Lw2A1TjKDcWRqGUtXTbWex1%2B2nueAeeNFNyJC9QbmbKFQFUGkga%2F%2F7JzEFDr7W\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30f9c130731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9853,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"e62d5cd4913c66ec981d5b9256149975","sha1":"b3fc613957dcd97c21feffffd40dbc4ffc5c85f1","sha256":"283f673be1341de47a26738023320937ae81b66e38c4aad97f61a80139f0496b","sha512":"9a478523164db745841c688c0edb1f0709a411d27fe9197fcb1da8717d161d2a11d940c615e0ed5a957a0c8256539777a0334a574c83a033a638b83312f0d067","ssdeep":"192:DzedOD7gTr5dWjCogmzNbCJgRMvzf9Y1bRzuX39xltQwxJU5NSA:D0OITriLXMLQlqX3T/xiD","tlshash":"8412b0dde679892615de061ce93e0e5f1d28a1268c24eb82454c8fdc3b88acc4f5f71d","first_seen":"2025-09-29T14:15:50.289601Z","last_seen":"2026-03-02T08:34:24.52728Z","times_seen":10,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-54.023bfc62.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-54.023bfc62.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-22d4\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K6hBTdpjkwNJD4t0IIrFLqpM9OvE7LRixA1tVYnrRMnWjOrmFkSGaP%2BTWoPFW44w%2BrfdcM%2Bl8OhVkERIMYFlU53vcE57A%2BpB0Liw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b3102c280731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8916,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"023bfc62e8ef43d0661505dc2d2c1af3","sha1":"8c05b0e6e7f4e2adc7fc3440b9f9d2cceca20fd3","sha256":"97f9488eba090635e0ff64fa1184243bffef53f90927d239a27dc5eecad666d3","sha512":"93c2a1a06283cd1034fc4da985b3ee6257aea41414845b7c19f959b46a22ce11faed4269f9c809fcffb4651098050777c723b899db358018abab78318dcde4e7","ssdeep":"192:YBBquTIfcwOiljtKjX/9nKkFoaNeZZ1gwZETYa4Pkwrgo3B:oB15wOA5KjX/NSaMZ1gmE0YwsoR","tlshash":"3f02bf71e0c7f0bb06d3c035a9b1a5215b4291655899f83c2313372a37ad3f7c641089","first_seen":"2025-03-21T16:08:19.229301Z","last_seen":"2026-06-25T13:45:22.935566Z","times_seen":22,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-1f0cb4f4.d35d820a.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:06.693Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-1f0cb4f4.d35d820a.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:07 GMT\r\ncontent-type: text/css\r\ncontent-length: 2031\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-7ef\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:07 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4PNZWcYijgIHQuy0RvUxYwKFny7%2Fwp39dVUdXijSUUlyvP45mreDcCGZ3byVu%2B23Io58PEJGbaj6gPaNRbC0twnNw6WDNY7Go2J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b324ce760731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8610,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (8556), with no line terminators","md5":"5eb00108490432202f108f95a6452dd2","sha1":"08e0a68c3d03a5e8d7fe463a917fd7b7a7afba06","sha256":"0674131a6158a87b915c60d889e608d2555d6b22640825ccbec48a0877905f25","sha512":"6ac320f104b46894a69e10cecf569d90363fb59b222bb6092a07a7dc45b277c3fabf152b4782f2c9b180c540b070dacca5ba48b33c03f22807546d7ddb5ace72","ssdeep":"96:YZrfrVulMUo3Sk3jW33pkQvU1QEWHqtQL1QioDxTyp3BGP/N:eioikTWnppvU2pxQRDx6BGd","tlshash":"2702ad5ff08d9584a67fd8b066542e974e20f223c4c51aa9e45b66348fc3f83279336a","first_seen":"2025-10-03T18:28:47.403075Z","last_seen":"2025-12-28T08:10:38.637065Z","times_seen":9,"resource_available":false,"data":null}},"time_used":870,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":870,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/css/chunk-4912e469.aa81bdca.css","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:07.