{"report_id":"e3c7be43-ca79-4f9e-87de-eeb16e086ff0","version":6,"status":"done","tags":[],"date":"2026-03-15T12:54:28Z","url":{"schema":"http","addr":"rustoria.net","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"104.21.39.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rustoria.net/","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"title":"Rustoria - Официальный Сайт Серверов | Rustoria™","dom":{"size":104301,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (650)","md5":"b63f3353a2a320666d1f095223d7e659","sha1":"bdc22503c59ff9bb8c80d7d2a623d58979ca1e0b","sha256":"9f803e1d6c245eeb1fe4297d5c4e39f8c1678e8d21e5a4a200a24676fe3331b2","sha512":"ddabdf3f6eda7a3ea3eb0c735a3fac76788c96af93f3dc795a2b43b2892dd171c7bef6f870243cd026d73cf307c238dc600262775b79452057a2d402086468b8","ssdeep":"3072:CM3hTfZkI1+VIMXzQkbKJenf4JiQ/B3B5WvEyw30Y/mdn5gSOvZEHxhP/uwlwg8W:CMFaA4zQkbKJenf4JiCB3B5WvEyw30Y6","tlshash":"f2a3742070e50b7a610742797b90d7196a90b6a3db676d1473ff1aa36fc2cf84207b9c","dom_hash":"domhasha7fbf36ca366dcbbc80d537b7c035a31","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"rustoria.net","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"104.21.39.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-19T12:54:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rustoria.net","ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-07-11","domain_rank":0,"first_seen":"2021-10-09T04:18:30Z","last_seen":"2026-01-08T22:39:13.97553Z","alert_count":48,"request_count":24,"received_data":520120,"sent_data":10510,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-03-08T22:29:46.591494Z","alert_count":0,"request_count":3,"received_data":221162,"sent_data":1566,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-08T22:15:01.701196Z","alert_count":0,"request_count":4,"received_data":137235,"sent_data":2171,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-08T22:19:32.591288Z","alert_count":0,"request_count":1,"received_data":16166,"sent_data":562,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rustoria.net/js/modal.js","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"773201d8ed6a07d7f07fcc1a99e1b3df","sha1":"cbbe957f0f14498f8c8245fb7e3ef9f0fea342b7","sha256":"c5184863afc06cea40cb5c7a87ed2f800489e0a7277225da29b40ab8a4d56cc4","sha512":"58919c8b0cec1eec9248c263e09eff9637ca01b23b833362a9f5ff8c208b3e44a07568377dfd29f3fa8ba69cf823f01240f4aa47279bd70620e109f154779a72","ssdeep":"","tlshash":"d2014ce99a1d363a46fe6fb3b5ea575cbe350053140041057daccec54f70c900923d9e","size":726,"data":"","first_seen":"2026-01-08T22:39:17.427547Z","last_seen":"2026-03-19T12:49:06.514161Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/js/script.js","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"640cb0ec4c0b44c1d86d6ecb72cccd80","sha1":"9d86a13705a4920df50e9b1b184a52f42a5ba7b9","sha256":"690229717cfb5087aec655a6b2dd4bb2c858f50b01544b2298ffce5802e8ab36","sha512":"651710727c3002bf668655fb76c1449a57d7babd92dc93697209104d88f36dcf59a8d1837e434d74ba6a6f4e1bd7cfed94748b52e6082f7a432cef78029b5284","ssdeep":"","tlshash":"af1159d9e4301b31052aa7279993767df8aa00bb4548d428b9ac86c05fb0f6770e3fcc","size":874,"data":"","first_seen":"2026-01-08T22:39:17.403942Z","last_seen":"2026-03-15T13:31:33.905387Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rustoria.net/favicons/apple-touch-icon.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:07.028Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /favicons/apple-touch-icon.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:07 GMT\r\ncontent-type: image/png\r\ncontent-length: 25563\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=6,i=?0\r\netag: \"6920daa3-63db\"\r\nexpires: Sun, 15 Mar 2026 12:59:43 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 86063\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7afTrBrk7f5EF2JZ4zL885adbxy8XA7A3KKJPEapJ8hGw%2Fscc1nhbRFu9BSm8HYnLZwQEDXPBHVKA5vzz5NCHqThgJxr8X7Xmby3uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa35febb9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25563,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"542f32cd7657ef4baf1ca9e4fc7f28df","sha1":"6d06bc0819f4e16ba6a8b0ba36515369a6d443c6","sha256":"606a80369aadddec7adbd193cfafbfd499d786cdb47e68f645596e14ab69e0e1","sha512":"14233262f8cf92003a0e6c69725a7eca1dab92380ac6bb6b4c72d7d69640448d2bbf87257821778b4ab449001a8e97ce83031e30a18571c69092feefb26a7ffb","ssdeep":"384:20911R4ZGNLKzX5csyrtp5S2pDaIESZixA3hLMUVkMKrWjaYct57tio4cGOQiiWu:209Tq2LKzP85SHKZxT6ko4giilu","tlshash":"adb2e1468f80af54a1059074a2543e62ce8d2a3939dcc6684ff3d8d2f50e38993f9ee4","first_seen":"2026-01-08T22:39:17.42278Z","last_seen":"2026-03-19T12:49:06.537382Z","times_seen":5,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-15T12:54:06.