{"report_id":"91da8700-1934-4ea3-b17e-e2893aacd74e","version":0,"status":"done","tags":[],"date":"2026-09-19T08:31:10Z","url":{"schema":"http","addr":"rufusio.app/","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"172.67.208.124","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rufusio.app/","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"title":"Rufus Download: Free Bootable USB Creator for Windows","dom":{"size":158846,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9298)","md5":"b1b68805c3e2d9e10f9224ef4bfe2d07","sha1":"fd934e61bb82ffd38dd11727ba101c9e5db6a27f","sha256":"90a9ac06e759a3d114abdd98b966a4ef94a9b46c7c47d1370a56eb2e9a4e3a89","sha512":"5eff70aa8eb27abe6a5c8bdb5b64b334e260d92fd2137c4f74f70979a3f1ff9e80a91db80d47a1e4ac3d364127e9fb5c2702bea7ba097598679c93de21909216","ssdeep":"3072:PNbN9fOR7qR+8N3EIsRb8e7+Lt0kHmFs+pJ8+4xgVy1JKu:PNbN9wqRXpEIsRbWLPHmHf8+bVy1Jj","tlshash":"d4f39613d364627e0e9322c18e4b33aaf553504dcb53c92fb5ae42adfb25b55433b48a","dom_hash":"domhash0fea0449fa47b449aaa2210e512a21e7","first_seen":"2026-09-19T07:37:01.604959Z","last_seen":"2026-09-19T08:31:11.566792Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rufusio.app/","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"172.67.208.124","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T08:31:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"track.rivon.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rufusio.app","ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-07-05T12:53:30.705404Z","last_seen":"2026-09-19T07:37:02.968062Z","alert_count":0,"request_count":11,"received_data":216122,"sent_data":5434,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]},{"fqdn":"track.rivon.fit","ip":{"addr":"89.248.161.162","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-06-05","domain_rank":0,"first_seen":"2026-08-04T07:39:22.165535Z","last_seen":"2026-09-19T07:37:00.733014Z","alert_count":3,"request_count":3,"received_data":6483,"sent_data":1403,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rufusio.app/assets/js/main.js","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7916eaa5b9ae6e6fca7151764eeaf7ab","sha1":"ed135c3a80fa06d842fbd069e94a8a0a5d1a334d","sha256":"bd41cafc608f75db9e5d808a9baf4b194c2e9ac5a69a247ddab3ae7f04e29bba","sha512":"589b59f0e0e6458067a37d900b742ec6504d6731316eb6f98906ec4f79952f32934eb9df71f27a0a9b8cc115b19ad9d26585dd1ed64d6028b36eebf9d7cc2701","ssdeep":"","tlshash":"707153ab64a230b35533317ac69fa2c8b37a1097200ad8127c4cd1947fa0a75677ded9","size":3752,"data":"","first_seen":"2026-09-19T07:37:01.643745Z","last_seen":"2026-09-19T08:31:11.570956Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.rivon.fit/t.js","fqdn":"track.rivon.fit","domain":"rivon.fit","tld":"fit"},"ip":{"addr":"89.248.161.162","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"6d9c4d5d4af3d468023b67f54df5ed9d","sha1":"86eefec25ce505bc26d3be4a6870de4dce5669ea","sha256":"c0aeb1c6c9c3ee0c49ed9498b69b1634c8a55eebd7816e8bc7a9fec5e0cb29ea","sha512":"c304f72dfaf53efffeae2ad9127c179941f2c4a5ef7f9dffe88970955b355023620d70aeeb7a2fc87e29a12a87b6ac22c86e79677e5a544bde715953eeab7035","ssdeep":"96:izeSDFVBMeArX/o+qs2F0C7XoGyS+gVbQZd6isG+y/aQ1B4U:iCWVBfAr/o+nC0myS+gVbQZd6ifPHaU","tlshash":"81b1959fadd220b059a7f23a876ff505f63384031a45dd10799cd2805f90aa417beacc","size":5268,"data":"","first_seen":"2026-08-04T07:31:52.130915Z","last_seen":"2026-09-19T08:31:11.570224Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rufusio.app/assets/download-config.json","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:41.090Z","timestamp":1789806641090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/download-config.json HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:41 