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /css/chunk-4912e469.aa81bdca.css HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:08 GMT\r\ncontent-type: text/css\r\ncontent-length: 2263\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-8d7\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:08 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tct1%2FGGnCImW2GLE69y5Wt5K5%2B0EktB%2F0ZL6TghPFEdVE%2Bo5yU6Qqb7mZOWvd2bUdDemGv%2FT76TJ7ZgGBEfwSzyp3Zd4eWLE7EO%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b32c9f340731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8200,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, Unicode text, UTF-8 text, with very long lines (8146), with no line terminators","md5":"7824069f51fbc1d6dd540e3196bf93da","sha1":"7b3d21c514215e00f5059df3acf316c4ac018de0","sha256":"c111f1aa23c523922c669035d24bc9578cd2814e5d0533b4435474a76d1c3759","sha512":"2d6158a5c6284756d81401ae1f9980847d2a8b96d6f950084135f78daa1add256850ef45b6944a78fcb638c0f9389f3cb31348c1502488a8faa3b2ad1bcf7b2b","ssdeep":"96:jPLrVuD3Uf3nk38W3rpg8QD15ExHBeRW1QiGxSowR2ByGup7u2ng9NLr5:TLf3ksWbpg8mnsVQJxFBejgNZ","tlshash":"f9023f6ba1842b897717cc206794779a9228e132d5461ffae4527a29cfc37c207e234e","first_seen":"2025-10-03T18:28:47.404133Z","last_seen":"2025-12-28T08:10:38.535387Z","times_seen":9,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-7a8346b1.190aef3a.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:12.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-7a8346b1.190aef3a.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:12 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 21 Dec 2025 05:01:12 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-5ed\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mxlwsvtitAN0eXPH%2BY9Zhu3nQDLLMKEHvQML8ke5smAZ7OolVlhiZRi1No7kB%2FpuIGN64BNjoaZDgH5LUkZDZaxbCDwpwAa1h9fK\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3472aa70731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1517,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1517), with no line terminators","md5":"4c6513cc186abf5d84f91ba69ee12e73","sha1":"fcded4daec5a4cf3d5d3edcb9b12151876550c4b","sha256":"b80a83a2751edcfb1949d7b74ac3b5dbc49aebb7d17968b76baed69af0b232b1","sha512":"ae0c4d2e204b56db30baa2b3721d25ba77c5dd19f6323d0885e7b23f731755c21d573a71e7c5a922b8473f7352e8dbd4a4495411169cfe7fa255fa9b8d5891f0","ssdeep":"","tlshash":"e031734eb04776ad007a98a8911ff10622f7604435086551bf70e98627d548fb223ecf","first_seen":"2025-10-03T18:28:47.39328Z","last_seen":"2025-12-28T08:10:38.664413Z","times_seen":9,"resource_available":false,"data":null}},"time_used":788,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-a1c2aefe.ec176c6d.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:12.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-a1c2aefe.ec176c6d.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4825\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-12d9\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yITXPjbl0cwmsNi%2FOkAn4Pz3FPjDdnTlm8qi9QiFUl3J%2BZ0F3EKrz%2BkAoyKsE3Ut09i2cNhZsje%2Feji7BI9GV9dwXGqLGMMy1Myc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b3484acb0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16393,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (16387), with no line terminators","md5":"fa05996597f593376d8204bb90d3140f","sha1":"3005f00db8f28793eb780a202039aceee1803885","sha256":"9bc868da0fb9a9533177c948981ce895781143239b299fa669d1fbb526142679","sha512":"5f02d8b7cf6e4f9a9b87e27dbb97b985ecadaf2ba27713a1fbdf9a871ad7bb61c1575cb4c047ce4987fb071dfd34b0f06bcbe579fe12b6a0f54e8c2fe31f3b8b","ssdeep":"384:nIv8cy43lI905KQE71fzy43l7905KQ+4jgT4lI+xSkS5eAjLynfPsBzQGiIWI:nIv8cy43lIsKQE71fzy43l7sKQ+4jgTX","tlshash":"d072534ab4afe16adc2da845521d4d31f5712fe8a012d083b77d8cb096c0c7c6fae69d","first_seen":"2025-10-03T18:28:47.320338Z","last_seen":"2025-12-28T08:10:38.589117Z","times_seen":9,"resource_available":false,"data":null}},"time_used":867,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":866,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-6.51865288.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:02.702Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-6.51865288.