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ENKuyqSf6MTU4RJ5xjavmifgbnkUg%2BqBhpHpyYrg16u28z%2FRCxbZXSc0YQkPORyQUmmdGF6GSimYVm%2FsgC%2BfRk5RneNjnTErN8CTug%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dcbaa312cb2d42a-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114147,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (648)","md5":"6f96df1bee3dcd1a810b3046649ff328","sha1":"d88c69cbba8ba9b070e02a05f588f5272bbe456f","sha256":"f8f9fcc5de76bf78d9795dd7079369e775a62b8444bf733c0ddf8ab1a4ebe6ee","sha512":"23d6385816433234c5fde0eaef16122f1b511f91d5247b7dacfa59740a90e78a12797989baec63cbd72b37bf4035529a619d0f2c647d41185c56ef072e783a48","ssdeep":"3072:QM3pTQfEqYicz9eTQBnKUQIn4amQ/yrBa8vxUwYsYg8dYtgXGvK+HClP/HwuwVKn:QM+8fITQBnKUQIn4amCyrBa8vxUwYsYP","tlshash":"e4b3b76070f10a7a65078279bb90d7196a90b6a3d7667c1873ff19a36fc2cf84247b4c","first_seen":"2026-01-08T22:39:17.412933Z","last_seen":"2026-03-15T13:31:33.920732Z","times_seen":3,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":49,"dns":11,"connect":9,"send":0,"wait":101,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.1/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10491\r\ncf-ray: 9dcbaa333b2a4453-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5f7b5b5f-e7d0\"\r\nlast-modified: Mon, 05 Oct 2020 17:43:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 936225\r\nexpires: Fri, 05 Mar 2027 12:54:06 GMT\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qLS8%2FlqrsTCUoB80i12vKEq%2B%2BZmrdx8SAQnUfNWbnr9UfLRmnXlF%2FcxiwQlfQ420mFH508K1v0pPX%2F%2F10LW2f6cBq8E%2F%2B%2FL%2FGSm6cbbKoa9HCl1Asrzq2dzfqTSLrJKNnfgUbzKz\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59344,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (59158)","md5":"b227b1617a1763c8bc056772f05482b4","sha1":"c508528feb9fd540454f838653cd4863b290df2e","sha256":"af1e6edc875a382b338bb25bd7c5c3f474a7f1b36212002a5896dd06f2186325","sha512":"fb8cc22bd93ea8d1544795fe70a2fd10847e64e86d225a0d97d188292e7b57533236c62961c52b51e41cf6f35fcec59f576f0868b2f78bde8ff6c74dc9e46cb0","ssdeep":"768:OEh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:OE0PxXE4YXJgndFTfy9lt5B","tlshash":"c743fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-06-16T15:10:04.182746Z","times_seen":11356,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":32,"dns":0,"connect":9,"send":0,"wait":20,"receive":1,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/dosis/v34/HhyaU5sn9vOmLzloC_U.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rustoria.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30744\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:29:07 GMT\r\nexpires: Fri, 12 Mar 2027 15:29:07 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 17:03:39 GMT\r\ncontent-type: font/woff2\r\nage: 249899\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30744,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30744, version 1.0","md5":"87bc734caa77a6aa60700bab80b18f44","sha1":"3d65ee80d4a6cf3a4d435dc8327dc97ea8be3511","sha256":"1db3f2316b3766392a12f4a4e88221e3ce9e70b170fa4390994c47a9db10352e","sha512":"7d4a224248447a3f5cc12e592c393f2a69dc5bb8c56c3f8ecdb0bbe4a334ce708915339503afdebf6d4550de1df7a6a64feca7bc2b31030cb6ea030a67c34bd2","ssdeep":"768:/8sHNQDk7eXaE/AFBdtU5WxXCF9CvyMGHNfkqSrM4D0AvO0l:nHNI7XqrtU5OXCmwHqqSrjDvBl","tlshash":"a8d2f130c98b6d597b971c7db823156ecdbeb40d5fa78ee01c062e38a0afd150712a38","first_seen":"2025-06-03T03:08:20.355522Z","last_seen":"2026-06-16T13:19:26.04694Z","times_seen":3432,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":159,"dns":2,"connect":30,"send":0,"wait":12,"receive":4,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/vanillaus.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.904Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/vanillaus.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 13126\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-3346\"\r\nexpires: Sun, 15 Mar 2026 15:21:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77569\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X8lpewD%2FKoUHMWw883TMX3DaGsGptxu3AR8roPyKOgsOzGBlBHD%2FwetP1TdK4ryiomWP15gbVW4ZdTusUmCQGOrAqcxqjRfNfC5%2FTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa351e7b9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13126,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"e52d28800c96fa919f9eddee0b05e117","sha1":"9f3f9a032a2134983265720084802e6dafeae791","sha256":"368d5d78e1ede36998d39f3294f19ecc6f5dbba30a20086dfb122b2b1a875d1d","sha512":"e8e97a3e004517beb0d9fec8ac1833542fe4c6ec997750a9f0ed3d221b4cfa76876a898bceeeb4ae51012a86afae50ccc1e398783da6c5a96f44ca66a2775d08","ssdeep":"384:5VrSBPJ21OEPpsQr5hWj4iQi79OLpeGuWqWNbOz:fEBCOspbK4iQi79wSWqWN6z","tlshash":"df42c0944fa50460fa0e7319f115a2e9f0fb5db3ac1994b1487084ef0fe8f5182b52f9","first_seen":"2026-01-08T22:39:17.44158Z","last_seen":"2026-03-19T12:49:06.536471Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/2x_vanilla_eu_main.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.906Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/2x_vanilla_eu_main.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 10970\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-2ada\"\r\nexpires: Sun, 15 Mar 2026 16:09:36 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 74670\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iYSvjmH7X4g9zL%2FsuRpx9iMcgePQplQ8Qn4aanzuBhtBqvKUwkDLouNPyjGqaruBgj2L%2F2BxAPq0zobUAoHIrZgs%2B3ioAyt%2FDWTuQg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa351e7d9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10970,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"7b68f373ea09116b62868077a0efa877","sha1":"d32d22d2f4021303521392fb68d0188fe10bdf58","sha256":"98e38b0c533e978367d2afcd98732f74ac8ae06dec01c9450a544f409c8ad88e","sha512":"b27f36c998f1db326c2e0fee1ba604745f1ea43345f49cf9c3359b3afc1f0c8d0a09e23bdb70af5efd3defefc1fabc3bd649678ebfe53f8f82312d8e0406501b","ssdeep":"192:tSw8oZ9kYi/SbvqFerLtsNLjFkSbtkk9xe9vQJLPul2k7as6lJ9Vsgyo500Kv:swN9kNazIELmjCSBkkAoJClDdLI00Kv","tlshash":"a532bed520d484c2b2e7f4f6f4892f068bca20d896bf976a74686187157eec63e23351","first_seen":"2026-01-08T22:39:17.392715Z","last_seen":"2026-03-19T12:49:06.546318Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/vanillaeu.