zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
301 Moved Permanently 178 B URL HTTP/1.1 zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 04 Feb 2023 23:46:50 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1cdc095521e9ee2606059be447d1fdd5
02b5d0a5b5823e2338daf7e144700babe2a213af
8bda3aabcf331c2bfcc4c7023cd797c760fd301dc353641bb95048e072f66c66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BDA3AABCF331C2BFCC4C7023CD797C760FD301DC353641BB95048E072F66C66"
Last-Modified: Sat, 04 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7268
Expires: Sun, 05 Feb 2023 01:47:58 GMT
Date: Sat, 04 Feb 2023 23:46:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c21ba65e44ac95470c314e068e49a9eb
17a13b13738993d889d4afa3d848dc63bf6eba64
9bd0795b30e84ce63b6e2a365ca91bbffc395dd955e112152066c31e63a4ab66
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9BD0795B30E84CE63B6E2A365CA91BBFFC395DD955E112152066C31E63A4AB66"
Last-Modified: Sat, 04 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15927
Expires: Sun, 05 Feb 2023 04:12:17 GMT
Date: Sat, 04 Feb 2023 23:46:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb7b6b46e708ad73eaaa3c21e74569ae
950663c025acad81556af5aa3022ecc9d55097fe
763f58b9fb838378c92033b59907b036f4c33081f5103d9bcc2ca2a8de500d64
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "763F58B9FB838378C92033B59907B036F4C33081F5103D9BCC2CA2A8DE500D64"
Last-Modified: Sat, 04 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4139
Expires: Sun, 05 Feb 2023 00:55:49 GMT
Date: Sat, 04 Feb 2023 23:46:50 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Retry-After, Content-Length, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 04 Feb 2023 23:36:16 GMT
content-type: application/json
age: 634
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: /bp4kPE1bmthtSeF56tylShjLdcFJWn3z48G7oZA9lZHHtdLdqnOtFcRNOnv7XUEljyKgWL2sOE=
x-amz-request-id: BEHJ0KZPCMHJY5CD
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 04 Feb 2023 22:53:01 GMT
age: 3229
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71a666529e2f01201afa92706a086c91
8e607fe5b0ace3b8da8b3f2a9ed79541f4f7406e
b896017aaa1adf182902341c8a42b14011ba66fcbff9445a1c59113dffd63128
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B896017AAA1ADF182902341C8A42B14011BA66FCBFF9445A1C59113DFFD63128"
Last-Modified: Thu, 02 Feb 2023 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7950
Expires: Sun, 05 Feb 2023 01:59:20 GMT
Date: Sat, 04 Feb 2023 23:46:50 GMT
Connection: keep-alive
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:50 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
200 OK 1.4 kB URL HTTP/2 zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1210)
Hash 28fc06d15e94e696ab7636c91b46db57
93c2ea86e7ded4295b74ba22cb57d98b8312613d
2742eacce94c79ec3bed911e69ec21dc4024e6e2e7372f5ac47bfbf135e9b76a
GET /account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:50 GMT
content-type: text/html
content-length: 1384
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
zelenka.guru/aes.js
200 OK 26 kB IP
File type ASCII text, with very long lines (25638), with no line terminators
Hash 535ff81ab45764c67a7336a70ee7c7a6
c1cdb3fc5b8e033fbc2be2638b6189e9f3a4f669
991fa3ac0febff65dd238aa07315e6ccb792fb207828b371de8cb353bd4dd121
Analyzer Verdict Alert fortinet Malware
GET /aes.js HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:50 GMT
content-type: application/javascript
content-length: 25638
last-modified: Sun, 03 Jun 2018 20:00:00 GMT
etag: "5b1448c0-6426"
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Pragma, Backoff, Retry-After, Content-Length, Last-Modified, Expires, Cache-Control, ETag, Alert, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 04 Feb 2023 23:07:19 GMT
age: 2372
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
200 OK 8.9 kB URL HTTP/2 zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (464)
Hash 42629012a08385c4ff80fc959fb3e8e1
af96b0125424865b0979d398c63c7d254ff50279
eff16abdfc131ad3b62897e8f9cd528712ff5413ef6590f21a550f3a172935d5
GET /account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: text/html; charset=UTF-8
content-length: 8937
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: private, max-age=0
set-cookie: xf_session=87100c46b7c5daa0b3f10288430a6cd3; path=/; secure; HttpOnly