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VcCmlhWtSQi8%2FaC1b2zSyZf53n6fH1eXUslFbzb4YCO%2BNVHJkS%2B14Ul%2BxyZERlR2NGdhyjejrG%2FiPpvEfuVv8op4yiq7iahsxSgCpUrXBDHG9Fz6dRdqAZB7U9v4Fw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3d73ad2de8db51e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":869,"mime_type":"application/json","magic":"JSON text data","md5":"08efea5d3856a3d4e4800e8e7d3453c3","sha1":"3acb8f87b56a70e1c4ac0201357214a4bae79a70","sha256":"08e5e30014e0dd6fe1fc82ba21c6d1083e89403d0821653f1e0df98fd493c73f","sha512":"87c330c7d43dc512b958ec8331694d0b82bdb1466e545bb049e840cead06b9537641fcffb573210415c39649352571dd79ef6614127d7d770a22991fc1e26597","ssdeep":"","tlshash":"f0b012770077ec0b00f030c084a869c6614339270240b00163338608c11843b4f2748f","first_seen":"2026-09-19T07:37:01.61698Z","last_seen":"2026-09-19T08:31:11.568097Z","times_seen":2,"resource_available":true,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T08:30:40.295Z","timestamp":1789806640295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:40 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K3blUOYfwJOwLC1CyWS4OX4pz1WXy0%2FY8zrYbKqejufOVF4s%2BARQxnc75z9Nkas%2FT3uiWW7BHIfFRP7l9sposKdpFxQ2bp02n0CKUIFyBIXuwqUhOCte3ixuPO4nvw%3D%3D\"}]}\r\ncache-control: public, max-age=3600, must-revalidate\r\nexpires: Sat, 19 Sep 2026 09:30:40 GMT\r\nlast-modified: Tue, 11 Aug 2026 18:22:34 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d73ace3e35b51e-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":158779,"size_decoded":35609,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9295)","md5":"8152b7643c388cd3adb03e67909e10ca","sha1":"ebdaa9a9ff92d50e6ca328f7fa9d0562f16ef836","sha256":"053f79f6b6d62a6e279624a2ac5d318f3a782720ec9e60277ba8ce50088ddaa9","sha512":"20ee603b80ecd3861de7b71754ed20e1bb5c39c1ce1a2475512a251d1d92a552f9e8f63cea0580c552ca216a35e15ffaf279d23a1522c48e4578fbccc2c2aa53","ssdeep":"3072:VNbN9JOR7oV+8ulEIsRy8eCsotdkHmxs+pJh+4x6PK87a2:VNbN9yoVXAEIsRy7ocHmTfh+LPK87p","tlshash":"41f3a613d364627e0e9322c18e4b33aaf553504dcb53c92fb5ae42adfb25b55433b48a","first_seen":"2026-09-19T07:37:01.618098Z","last_seen":"2026-09-19T08:31:11.56928Z","times_seen":2,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":42,"connect":17,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.rivon.fit/t.js","fqdn":"track.rivon.fit","domain":"rivon.fit","tld":"fit"},"ip":{"addr":"89.248.161.162","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:40.859Z","timestamp":1789806640859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rivon.fit","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 18:32:57 GMT","end":"Sun, 01 Nov 2026 18:32:56 GMT"},"fingerprint":{"sha1":"61:37:E9:0B:74:7A:DA:9D:0B:B6:C4:77:80:D5:6B:CF:F3:6D:A2:E7","sha256":"18:9F:FF:F6:33:33:7F:26:6A:DD:23:8C:C7:6D:7A:D6:9B:11:96:EB:17:A6:D9:C6:D2:24:DF:5D:E7:DB:A0:87"}}},"request":{"raw":"GET /t.js HTTP/1.1\r\nHost: track.rivon.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 12 Aug 2026 10:52:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1946\r\ndate: Sat, 19 Sep 2026 08:30:40 GMT\r\nserver: LiteSpeed\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5268,"size_decoded":2451,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"6d9c4d5d4af3d468023b67f54df5ed9d","sha1":"86eefec25ce505bc26d3be4a6870de4dce5669ea","sha256":"c0aeb1c6c9c3ee0c49ed9498b69b1634c8a55eebd7816e8bc7a9fec5e0cb29ea","sha512":"c304f72dfaf53efffeae2ad9127c179941f2c4a5ef7f9dffe88970955b355023620d70aeeb7a2fc87e29a12a87b6ac22c86e79677e5a544bde715953eeab7035","ssdeep":"96:izeSDFVBMeArX/o+qs2F0C7XoGyS+gVbQZd6isG+y/aQ1B4U:iCWVBfAr/o+nC0myS+gVbQZd6ifPHaU","tlshash":"81b1959fadd220b059a7f23a876ff505f63384031a45dd10799cd2805f90aa417beacc","first_seen":"2026-08-04T07:31:52.130915Z","last_seen":"2026-09-19T08:31:11.570224Z","times_seen":16,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":19,"connect":24,"send":0,"wait":24,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"track.rivon.