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.907Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/vanillaeu.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 12765\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-31dd\"\r\nexpires: Sun, 15 Mar 2026 16:01:41 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 75144\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8V8QCwEPYr26HH%2Fqf%2BuYzswxDWTKyRghEC7pUpRQTnzJ3wyjV5ZnqZSPa4U9QdmGiJO4BbL7L7rSjYBH7ypzQNtj%2FjSG66NBTFF%2FNw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa351e7e9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12765,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"2329078b2b83d573bafe762ff1eaddef","sha1":"c3175e2b22aa1ca75e431472deaeef2511426096","sha256":"2c63ce803d2e92bc94217839e65e3b119cd2008e3b427b47751ca795efa6ef54","sha512":"ecc2c3cb5b79da2c39ef67495836ad3d0daff11042554b125d27194c28fe0c0e6509f5df0e275e0e816fe81fc8123f5057a16ff314e65f9f07a4e4cf9a471b7c","ssdeep":"384:aNJuI2Um0elVyRBRg5sz0TEJW8qqkZ/QVTufQH7Dd:AAUHeT+g5W0TxZObDd","tlshash":"d042bfafe1765d38b8227a62668c2fff2f93649c37924d2d96133da2015117cc5ea40e","first_seen":"2026-01-08T22:39:17.42512Z","last_seen":"2026-03-19T12:49:06.531292Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-brands-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.1/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rustoria.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 78460\r\ncf-ray: 9dcbaa34f99b75a1-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5f7b5b5f-1327c\"\r\nlast-modified: Mon, 05 Oct 2020 17:43:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 936493\r\nexpires: Fri, 05 Mar 2027 12:54:06 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=HCLb18NTObH0568T9FH9ioAoaLFrd1NeXOchFBO4Zw0vNUW9RjUV8zkXl7Izfw6ZjU3TPG1rTY6FdogT5qyR2hevWh81NgtBgCcTob1reEbVbXft5vAHJmBoDJK5O%2BYmtexzuyjc\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78460,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 78460, version 331.-31392","md5":"f075c50f89795e4cdb4d45b51f1a6800","sha1":"f726c4275bb494a045fde059175f072de06c01df","sha256":"71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba","sha512":"5f4f35e9acdb825a245e678a834b2bc6d5c302693fffc3497717024c2d8385ffdeb233d4d7f368f1356a2adfcaab0a89157edbcca45b9f310f1cdd7f44cac955","ssdeep":"1536:uZWBokruo7jgeq3Yv8E9MjaR3yOWaaqPbkJSmMlckzeSUSalX:sWBbuo/vqov8yTS/qPmMekzyx","tlshash":"7b73124d6fe2a9eaa9bc3f332fb38412ac819d654bf2c1b3055e12d51c8177da8d4135","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-06-17T07:13:26.874239Z","times_seen":20237,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":19,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/logo.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/logo.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 1069\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-42d\"\r\nexpires: Sun, 15 Mar 2026 15:19:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SvnhCCid13qCfagurNfT6LQry6wchk%2FLM1g1LM9vr1qzIg9EYyxyW61kwp%2F84QmNF3Z1a3hvhYn6fqsyjGAtcazOumcqkqTIqPS0Sw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa34fe6b9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1069,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 128 x 28, 8-bit colormap, non-interlaced","md5":"65b3f733999ce73155d10a92c7cf4fdb","sha1":"1577f61193aeef68fe0ce8a55dd1c7fe287f9c8b","sha256":"808c16c51f629e2a6eb5eb04d4f5605957d7cbef722f5baf9c60d810de3c567b","sha512":"b95085f30ecf2426bbffbb0f74287a3cc8e3f6e4257d94e26f7a1672e1f45cbbf7429ca2dd999c94cbc4dc5b174b4c17743a55444782379fa5d9e6d52b36a58b","ssdeep":"","tlshash":"8d11b588a1506c75e13244783c5a0d7406b73902fd3089a73013c4c8337a0c486a83f3","first_seen":"2026-01-08T22:39:17.407984Z","last_seen":"2026-03-19T12:49:06.526342Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/nobps_eu.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/nobps_eu.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 13492\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-34b4\"\r\nexpires: Sun, 15 Mar 2026 15:19:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AueLqtTQKdwEJe1%2B9gZ7y%2FzLW15lZVccG%2B1PO9fbsaZvRKbHmtCg%2BKDrb7sFJt%2B85o5XM2E0SpW7X7Gbtb%2BEnivCpj1pz6rhLM7oVg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa350e709a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"d6b831f95bc96b11535a8e38b73be9ec","sha1":"eb588f488f38766a828a07847909959508c5a47b","sha256":"7f381e6be0b16db6e35ad16023666f3776df5c732c6c8bf7e3237160567da52d","sha512":"2f0f832a181fb06097d04877c3aa32e6711f264ebbc82d5e1a417a9a84c2a1208609ef7b19482a342509859ec914959a24834241d2993e3496a0a3b7356bfcd4","ssdeep":"384:MCqjgoRYFQaoNRm3IxBamRwgXKH5UUy1kfYNK:9MNRFvwgyqKYNK","tlshash":"2f52c063e27b49468fd7dcb710a8950dfacdc470695ce46663e0ce63412ab78e08c7a5","first_seen":"2026-01-08T22:39:17.433242Z","last_seen":"2026-03-19T12:49:06.527678Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/rtgeu.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/rtgeu.