x-frame-options: SAMEORIGIN
x-xss-protection: 1
last-modified: Saturday, 04-Feb-2023 23:46:51 GMT
content-encoding: gzip
vary: Accept-Encoding
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/errorHandler.min.js?_v=71f23857
200 OK 1.1 kB URL HTTP/2 zelenka.guru/js/lolzteam/errorHandler.min.js?_v=71f23857
IP
File type ASCII text, with very long lines (1041)
Hash fc7ff548aeb1842f64673dc12c91d052
73d947f0d514fa5ed76486f598d269ac38e204d4
1d40790a0af6d0279be3126c591128a391fb4404c781fe0f744a4f5bcf575da5
GET /js/lolzteam/errorHandler.min.js?_v=71f23857 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: application/javascript
content-length: 1086
vary: Accept-Encoding
etag: "63da984e-43e"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
last-modified: Saturday, 04-Feb-2023 14:16:42 GMT
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 98be7fe21d059e46146a43d20c4eea92
1ec58129fea75085588be7b8baec05b0874b5274
7bb2eb5ffcd88a3b6ba7b210bdbcd4469134c9708f06befb6c616beebf8dae46
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 23:46:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 23:46:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dedf9c519ac38c4bece9c5bc895787d7
4911175c3f8a435978c5301c33c7a99a5e00a1d5
bddd7e3a4939f863642a7c5348c1c8b9bc569b35c10a27f4cf5ec71f7e6b9698
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BDDD7E3A4939F863642A7C5348C1C8B9BC569B35C10A27F4CF5EC71F7E6B9698"
Last-Modified: Fri, 03 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6386
Expires: Sun, 05 Feb 2023 01:33:17 GMT
Date: Sat, 04 Feb 2023 23:46:51 GMT
Connection: keep-alive
www.googletagmanager.com/gtag/js?id=G-J7RS527GFK
200 OK 77 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-J7RS527GFK
IP
File type ASCII text, with very long lines (19467)
Hash 565b77b7299ac48b5bb453e9b8cbc5ef
06bd647a85f293a3e9e1a8e2a5a892d4c8faebc1
e4ccfc14b899936a94661eb2224da647544e085bb8da78a41aa54f58e5c0ba4b
GET /gtag/js?id=G-J7RS527GFK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 04 Feb 2023 23:46:51 GMT
expires: Sat, 04 Feb 2023 23:46:51 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76974
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/paper.svg
200 OK 895 B URL HTTP/2 zelenka.guru/styles/mm/paper.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (336)
Hash 61772c52576c14fe293e82b271e2972f
a906379feb9106fa295ac0f7fa7eb3eb54dcdec9
777d52d10b4a8a981cc4ee43823500087dd0d2209e50514df3765d10d742a63d
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/paper.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 895
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-37f"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/buy.svg
200 OK 1.2 kB URL HTTP/2 zelenka.guru/styles/mm/buy.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (344)
Hash f796e797192932ea9d82c2682b7568ea
744929b0b0b84c321048eb3d24e114590c320d87
a29c241035d53a2b9fd702f0b06821c16f2324fd580726afa0d32b5fdcc5728b
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/buy.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 1223
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-4c7"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/shield.svg
200 OK 812 B URL HTTP/2 zelenka.guru/styles/mm/shield.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (565)
Hash ed4e97d8851b3beae7df510697a3eb80
22d2dbad5b9dafe90fc255e073c4800e616732b7
28bae4941d25a2b04e3c19d9da161c5b00355a141b1b554eb47ed98cf9db539a
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/shield.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 812
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-32c"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/send.svg
200 OK 432 B URL HTTP/2 zelenka.guru/styles/mm/send.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (328)
Hash 8650fbba5c447a5aba47e0a7ac057829
48e6e755dd71913a17496fe0ed9f909865f28d2d
f03f16eb1f8689b4a3094f18fc905982c32361d7fa67a9eb85b9493f87982a58
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/send.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 432
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-1b0"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/chat.svg
200 OK 1.4 kB URL HTTP/2 zelenka.guru/styles/mm/chat.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (686)
Hash a09482b9ec1e6bcec3cf0dc395ed2614