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:02 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2146\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fcJWLSfq64N08cVgnaFL1eAP0bEUWRHk593%2BCD%2BDPvtLL3dGKGPG6%2FEq89UJzK7JcPfk%2FnOJoHjXECfgAz7HOoMGPyL%2FZpjC2Qvy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30beb9e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8518,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"51865288c8070b2a680707a071ff3df0","sha1":"629254ed2d6faa52ca885e4e88ee121861c6b6ac","sha256":"74f2a5d04fcc8ebaceff10b5e678081f1078bcecd92e60256e4867dfdbfe5cd0","sha512":"b07f39eedeb6e01a9607f3d9679ca436540f4049fe7758b229a66e35b67c118cbac53891486c5410014fc1ae4c984ec75b53b751988f6bfc6397dd496a9c5bf3","ssdeep":"192:pH0W+pn796EUlQI0RcD5sY0450qgmG7y36J9Dc+kDXbFd4W:rm796XQbR9Y0450ux36J9Dkjl","tlshash":"6b02aef78241d61611e020466b74640ba9ce679b00c76b5fe1122becfdff2aa445c897","first_seen":"2025-01-30T09:50:41.430206Z","last_seen":"2026-06-25T13:45:22.971162Z","times_seen":34,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/img/av-38.75cc11f8.png","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:03.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /img/av-38.75cc11f8.png HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:03 GMT\r\ncontent-type: image/png\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"68fdd7df-2360\"\r\nexpires: Mon, 19 Jan 2026 06:51:13 GMT\r\ncache-control: max-age=2592000\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: gzip\r\nage: 36589\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z6UTVdlogqRdtVW7sfSgUTKlLuzWyz%2B3In3jqT8iDN0vykL6mDjAlTDKi2Idwd3NYGSYAehbX2FIHPJrZbHXgBoK5HTKpqYJzz4J\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9b10b30e5be80731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9056,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 120 x 120, 8-bit colormap, non-interlaced","md5":"75cc11f8f0b25a661c4f01f39d0c867e","sha1":"2aee04758841067508a34448fc72f5e50893eb22","sha256":"ff508160fbace9672e59418d581b591e75046b08bb1322d841941b0acda8354d","sha512":"b63c94ec5bfd6e5e86aa31872bc6bf328910110dbc6d26edb8dc43422d23046aa56d7ae8aa9726d7223bdf191f2ac69dc58349213b96beca9bed46878ad7a7a2","ssdeep":"192:DsgBivwwj3YUe/dbmzLwwW9VVQCkntNxHPtuS+ATd/Z4GcCafTZYqC73x+7V:4giwpHtj9HQCW3peATRZ4zLfTqqg3x+R","tlshash":"8312b0434ffa506d8d99c32e0e2a14c2eb617b1d716a7896f25d57da2d050c0322d4ff","first_seen":"2025-02-02T04:03:34.266621Z","last_seen":"2026-07-14T16:42:41.677179Z","times_seen":51,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-2015118a.a506d689.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:10.997Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-2015118a.a506d689.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2282\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-8ea\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ztJqO27tLK6K6rcg2tAHGozombe8dmICeNLi9ufbcJDt64c70HJ0tXngm3frdZUfxnfpJgJ6Emgj1RiFOjk0UuZ4ZuO3wCeIZK4t\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33fb9580731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10745,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10660), with no line terminators","md5":"1cfb1f46154560b96c6c4f4868b2afae","sha1":"cdd2dbb6b9e8e31e8d5e74aae2b94ba61677351d","sha256":"631177cb1ea140c29bf9e7ffc0c5ce6eb08f4c0879cf5976ba83bf2d3e588058","sha512":"f1537152c13d2b14389f7e09a23008010424e76942160679a04d0e144612515e354353b9a39e9feb760425d7645b5421a8a92f502435e3a6d293681ca71cb082","ssdeep":"192:A7FLZfnCPCjCdJ7O0HgbRbvh2k0bi1YOOdVwNcfCX/cTlmPvv8P:A7FdQyexV0s","tlshash":"b622ce09d082e27efc276455710e1934f02a0fe0e121ec92b374ada027d6ebe5b5d6bd","first_seen":"2025-10-03T18:28:47.242218Z","last_seen":"2025-12-28T08:10:38.573255Z","times_seen":10,"resource_available":true,"data":null}},"time_used":825,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":825,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-38321c14.2361a265.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:11.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-38321c14.2361a265.