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/assets/js/main.js","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:40.867Z","timestamp":1789806640867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:40 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Sun, 19 Sep 2027 07:36:30 GMT\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3250\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qdRovhUpwS4qX3nSMt2P34%2B71bwv%2BABQerqwRmeiMXZRKG85ssusOPoObhqSDEd1IKakfq6DsV0vZQOn1x0SCoX0hkoj4CXhKU%2BYx8UxJ0s85wPzV8dDsnjp1dBjUg%3D%3D\"}]}\r\ncf-ray: a3d73ad16e6db51e-OSL\r\ncontent-length: 1307\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3752,"size_decoded":2246,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"7916eaa5b9ae6e6fca7151764eeaf7ab","sha1":"ed135c3a80fa06d842fbd069e94a8a0a5d1a334d","sha256":"bd41cafc608f75db9e5d808a9baf4b194c2e9ac5a69a247ddab3ae7f04e29bba","sha512":"589b59f0e0e6458067a37d900b742ec6504d6731316eb6f98906ec4f79952f32934eb9df71f27a0a9b8cc115b19ad9d26585dd1ed64d6028b36eebf9d7cc2701","ssdeep":"","tlshash":"707153ab64a230b35533317ac69fa2c8b37a1097200ad8127c4cd1947fa0a75677ded9","first_seen":"2026-09-19T07:37:01.643745Z","last_seen":"2026-09-19T08:31:11.570956Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/assets/rufus-guide-editorial-team-avatar.png","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:40.870Z","timestamp":1789806640870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/rufus-guide-editorial-team-avatar.png HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Sun, 19 Sep 2027 07:36:30 GMT\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3250\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOrpa6NroOfcHAw3kSExQgw2S0H3jql9xl6yYPIEDG0o8G%2F8y3GZ2DZ4nuo0hVyJdZ8Je0PieW%2Bp3b902lmf9wFwchAHf6z%2FWLhlkTOXjdQmk3IKX6gm4JBdsphANg%3D%3D\"}]}\r\ncf-ray: a3d73ad17e70b51e-OSL\r\ncontent-length: 2730\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2730,"size_decoded":3608,"mime_type":"image/png","magic":"PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced","md5":"b5dba49346a1c54fe2d240ca52090189","sha1":"31d208c956c448bf56e53920c697b64ef5b041cb","sha256":"b82a4c3952d38bd31e7c9e3bac282d5c2ee2baed858bcbad2f799f35b2a668e4","sha512":"9c91d8d92ee0b7e3e199056990c204ef4aa7bd81f7cab80b62539620e387742da71ec2cbf9e71ce63338b41d5af1277fa4a20c52038ca8167b658f73141968d9","ssdeep":"","tlshash":"5f512b528b43d917886878125fbfe7c44091cc3858eb93d5a695b838a8218b477648dd","first_seen":"2026-09-19T07:37:01.61197Z","last_seen":"2026-09-19T08:31:11.571827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/assets/icons/back.png","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:40.872Z","timestamp":1789806640872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/icons/back.png HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Sun, 19 Sep 2027 07:36:30 GMT\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3250\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NN4R10FaBWltb3EkC%2BU5pMdNvsbfdSmGWXRulRIZLrtMV3aROz8g8BVyo%2Bo5Uc9RbHxVJmbeVfFUT8ZvIY86rfSmjtveomsC%2FG%2BBLkcZByr2wUi9G%2BDq%2BYv72rz0sA%3D%3D\"}]}\r\ncf-ray: a3d73ad17e72b51e-OSL\r\ncontent-length: 216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":216,"size_decoded":1099,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"41877ac18d1f1eccbfa6a5416af0dbe1","sha1":"c7aa90cba25b149717ea9e6cf0a36406b3b9bc82","sha256":"0e87d09bfbc0abb8ba872cd0dec978715b63e4bde3721a65679f2a6fc61e9782","sha512":"68af9696845de7db6f2651acdb4210e11dc84f031533c216ca908d60485da943eeac87cf39b3fc95ea48c104b36cb4e97450639fd5c4d115c71c71a9b07e19ff","ssdeep":"","tlshash":"e9d023cb14d1303c4130636246321c4cc1071e4046bb067c1003c0ffb039a8081c42de","first_seen":"2026-09-19T07:37:01.645146Z","last_seen":"2026-09-19T08:31:11.572755Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"track.rivon.fit/e","fqdn":"track.rivon.fit","domain":"rivon.fit","tld":"fit"},"ip":{"addr":"89.248.161.162","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:41.100Z","timestamp":1789806641100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rivon.fit","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 