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 6113\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-17e1\"\r\nexpires: Sun, 15 Mar 2026 15:19:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4XGhG2sS381nWEI%2FnZ4j6v93tVCH4IPtlNUIEStyWH1%2BWMgV%2BFY5Z8PMDX2DHlOOKnWnDO1DcAnlg31aE7ZutrBVlbsEyXA6T92zQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa350e749a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6113,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"5afb225e2a1f85e96fe24ba68768222d","sha1":"5845a279e889e3484443b3ac4f7f4ae3923af152","sha256":"b7bcc263c6dedf6301160a0b2d5e7976e22f48cf6ebcbe559399321c1611130d","sha512":"bd9c04fea2e1754a64b09dbb3516fb72cf10060102a53fa152769b05325d84996f7c220c63de51c89bb9ed3165f039962aaf8f8bea6d779a70c223c1d5e0ae69","ssdeep":"96:9SP5otAJppsZcEjElAyXdiVRVmg0pmpDyVhf5qltDlA0DT6WJ7udV19G5SjolLYM:9SP2G2ZcYMA4iXr0pm0TsbDXDjwV19e3","tlshash":"81c1aed650d9d46dac7e2a24a304c882feaa71ceaa27787d6d644c14337bce314f4792","first_seen":"2026-01-08T22:39:17.446924Z","last_seen":"2026-03-19T12:49:06.523415Z","times_seen":5,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/favicons/favicon.svg","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:07.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /favicons/favicon.svg HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:07 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\nvary: accept-encoding\r\npriority: u=6,i=?0\r\netag: \"6920daa3-91d2\"\r\nexpires: Sun, 15 Mar 2026 18:23:59 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 66607\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ps2HUsmIQzJSFv5IoaEMCmWgOHe7r4pi7rAEooXDlDaRKJIa9XM%2FIrsQQOa186SZ%2FuTkHob07O6JZvDEknP32TQCzFcNaPDYxuqXtA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa35febc9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37330,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b81d704604cb1f0eb0129c4d66ce0ec5","sha1":"785bf7d70fd5351e82b040a9e6c3bf10132a7034","sha256":"b159b2a73db1ad23bd8182db1c82c07e94cf84c7df828c5d5399423efb83c2da","sha512":"61135773af1f380611abbd4dbe2e769734d9ba2b73779665a72758768b4a115d2a6ad553c839bedad8eb980d8ebc934b7f163f532e0200adab058944c77d2acf","ssdeep":"768:0Rg3Zq62pNEFFhkOBzflovAxEhd9zRAviTrAu01pGyInaDOWy8JGRvYY:sg3M9pMDnflmAO9zRA6Qu03GZaQ8WAY","tlshash":"50f2f106a7db3085ff2ee61a55b4198fa3fe0461c06ce06ab741181df51e05afee1a9c","first_seen":"2026-01-08T22:39:17.453593Z","last_seen":"2026-03-19T12:49:06.533405Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/css/modal.css","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /css/modal.css HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6920daa3-b21\"\r\nexpires: Sun, 15 Mar 2026 15:19:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buoJWMZyGdNDy1XApWWtlxF34%2BUNLKIoyE76lxpAdtvJRPVLAhGxEuG0NwdyPDl%2BLDQnAKVl0bYfTA2nXnnOY%2BNNkv9oN4oCCWmDTw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa32cdbe9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2849,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"6db69914fd6e1e7b147248c8460881e7","sha1":"78ad7cfc1e73ead41c11e5e17e2b4f3ff5f34905","sha256":"3e2cf1f4c66a7baf1f0a00ab79820bd9e9df5787620e6b95ac9f2831a314266f","sha512":"4d577fb894f4765ceb789985659e9e9d1e879bed31af03d2872d51f7e192ee646ac68dedb109f475edb50e5f4540e1794ec5f21cd4f84719d5077dfc2d1578aa","ssdeep":"","tlshash":"5c51d018de191041b237daa977f30b29d7989463ce02446d77d8638a4ffa1acc2a0fdd","first_seen":"2026-01-08T22:39:17.398807Z","last_seen":"2026-03-19T12:49:06.516572Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/quicksand/v37/6xKtdSZaM9iE8KbpRA_hK1QN.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rustoria.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28244\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:55 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 27 Aug 2025 19:19:09 GMT\r\ncontent-type: font/woff2\r\nage: 249911\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28244, version 1.0","md5":"9d503278216c2225184a236c64e0924b","sha1":"0c24c621374506ce70403a7473b47acd86bbf919","sha256":"2add7d60b1cd2ab84c9967e23d5ec08eb3fc9635c46855b17d59404dec6b410e","sha512":"fa1aca723eb40b6026aa1d21b36ce2573e4164516c9a0b55ff830a434c3954833a06b1df76236b1d682107df1bd3d263ed19cba854c1a6795566a7091749696d","ssdeep":"768:/6zZ6KBVHUlHvwCa0z1sCvODsIBMTKmJ3GG5x4:yzdKvwtszvdNjz4","tlshash":"3cc2e083d14afb33d0afb77adc52d022e9756bccec7e587a97a900398895c1b0644285","first_seen":"2025-09-02T18:36:17.739185Z","last_seen":"2026-06-17T07:17:39.729154Z","times_seen":11449,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":99,"dns":1,"connect":9,"send":0,"wait":9,"receive":8,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rustoria.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48320\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 15 Mar 2026 05:34:55 GMT\r\nexpires: Mon, 15 Mar 2027 05:34:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 26352\r\nlast-modified: Mon, 15 Sep 2025 16:30:41 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48320,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48320, version 1.0","md5":"dcf31ebe107435bd68e0164d59e19b87","sha1":"b68160c9333af833fe483928b3ef7128c07a56a0","sha256":"d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0","sha512":"130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08","ssdeep":"768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE","tlshash":"1623f218f29471f7edecd4d500a18c72baa528d442f116ed07b8d53ca36ca817a729fb","first_seen":"2025-09-17T00:07:53.723302Z","last_seen":"2026-06-17T07:30:40.480071Z","times_seen":287200,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":179,"dns":3,"connect":30,"send":0,"wait":9,"receive":5,"ssl":141},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.251.142.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:00 GMT","end":"Mon, 27 Apr 2026 08:37:59 GMT"},"fingerprint":{"sha1":"43:A0:56:D7:CE:45:C9:96:6F:34:12:13:53:CC:34:DD:63:FB:5D:20","sha256":"A4:AF:37:76:AF:D3:DB:1B:79:93:8F:E9:D4:21:4B:BA:43:54:3D:F9:56:DC:18:E9:5C:CA:1A:7C:B2:C7:DF:9B"}}},"request":{"raw":"GET /s/opensans/v44/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rustoria.