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:11 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sun, 21 Dec 2025 05:01:11 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\ncontent-encoding: br\r\ncf-cache-status: REVALIDATED\r\netag: W/\"68fdd7df-4c8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BcueurXbEbfd1bTs90dSPhuAkwRzdM1z52ZPjT1R4aS2fZSt1TDKzBueHs5J7UEcMYfpN%2B4tkQpWXr3pVZ7J7j%2BzUCHkTi4Eaz6s\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b33fd9620731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1224,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1224), with no line terminators","md5":"3aab89f544aa97630732423c03e17bb8","sha1":"a0f110de0083901c9ac39a9372146cfe87b0b9ce","sha256":"d6c829923fa20bdf92687480e4c03a315d29c7064f348326d7ab650d81391f4c","sha512":"d51a2f6186b7c1e28c04d420485a5514802278fa0757affba6c85c869f73ff2acdee7a29b802d2e9661e3655ff6e4fb3fdd4e09300819ac3f3dc26e8045a31f2","ssdeep":"","tlshash":"d621354e7096f8a4e57b9445000f2724b02b0fd56225c096e3359ef4c69056d671fbac","first_seen":"2025-10-03T18:28:47.370955Z","last_seen":"2025-12-28T08:10:38.57876Z","times_seen":9,"resource_available":false,"data":null}},"time_used":834,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":833,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"2025rkt.vip/js/chunk-c64aad1a.ea3f8abc.js","fqdn":"2025rkt.vip","domain":"2025rkt.vip","tld":"vip"},"ip":{"addr":"172.67.143.150","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://2025rkt.vip/","date":"2025-12-20T17:01:13.064Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"2025rkt.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Nov 2025 07:41:39 GMT","end":"Tue, 03 Feb 2026 08:39:13 GMT"},"fingerprint":{"sha1":"F6:EC:5F:4F:3F:92:55:FD:96:85:D2:8C:39:44:29:92:5C:F2:A2:E8","sha256":"CC:85:D8:8C:58:02:FC:E8:76:DE:71:1D:85:65:57:13:37:A2:23:87:92:29:B8:D7:25:4D:8E:78:39:7A:FA:5E"}}},"request":{"raw":"GET /js/chunk-c64aad1a.ea3f8abc.js HTTP/1.1\r\nHost: 2025rkt.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://2025rkt.vip/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 20 Dec 2025 17:01:13 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1233\r\nlast-modified: Sun, 26 Oct 2025 08:12:15 GMT\r\nvary: Accept-Encoding\r\netag: \"68fdd7df-4d1\"\r\ncontent-encoding: gzip\r\nexpires: Sun, 21 Dec 2025 05:01:13 GMT\r\ncache-control: max-age=43200\r\nstrict-transport-security: max-age=31536000\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Dd4JqPNJ6zi%2BIxmH43Ptmmd2p2gcyBUrn71SQjPn%2BWeBmp%2BWGaln%2BJ8Cnq%2FZcyDhq0muGIkdrs%2BnGiOvWYlk%2F0qRYQbTMCEqD3r2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9b10b34c9b5e0731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5372,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5360), with no line terminators","md5":"37e75f6536002738109c19c1acea80ac","sha1":"3bf425ef471b274147c7dd499f0c9bdf1948842a","sha256":"b4c32e5ec3a59d9c1eab61fb9fc0af8687c5424f15747dea3e9634a0e400f93e","sha512":"0f73a261991134e99a96ab2b9f4e3f62d9bbd39afcf71fd238e7521ca1d0c9bfc05fc48ceb6505c1c76032a3c4d0fc80fec66e93ee4163041cbe653f5d10dc3a","ssdeep":"96:cpgFfblMfSfVlHf36lLnfQ9lLmfhlEvIcf3aqtEOOg865gxplR7qgY:Tg8/707NY","tlshash":"b4b1110b68d3941b09efe956102a25b5f0210a68792ed58fa3bdd87975c093d3f263cd","first_seen":"2025-12-19T22:21:50.098467Z","last_seen":"2025-12-28T08:10:38.579763Z","times_seen":7,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":272,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-12-20","alert":"Phishing Block","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"openphish","sensor_type":"Blocklist","title":"OpenPhish","description":"OpenPhish","scan_date":"2025-12-20","alert":"Phishing - Rakuten","trigger":"2025rkt.vip","verdict":"phishing","severity":"medium","comment":"Rakuten","link":"https://openphish.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-20","alert":"Sinkholed","trigger":"2025rkt.vip","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}