18:32:57 GMT","end":"Sun, 01 Nov 2026 18:32:56 GMT"},"fingerprint":{"sha1":"61:37:E9:0B:74:7A:DA:9D:0B:B6:C4:77:80:D5:6B:CF:F3:6D:A2:E7","sha256":"18:9F:FF:F6:33:33:7F:26:6A:DD:23:8C:C7:6D:7A:D6:9B:11:96:EB:17:A6:D9:C6:D2:24:DF:5D:E7:DB:A0:87"}}},"request":{"raw":"POST /e HTTP/1.1\r\nHost: track.rivon.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/json\r\nReferer: https://rufusio.app/\r\nContent-Length: 272\r\nOrigin: https://rufusio.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":272,"data":"{\"t\":\"pageview\",\"u\":\"https://rufusio.app/\",\"p\":\"/\",\"q\":\"\",\"ti\":\"Rufus Download: Free Bootable USB Creator for Windows\",\"r\":\"\",\"sid\":\"fa7441cb-a5c1-4f26-88ca-6baa2611a26a\",\"ent\":1,\"seq\":1,\"sw\":1280,\"sh\":1024,\"vw\":1280,\"vh\":1024,\"lang\":\"en-US\",\"tz\":\"UTC\",\"ts\":1789806641095}"}},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-origin: https://rufusio.app\r\naccess-control-max-age: 86400\r\ncache-control: no-store\r\ndate: Sat, 19 Sep 2026 08:30:41 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":1000,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"track.rivon.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"track.rivon.fit/e","fqdn":"track.rivon.fit","domain":"rivon.fit","tld":"fit"},"ip":{"addr":"89.248.161.162","port":443,"asn":202425,"as":"IP Volume inc","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:41.102Z","timestamp":1789806641102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.rivon.fit","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 18:32:57 GMT","end":"Sun, 01 Nov 2026 18:32:56 GMT"},"fingerprint":{"sha1":"61:37:E9:0B:74:7A:DA:9D:0B:B6:C4:77:80:D5:6B:CF:F3:6D:A2:E7","sha256":"18:9F:FF:F6:33:33:7F:26:6A:DD:23:8C:C7:6D:7A:D6:9B:11:96:EB:17:A6:D9:C6:D2:24:DF:5D:E7:DB:A0:87"}}},"request":{"raw":"OPTIONS /e HTTP/1.1\r\nHost: track.rivon.fit\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://rufusio.app/\r\nOrigin: https://rufusio.app\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 \r\naccess-control-allow-headers: Content-Type\r\naccess-control-allow-methods: POST, OPTIONS\r\naccess-control-allow-origin: https://rufusio.app\r\naccess-control-max-age: 86400\r\ncache-control: no-store\r\ndate: Sat, 19 Sep 2026 08:30:41 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":444,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T16:41:48.415874Z","times_seen":18571319,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":35,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"track.rivon.fit","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/assets/css/style.css","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:40.857Z","timestamp":1789806640857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:40 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Sun, 19 Sep 2027 07:36:30 GMT\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3250\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0zAR1JhUA9jHES0eOfDnpLd8KUHA02b%2FbejY7ygzCC1kaFuw%2BhWprjOog%2FxoxKCcANZtqVMFIC2LqcYGA2DhrFvio93xKKWxkrghotekN1sAB7zViu%2FDHjhxjnPD7A%3D%3D\"}]}\r\ncf-ray: a3d73ad15e69b51e-OSL\r\ncontent-length: 