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 26588\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 12 Mar 2026 15:28:54 GMT\r\nexpires: Fri, 12 Mar 2027 15:28:54 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:30:52 GMT\r\ncontent-type: font/woff2\r\nage: 249912\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":26588,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26588, version 1.0","md5":"0b3ff9e42ed8f3d4aa72ecaf5f58712c","sha1":"5d5fa3b85a1745e867e44a8c6dd3877e651491fd","sha256":"2809606237a64bd9c1461e727f369ddfd77a350e4900fffe64e8bfe16a2b3454","sha512":"d52db55e34a037109cbce299aa0bf2771075c5c6374d4f07c694eba8baa3f754ba44c61bc606843b35ce5185b868639bea806a58b7c03eb334a3e3c9ce0de746","ssdeep":"768:BCn6FX/v/3NEpCoX1GmFP2LbalbkV0Fu3m6JQ:B1H/NEtX1GA3G0I3FJQ","tlshash":"9bc2e171e3572970f96da8b119f6600146c07204f71e8376e4466b29b7b3dbc7dae820","first_seen":"2025-05-29T18:22:03.145431Z","last_seen":"2026-06-16T17:13:14.552033Z","times_seen":10984,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":149,"dns":0,"connect":0,"send":0,"wait":10,"receive":3,"ssl":128},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/nobps_us.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/nobps_us.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 13707\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-358b\"\r\nexpires: Sun, 15 Mar 2026 15:19:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g2Y56%2F6hAthUqCjeWfOuwYdLGh3E4VG8%2BnTf50DIjPn6tFfWSw%2F0ZR2U64ZOaFpxpXqKKLCx0Yiqy%2BOXnFH8JPnGi1vGq2kGNuy1Gw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa350e719a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13707,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"b59e818d9c86103587734a84fa188457","sha1":"a8ae3c4ea5705893fd8aabf6650784b65e04c40e","sha256":"3461631393ad6b676048e136dc99051d135cfbf71b8f085a986c3e6c53ed3224","sha512":"fbbd33e79e2b710d6e3ed511e1f34e4a0afb8e44375a245fa49e6a737c9abfe304cd4bd7ffbc24412f360190169e98f722a9dddcb853e25645f5e282eac9f84b","ssdeep":"384:YSULegl42InhR1QfezW95AhzrjB9ziEVEb0h:Yo2ehR1ies5YzqEV7h","tlshash":"0152d0f408ded6fecd862666396e80dda4762226fa4467c294a050b38d8349257dfd83","first_seen":"2026-01-08T22:39:17.41554Z","last_seen":"2026-03-19T12:49:06.528544Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/rtgau.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/rtgau.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 5176\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-1438\"\r\nexpires: Sun, 15 Mar 2026 15:19:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cK3yw4qCNHbSC1MfbdkkWZRfRNXM6bLc5gFLelBPyXRfzvw%2B%2FxGY64ChaF8%2F%2BR55afak86gvXYONlPRI8ABOBwnC%2FqliaRIYjhOWQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa351e779a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5176,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"b276f98f74eb14613cb1ba5cb56fa8a3","sha1":"36e85fb9f8667aa84ea0e6de06b671a9fed5dc90","sha256":"13ab7f4b58dbd19b46d9b47eca4a1af91eaee60cd67e51fc06c4c727ffa519cf","sha512":"9daf82e2ea0bab9f8a60a63bc0ebbf49c6a88d44d96814d3fab40e99caecec9259165b16ec4563f299cb0037a1f7e8baa2acad5d9384ef56ee0baaec0557d332","ssdeep":"96:3S4OFwAtlnGJVhE2LQjQ5QHRR9Pfp+rQCc6TQdzqiv:3SsqPHNPfp+hQdzjv","tlshash":"c0b17e49a5f89a7f5513191f3688333d6bf7da9162258b33114dc0b56c7c0c8a93689e","first_seen":"2026-01-08T22:39:17.44859Z","last_seen":"2026-03-19T12:49:06.543971Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/8aa3fa33-39bc-4355-aeb7-86f67a91fafb.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/8aa3fa33-39bc-4355-aeb7-86f67a91fafb.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 13145\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-3359\"\r\nexpires: Sun, 15 Mar 2026 15:21:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77569\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7dAdHeW%2B9%2FBlQkHIdBWNRhCYu2KRV6Yjit4F3TanRxNq1zIbJZr0GqdBoCkFXF%2B99WD2ZO3FjeNjH3ZqS5uXa%2BTe%2FdFU153SHMXBpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa352e839a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13145,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"69a1c1e4080956eb39e5c83d84df0f14","sha1":"b3f04a5cd6d343ea939cfafa5d73699ec9d7134b","sha256":"ff7cfa346a4e56dddfebc5072abb0d9e10d1ef7a1908872d23f2f8ddfb8086f3","sha512":"73575b04337ec0f8ade2619c67d1e7ded6a36384433e84fe77049b921f0bee2e8c48d554a84f33abf2b218fd08d3fc54d625ba97e01558167d89a812d67f9e0e","ssdeep":"384:8inEl0D+cgIhIs7skbsmdY9cbOkpxRxqqeJtH1nKC5hKdCDmWEe55h:40DoshsmaibHpnx8VK6hKdCDmWdN","tlshash":"5c42d0524194c47fd00e6e14c369d9cbb36bc66490e0ec2ce3d25b719a59e519e8eca8","first_seen":"2026-01-08T22:39:17.452026Z","last_seen":"2026-03-19T12:49:06.519898Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/js/modal.js","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /js/modal.js HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6920daa3-2d6\"\r\nexpires: Sun, 15 Mar 2026 15:19:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oQnHDdBNHwg3fpDunE%2BBCGs5OuMIwxWTbUFg6JC9uivYuMxX8yb5%2FRvbt1hRu2JOjBoW%2B2MmIkHOLr0IGiixvaeC36TElP2dtwZcBA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa32cdc09a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":726,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with CRLF line