3121\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":12689,"size_decoded":4048,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"0a057a5ec7d69dd545b512911b77955f","sha1":"729ec14e46df64df2013498e6070ed2589400126","sha256":"95c2b0d5c2c442955747e03fd89321faa411d548ec4388c3a875e8d27528d1fc","sha512":"94fbdbc936563cc8ff3fb8e2e57a3f8bdbbdad19113aea546e8fd6806544a968bef1c37b8abc0eb8904e84c526ab873763b69e10d517337e417ca18e032a0048","ssdeep":"192:VrvTHqYapPgbHVna/USTyok+8dM9hBjEd307WKT6r5Em7N:VrbK9pPIVa/aok+uEhBG3Ol+iSN","tlshash":"304263b5b290f176f92be5a5b78c67dc3140b912c86747e8fca3922488c36f31e51a4c","first_seen":"2026-09-19T07:37:01.609678Z","last_seen":"2026-09-19T08:31:11.574129Z","times_seen":2,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/assets/rufus-download-bootable-usb-tool-logo-48.png","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:40.869Z","timestamp":1789806640869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/rufus-download-bootable-usb-tool-logo-48.png HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Sun, 19 Sep 2027 07:36:30 GMT\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3250\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YePxBmwJ%2FQmc2AKdNw6g%2FcD3NnWDmrFa7dHImAj43S3OuFkGLEhe2clNfmtB0mVdbWfbW6fl%2B2eTigb4IZReesbVhfyRHvtRF5tN6yClxzyYmxrHZ4u5SpwYqnMgXQ%3D%3D\"}]}\r\ncf-ray: a3d73ad17e6eb51e-OSL\r\ncontent-length: 3307\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3307,"size_decoded":4185,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ab6c82f1610cf812f9bb87e60b2b4a1c","sha1":"009838906e0b63b232544cd8053ffb514fb6e4d6","sha256":"443b58ea2bf8abf9047ade540162ca788965de5509829d7a1d88603eb000c5bf","sha512":"873ae5a9b20993499106fbdf03a11b827b5426fa809c209d735a93cc06bc6bdffec24110924277fe50312abc7fe9d9bfffc57eb9622ececbf62c62a0c8b61855","ssdeep":"","tlshash":"d2614ce72e8d99cede04272dc2f993d70715b061c6bc10966616fb3e0c940225ac4e37","first_seen":"2026-09-19T07:37:01.610837Z","last_seen":"2026-09-19T08:31:11.575258Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/assets/icons/blank.png","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:40.871Z","timestamp":1789806640871,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/icons/blank.png HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Sun, 19 Sep 2027 07:36:30 GMT\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3250\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZxggqcqC9NkbSreKooYYSS9YK%2FvD%2Fs6M%2FB1wZobMt7KK18OzDdBHAFzjFKk03%2FebI2uWeX6TE7Kv%2F1QS5ioTyZBs6sE92VpytWArsUiIDOsQIIjpU3WNcFyXRt6Xtg%3D%3D\"}]}\r\ncf-ray: a3d73ad17e71b51e-OSL\r\ncontent-length: 119\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119,"size_decoded":1000,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"52d2b2bf0eab907ac5041ea67ed0859d","sha1":"9a31017108e30ab30f0a81b4327ca5da00ba65c8","sha256":"37106133c5d9c388e697a454fabffbdb9477293118756ad315aa0ea53e4079b5","sha512":"304fd3203e649d1abb98f0ee2136ad0b9a614cafd2b08b01ae2f3e1aa7a741862493092fda885c5b1f2117672df40eae72d927ef6571605bd230ea5c0d3c2e10","ssdeep":"","tlshash":"7db092a261139e7d9f904227a22300b8acaa356d40b742a8a384a66125b9505faa9381","first_seen":"2026-09-19T07:37:01.612988Z","last_seen":"2026-09-19T08:31:11.576124Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/assets/icons/rufus.png","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:40.873Z","timestamp":1789806640873,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/icons/rufus.png HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:40 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Sun, 19 Sep 2027 07:36:30 GMT\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3250\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AKY8G9lUCPR3oG9n9w3BIzuRfLaJuHRME6rVP39ct0Wf1pztLXcpXpctvyIDrCVcoqKd0hO6NG3KayYlHa9TvzO20XAGtXadzul066ZVxcdS5M8W0ukV1cEFfuvrSQ%3D%3D\"}]}\r\ncf-ray: a3d73ad17e73b51e-OSL\r\ncontent-length: 