terminators","md5":"773201d8ed6a07d7f07fcc1a99e1b3df","sha1":"cbbe957f0f14498f8c8245fb7e3ef9f0fea342b7","sha256":"c5184863afc06cea40cb5c7a87ed2f800489e0a7277225da29b40ab8a4d56cc4","sha512":"58919c8b0cec1eec9248c263e09eff9637ca01b23b833362a9f5ff8c208b3e44a07568377dfd29f3fa8ba69cf823f01240f4aa47279bd70620e109f154779a72","ssdeep":"","tlshash":"d2014ce99a1d363a46fe6fb3b5ea575cbe350053140041057daccec54f70c900923d9e","first_seen":"2026-01-08T22:39:17.427547Z","last_seen":"2026-03-19T12:49:06.514161Z","times_seen":5,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bebas+Neue\u0026family=Dosis:wght@400..800\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Quicksand:wght@300..700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:07 GMT","end":"Mon, 27 Apr 2026 08:38:06 GMT"},"fingerprint":{"sha1":"6B:DB:3B:B8:9F:A1:8E:49:35:74:D9:D8:24:91:F2:5E:42:56:2F:58","sha256":"37:ED:DF:C4:FB:A3:96:16:9E:47:69:CE:86:A5:35:8E:B5:3A:0B:0B:6A:A1:08:A2:DF:DE:6C:7C:31:BE:94:B1"}}},"request":{"raw":"GET /css2?family=Bebas+Neue\u0026family=Dosis:wght@400..800\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Quicksand:wght@300..700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 15 Mar 2026 12:54:06 GMT\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15480,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"f23e7f154689b2baa7b991878bb2466b","sha1":"1a87d2304a81eefcd14f8acec63746d8c57e0ad7","sha256":"f318b4b4ce7fbd49068ac82c201a0d70a9abcadbf1b5e1a88ddc0b49c6298f73","sha512":"07875f4c75149dbce0c12166a27ce0e13b052c1d0f05c5885268f2219c98dbc9c5f9b7b3d4504a22d912540ebb87d0c671cbe467fb4a0191bbab042b7b959c5e","ssdeep":"192:K1/W4GBr4foOfcfLf9L5fMfgqvfZbqGIwV49fOnf+ofjCXXS2asrqAnbqGIwV4ua:bQQOkTltULv1qY49GnDu6SqY4I2","tlshash":"c6622d91042764409a831cd233de7e31ee0fa2617044c4b9affd5acaeddac69a3b535d","first_seen":"2026-01-08T22:39:17.437813Z","last_seen":"2026-03-19T12:49:06.509557Z","times_seen":5,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":130,"dns":1,"connect":29,"send":0,"wait":48,"receive":0,"ssl":100},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/rtgus.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/rtgus.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 6174\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-181e\"\r\nexpires: Sun, 15 Mar 2026 15:19:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VGbZJGMVO1wA5hEvSoDBrc61l%2F2hQsWEYa%2BR9YVGpGUP%2FJ%2F8aTip2MKwJnsUzAQcGRdHuBlunHBW1zBCRu3EZArq4pD1iQu9ZDD0mw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa350e6d9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6174,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"19887cadf341911f1f7bab921e7c28e0","sha1":"5090c8744225240de8228ea092f0f199757599fc","sha256":"d7d46c6451f15449170aeba1d135b8636198252594fa0d87904afb5ba8b6d13c","sha512":"21fcf8fa2f38718ed61c925a6d0f11dbf336f706bce2a61d720e744071e383f77aad81bd9afcb1b3c3c0a88756109d50a9b394db34d521bd0ddfa7077dd069d7","ssdeep":"192:WS6nBQhZuJQfOwHIGZqtn0ZUCubkVX1Ruj:56nyhzLhYx0ZUCR2","tlshash":"0ad19f0dc8eb4edcd12823c816283015c9ef6a78a2b04fce2f94ad1616995702cbf311","first_seen":"2026-01-08T22:39:17.38453Z","last_seen":"2026-03-19T12:49:06.540635Z","times_seen":5,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/nobps10xeu.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.903Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/nobps10xeu.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 13322\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-340a\"\r\nexpires: Sun, 15 Mar 2026 15:19:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2Fho04QMb%2FNGbVICUi4XijUUhgfNgPPibS%2Fh2obj1IhgOb0x5ipuZ83KzWgSr6j0Cz5ELcPawF6lShAsEF8m%2BpO2kjt%2BMZuLdicExA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa351e789a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13322,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"471dae7f7abc9707bb1ec50decbc6206","sha1":"5723c24bd67e98c0d0917c99aa3be372943d4db4","sha256":"40ab2e945f0e7494ae59a3b5fec5e6507c08c7881367bd5a96189a1f7ad3c4b0","sha512":"ea007ced05f72125e884d49fd313d61eb858148b03278fdd7f19b3a66875014bbd1486cc798cae61fe6d701f4e7202c211b7751269000b4a4c04a17201ec60f5","ssdeep":"384:qo21iW3Wq+Kloh3orFNff2OU4TH5oqOJ+Shb:j2iW3TdcgNf+OU4TZtu","tlshash":"4f52cfa44bbdd6c7e71dd600d73042e801ae89275b67cd29854eeae9044f2c7a3d8534","first_seen":"2026-01-08T22:39:17.439812Z","last_seen":"2026-03-19T12:49:06.524503Z","times_seen":5,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/longus.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/longus.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 12419\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-3083\"\r\nexpires: Sun, 15 Mar 2026 16:05:12 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 74934\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=91OnNcdxrxZ%2BCXMUO8MqYsAbhrJU%2FZxDxtkzmxWV9psbNge2nW4LaxRr8zfBL5z7G7oht6m%2BCLOjk0VCVMxeJUeUZq5Q8qNV8pzs6w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa351e809a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12419,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"8748100f49e54e74740fd7ee1bf32bd2","sha1":"57e51d0218c1fbd35039e10f42d06f299da23aea","sha256":"397eb88e34e9dd8e3196131896c1a2e660d143d4943ceba2ed6250326bf678a1","sha512":"074510ae5afacc330f392adda53da37e3e9bbb18c2b373d8d696fbec2de489f1bc968a9d1bf423742c2e8ee5311204d3c431744e61e3ded606a0639997b905e3","ssdeep":"192:TS5Y1G/PXf+PluDwzKRtBH/Sl+9hTpSsLFhFofZWsfOY7DoZe4FRykqUXhPxLIWp:GWMHXfwluDoGBfS4nkYboBDfONZJFhf","tlshash":"fc42c068bfb86a30199b1d87567fad49c4ab09c90a6b2c618a8272c11f305c23e949cd","first_seen":"2026-01-08T22:39:17.410471Z","last_seen":"2026-03-19T12:49:06.515445Z","times_seen":5,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/longeu.