221\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":1092,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"19e7a057922fc07254dbd474f931455d","sha1":"5ed73ccf9e34abfcfccd97961cba3f397d99b831","sha256":"068cd8847947c9a381934309a299036004125b424b17180fbb12965a3019a05c","sha512":"8976ba30cbc26b157d247c353a7c39571f0748c1bafa6c3feb11437cfae3db1583260f9ea3dc73e9f418b8247e9e8678c240f79de0b75bd016a7ac70c74d00a0","ssdeep":"","tlshash":"55d0239f94480560c5d54e3616dc0474fff59c5c8db5510565d44ca7773cc0db54c4af","first_seen":"2026-09-19T07:37:01.61419Z","last_seen":"2026-09-19T08:31:11.576899Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/assets/apple-touch-icon.png","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:41.087Z","timestamp":1789806641087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/apple-touch-icon.png HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:41 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Sun, 19 Sep 2027 07:36:30 GMT\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3250\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vs1l%2FY71L%2BH0VQVChBigjPG1Y0lxcXgvSHueJQWH%2BI74mUjTtJvEmFYyrmyLvtCE%2Fff5K8v%2Br44Uh%2F177bgyCIxx9LJ%2FdPbgvn6fHGL9Ytv%2B6czQrqzBXA0hvRKLBg%3D%3D\"}]}\r\ncf-ray: a3d73ad38e9ab51e-OSL\r\ncontent-length: 24176\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24176,"size_decoded":25068,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"31d8c34a542add7f6ac7168eff2bc5aa","sha1":"aca3afa2baba632597b50c5c035ec78d101300a0","sha256":"825fc288eec1da7013022c2e6ca7114198598f98f3dc0aaad14ddf84894095cd","sha512":"2fba801c9bd378c2df862c7315c1d045f79e436f84b5ea62811182238e158202b6d8aa2452b60839f839ece68434a3ce08242f27a792cb336f9b389f263a02fc","ssdeep":"384:3nBWkRK+SX3pbKi2NfgJ82xjnGacP3YWOWEVujznEKYvCNDvh/Nw3CcznOs+X0hN:30UKx32NaBnGXIWhguHEKYcqlOs6Duc6","tlshash":"33b2d056ad94ceac845bdd7e0425ce31099c6925ac8ee6fcbc525c9267b6c8f01b1323","first_seen":"2026-09-19T07:37:01.615677Z","last_seen":"2026-09-19T08:31:11.577853Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rufusio.app/assets/favicon.svg","fqdn":"rufusio.app","domain":"rufusio.app","tld":"app"},"ip":{"addr":"104.21.93.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rufusio.app/","date":"2026-09-19T08:30:41.088Z","timestamp":1789806641088,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rufusio.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Aug 2026 16:08:30 GMT","end":"Sat, 28 Nov 2026 17:08:15 GMT"},"fingerprint":{"sha1":"C4:23:92:3B:83:D5:8D:9F:08:5E:FE:77:B8:A1:B6:0F:9A:E4:D9:5D","sha256":"3B:A1:20:12:82:16:36:CB:BF:1A:B1:5A:C3:3A:C2:8C:84:2C:F8:78:0B:F5:4B:DB:17:40:93:38:06:E3:0D:31"}}},"request":{"raw":"GET /assets/favicon.svg HTTP/1.1\r\nHost: rufusio.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://rufusio.app/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 19 Sep 2026 08:30:41 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\ncache-control: public, max-age=31536000, immutable\r\nexpires: Sun, 19 Sep 2027 07:36:30 GMT\r\nlast-modified: Fri, 17 Jul 2026 13:12:13 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 3250\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVCyXJM5GUHW%2FzAFcCdbT1Wls%2FIuPajQ0v26Z3w27BDDYWA8sGn3nHtQ%2B7MHOLCo6Su1%2F6AkvI7YfxvcR5EICxkrlwp%2FfbGMwdT%2B26AobWbEC0wW6fDPg%2FCDq%2F%2BsUw%3D%3D\"}]}\r\ncf-ray: a3d73ad38e9bb51e-OSL\r\ncontent-length: 190\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":295,"size_decoded":1131,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6366de2473b85b46704d39c62632fb32","sha1":"68a280243872bb0be8e11540180f7256ea68fde2","sha256":"6050b26757f48cbac2e84d1427b230a667cff8d30698220c10af5c5322bae7e1","sha512":"27f082da9a1aeb402184adf82616e88e6a75dc11a3da9efff5b60e19a1ae65e57624cfbfbac8bab15505bc4dcb631c4e93e689924fd52b955f0bee25af265a7c","ssdeep":"","tlshash":"c4e07d2612188c2c66108729e968319e11373083974c5048f480313492143efec3a6ac","first_seen":"2026-09-19T07:37:01.607421Z","last_seen":"2026-09-19T08:31:11.578594Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