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/longeu.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 12562\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-3112\"\r\nexpires: Sun, 15 Mar 2026 15:21:17 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77569\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zjxZ9MNTvqznI2sbrFhMF%2BEK6LvellIYpWYQvEhqIKuWdl3Oj5a7nCLbhARBls%2BZrlKmJGCwNiwVIn887e7ZHW4PYGp5wAXAU7piTA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa351e7f9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12562,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"24423e5ac97df9731858d055a79d173f","sha1":"ea20250c0c6f5a30a029edcb5f5a9ddc700acf5e","sha256":"d200947c241e78b2c5a3715188e7cbb6454f3e1a3df7fed834e306a50eab586c","sha512":"3d1cbd1b87bcb8c10ce5808ed4f3c1d42fe75a6f9851a5fba02ee2e2afa37303c8610a7da3f10386d8c60b6a7286f2c7de2f080e0a2623df96f90b679f0c12dc","ssdeep":"192:HSB5k//qwoO4mRKVYFakl41DQO7q0xSCKs+WyVeT+X8yXroAFtsJuNglEZ9cqNsz:yB6qNO4maiwRUsGayfXEcVglgNn9m","tlshash":"bd42c0b2cfb41b662e44e7de360b4fadcaaecd90b412c3b51718069c4f82470b45611f","first_seen":"2026-01-08T22:39:17.445256Z","last_seen":"2026-03-19T12:49:06.525425Z","times_seen":5,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/css/2bfe53d490933b1a.css","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /css/2bfe53d490933b1a.css HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\netag: \"6920daa3-23ba8\"\r\nexpires: Sun, 15 Mar 2026 15:19:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a%2BnfEzgZ4qZ86N2vIhiECbCzER%2F6m0zQT9DmrmjBoxUMpjRvbzYF1OSlfim9697r0D394TomMu8fdrXd67A%2Bk0vW0S0DtZhELL0khg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa32cdbc9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146344,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"13e6fdc925db896627339f825146cb12","sha1":"c51116c6616f7ef2d33a4c7bc81447e31634a48f","sha256":"bb8a307266bf9fac2e7d6c9a500f8d8869998e8931a6e670384774a4f6506be5","sha512":"c9075fc37d714eb9f5774bc05e889f58373278490295175532503177f5cf5f23d9f51d9d57f7d70e2215a6e0a02704913dc76cf01ab8b2cf8e2e2c98d5683d28","ssdeep":"3072:vBwqG5chBhQ8fWu8K9cUKmOlhONHiRx0ZcVxVp7fHTOJMq+WDh2xp5xGwZuOZCiw:aqG5chBhQ8fWu8K9cUKmOlhONHiRx0ZH","tlshash":"6fe3d6d4a275e63fbc2774b9d2ace84c6216b489de350beafd11212253c3bf11973a14","first_seen":"2026-01-08T22:39:17.435795Z","last_seen":"2026-03-19T12:49:06.512878Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/js/script.js","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Fri, 21 Nov 2025 21:33:40 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: \"6920dab4-36a\"\r\nexpires: Sun, 15 Mar 2026 15:17:42 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 77784\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzGyh6C%2FC8qA2ngQMKBOPNu5K8pbRkyvpW18llgOY%2BpKjfwFckaj82dxCB8udtNk8fQqM0%2BZg9BX9cFk6QsVEdYyr91n9RdPPbv77w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa32cdc19a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (358), with CRLF line terminators","md5":"640cb0ec4c0b44c1d86d6ecb72cccd80","sha1":"9d86a13705a4920df50e9b1b184a52f42a5ba7b9","sha256":"690229717cfb5087aec655a6b2dd4bb2c858f50b01544b2298ffce5802e8ab36","sha512":"651710727c3002bf668655fb76c1449a57d7babd92dc93697209104d88f36dcf59a8d1837e434d74ba6a6f4e1bd7cfed94748b52e6082f7a432cef78029b5284","ssdeep":"","tlshash":"af1159d9e4301b31052aa7279993767df8aa00bb4548d428b9ac86c05fb0f6770e3fcc","first_seen":"2026-01-08T22:39:17.403942Z","last_seen":"2026-03-15T13:31:33.905387Z","times_seen":3,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/newnobps10xus.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/newnobps10xus.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 13382\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-3446\"\r\nexpires: Sun, 15 Mar 2026 15:19:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bULJMsC2RDf59f%2F%2BYmRKu%2B4rRwNAaN9As9ACazGKvw9HhU64LfcklzOldO2psaVBAx%2FZceULHZXthiKLzb3zwKtJAM829KErE28x2A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa350e6f9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13382,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"e5e55c0b623f117bbcbdaf2d44451804","sha1":"e0b3545d6526b9add29dba6731e4b6cd13242e47","sha256":"4baee488f38fb43f647c20072dac7c8df84aa8f942cdddc2368f18052d1e8d9f","sha512":"4b24ca545b451d17de64c762d7db109070fba527c45dfe2b935d39f731ae519ca1a4e88c1b84a05a8a56c99c45f135143f8fe36ad57f8e58d6909e3e5609186f","ssdeep":"384:hZVLGzlV291weuDMRf/G7VH0RGIrhE+DiF12v6A/naWbM:dLGz291Po0FrhEiyYaWbM","tlshash":"8852cf7a1523a00979371cf8f52f77e2d169930608d40aeba4cfe2897694f76364e4f8","first_seen":"2026-01-08T22:39:17.430843Z","last_seen":"2026-03-19T12:49:06.554175Z","times_seen":5,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/trio_5x_us_v1.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/trio_5x_us_v1.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 9572\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-2564\"\r\nexpires: Sun, 15 Mar 2026 15:19:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 77684\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fxhr9hufaha8dxv9Zc6K%2BW5W21iiwh8pstTvmLNDDqQKq3ZOplNTuRR0ecxc%2Fy1xwqYriURdgoH87WG3fzr1VNtyh1dykfXGD2T1vg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa350e759a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"59e8a43db4a0069806e6166dda671322","sha1":"b846cce69339e2cef5682807f0d6a832c0e6c61f","sha256":"b1e8bcc46ff6058dc49bb4bef1f54038d20a6929108112b5cc7da6504070122a","sha512":"b0d277b9c9b2549b3f23d8f388c02a812bd4a04ff724e9dda16c507f9811dc452f56287e78d82db096e0a21a7172bb5a0ce9b6bbdf630b9d665e951d1c6cf34c","ssdeep":"192:XSYL2bfmPU835H1Yc1HRIUq1zwwf2/rB7r8l1B2ZYmd:CYyXK5VYiyz1e/rB8lwY8","tlshash":"f712ae91eff1cf550de8295686db5af0146b70b78fe2e0e70156289ed7e013804921a3","first_seen":"2026-01-08T22:39:17.417923Z","last_seen":"2026-03-19T12:49:06.518983Z","times_seen":5,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/mediumus.png","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.914Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/mediumus.png HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/png\r\ncontent-length: 12316\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-301c\"\r\nexpires: Sun, 15 Mar 2026 16:09:36 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 74670\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOs3%2Bavfvh31QVgZ3i5r6UTWUV%2FcKgHWYrz%2Fxx4P6Q2OS5EwAjC3%2B5j3KiW8N0kUgUJ6K3pCu3PERjZaWEGO%2F8lsSS%2Fcp1vUS7QNfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa352e819a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 277 x 178, 8-bit colormap, non-interlaced","md5":"05ae1c5af9006ced79e3649aeaf7cb51","sha1":"4ac7a66537e078d4a1bb420b9a3eac756667f705","sha256":"b2448047621cc838095ef2f73c861dc5d22f9b5a42989710fc6ab569b2ef10c0","sha512":"8869ab587cb1f848a848dcfd1c74a65b3ecd72f159891401728ff39de6f70e0f67f9ae3cfedc3697aaf345c2ed8d5898e5485511b2a53442a554aeb61b275038","ssdeep":"384:1deWuxssHu+kp4iNc7J55YuVS4FZQ3DjhZl:TeDh7J5KR4Fi3/hT","tlshash":"7c42c1f8933acc50ff5a25e045174df4e799335c5a62760681c2a33368754a48e390ff","first_seen":"2026-01-08T22:39:17.450349Z","last_seen":"2026-03-19T12:49:06.508099Z","times_seen":5,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/5.15.1/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/font-awesome/5.15.1/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://rustoria.net\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 80300\r\ncf-ray: 9dcbaa34b93675a1-ARN\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\netag: \"5f7b5b5f-139ac\"\r\nlast-modified: Mon, 05 Oct 2020 17:43:59 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 1999300\r\nexpires: Fri, 05 Mar 2027 12:54:06 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=SMgn4alG1jKW2CT0fUuIWzVbTHyniioWqKAPoiFAQmTKF5IOBpEn6sFp2JTFsqAHTa61kH2dLJ5koq5g8cgmuVJkKNUfI0lMWgLjNo6DeDd%2F9tBoLZe9%2F0N0lbSOBbpPeYMLbpqW\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nstrict-transport-security: max-age=15780000\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80300,"size_decoded":0,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392","md5":"8e1ed89b6ccb8ce41faf5cb672677105","sha1":"9b592048b9062b00f0b2dd782d70a95b7dc69b83","sha256":"6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7","sha512":"e2f6b4574cb1541dff6852d0af44faae80286110e8451841eade4b53ebdf31150602640fe1bdfff41459ea4ae884d14d115fbc93b30d199c87b88f5d07e4cd72","ssdeep":"1536:Tek2SzK4WGTQH1GlyGLj3SUwtyIWeOo4XyydPl2mN4fsxDFsbaLsND1Vv08:ak2gTQVGLL7IyDelE7dPZ35FeND19","tlshash":"d3730272fd7b05541fe8e3ad39390568bb881acc35c949f2058afc95e0ab67a7684d03","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-06-17T07:18:51.561472Z","times_seen":28337,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":23,"dns":1,"connect":0,"send":0,"wait":20,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rustoria.net/img/vanillaaupremium.jpeg","fqdn":"rustoria.net","domain":"rustoria.net","tld":"net"},"ip":{"addr":"172.67.170.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://rustoria.net/","date":"2026-03-15T12:54:06.905Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rustoria.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 19 Jan 2026 20:33:38 GMT","end":"Sun, 19 Apr 2026 21:31:55 GMT"},"fingerprint":{"sha1":"19:6B:79:67:19:7A:AC:0C:9D:3F:C8:46:06:B8:7F:56:39:2C:09:80","sha256":"EE:78:9E:F1:52:3C:6D:BC:68:F3:83:86:74:F0:88:42:8B:E9:68:D3:05:07:8C:4E:C1:74:2E:11:11:68:44:E1"}}},"request":{"raw":"GET /img/vanillaaupremium.jpeg HTTP/1.1\r\nHost: rustoria.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://rustoria.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 15 Mar 2026 12:54:06 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 5831\r\nlast-modified: Fri, 21 Nov 2025 21:33:23 GMT\r\npriority: u=4,i=?0\r\netag: \"6920daa3-16c7\"\r\nexpires: Sun, 15 Mar 2026 16:09:36 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 74670\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IrSrM%2BtqAfz3ZQ4gmZG%2F696GGD6Seyss9dE5QbCk7T6KfKzppQaYjQkp62QVhoL%2BZqiL5g37pbspYINCOZgb7Ytc%2FwS%2BcKTq45RO%2FA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dcbaa351e7c9a3e-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5831,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 277x178, components 3","md5":"479ab82f89a3dadfc24d9ec32c5bb7e1","sha1":"7d56baa39e949357ab7bb04fee3115e4e7d3c771","sha256":"d9d127846a4390bac3f8f8984f9d095c80cd4c4e53b5dafb27029b68877f6cb9","sha512":"e018d113fd7ee1470940e1ea80d5f990cbe95ea19e8dfd179836b50d17c2d89a96592b06ac84f8901f32380b2a33916f15c8246643e5387e384ba2ab841c7fa2","ssdeep":"96:lamaZg+zvoMAnEmI//DWk0jREYxQ/DJhvscLIDD+WzJQ9bZtGML4RC9:lzGg+zWnlSA9y/DTvpLIGWuoJC9","tlshash":"fdc17d3891185036e5b7b9b50094036e3e5527d10ad07ea3d88e83695c364b35ae0e0e","first_seen":"2026-01-08T22:39:17.44362Z","last_seen":"2026-03-19T12:49:06.530387Z","times_seen":5,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-15","alert":"Sinkholed","trigger":"rustoria.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}