5358ea23c9902e1e65ed0eeb571df2787bea3788
9d07bff0ec207cf8097ab26b4599c29e219ddd058db3ce5d7ea7b640618f3fd2
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/chat.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 1354
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-54a"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/voice.svg
200 OK 800 B URL HTTP/2 zelenka.guru/styles/mm/voice.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (369)
Hash 041c7deb4c221f1e51c9d6c66d588644
1298441e2319e8461d4a1698315444dc445eb242
5977716623714f02150a5f7c31f89c304265a8d5782b17e47a027c3d9001ad3f
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/voice.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 800
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-320"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/danger.svg
200 OK 902 B URL HTTP/2 zelenka.guru/styles/mm/danger.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (433)
Hash a65e41a7b6ccaf049e2e775326e74a0c
30aaaca66bd18539ccccd56dc6d328651575a9e7
28d452a1efbf6d513a7d02dbca936882a3bf9552211f75087274056e3fdbaec4
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/danger.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 902
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-386"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/circle.svg
200 OK 683 B URL HTTP/2 zelenka.guru/styles/mm/circle.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (339)
Hash 36c0971d9e77fc848b80f385242146a0
3ca04689f81ff0a21e81887bd9f32e8449b56378
8e4962642b4d7110d15d68553aaa0ddfc5dcaab5d4f4293d6cebb8705d74d844
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/circle.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 683
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-2ab"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/square.svg
200 OK 719 B URL HTTP/2 zelenka.guru/styles/mm/square.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (376)
Hash 702eb53194b95a6318f0e8e9295c80cd
7330f4aa9b442db95d9bd85040e8e12bff079ef5
587e1039cd67e4f2a95a1614adc096941f2a29a047eb89d3dd6b9e4c166ff405
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/square.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 719
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-2cf"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/graph.svg
200 OK 1.3 kB URL HTTP/2 zelenka.guru/styles/mm/graph.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (706)
Hash 865dc809dcb9f8fb94ca0dcae0a42d4d
bb482b7749efd9b1ed5b3881c335e689673fcc33
f362004a918d1c5d3405664a47c827b4696d599351ea28d969d6839ecc13767c
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/graph.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 1306
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: "6315c321-51a"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/language.svg?1
200 OK 1.2 kB URL HTTP/2 zelenka.guru/styles/mm/language.svg?1
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document, ASCII text, with very long lines (1093)
Hash 47689d5587cfdc167eb024b2a1c76735
0ade34df01ae54d32cd147a0627672822e20eb04
2dcce233f1cf1f6c7988302fc2bc49b4a5704bc043bdf3b5ec25f43f7b17534b
GET /styles/mm/language.svg?1 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 1228
last-modified: Mon, 05 Sep 2022 09:57:35 GMT
etag: "6315c80f-4cc"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/css.php?css=mmenu_all,notices,panel_scroller&style=9&dir=LTR&d=1675550595
200 OK 3.0 kB URL HTTP/2 zelenka.guru/css.php?css=mmenu_all,notices,panel_scroller&style=9&dir=LTR&d=1675550595
IP
File type troff or preprocessor input text\012- troff or preprocessor input, ASCII text, with very long lines (1840)
Hash 2d09bb53902a28acf37b1ef388dcf3c9
2da4441955bf913b87fbb8b19a4cb3da12c454c8
b2a5239384ed03ff119e723d61d8518ffd45efb78277f1d67304e89a6e415a38
GET /css.php?css=mmenu_all,notices,panel_scroller&style=9&dir=LTR&d=1675550595 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: text/css; charset=utf-8
content-length: 2978
expires: Sat, 11 Feb 2023 23:46:51 GMT
last-modified: Saturday, 04-Feb-2023 23:46:51 GMT
cache-control: max-age=604800
content-encoding: gzip
vary: Accept-Encoding
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1675550595
200 OK 95 kB URL HTTP/2 zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1675550595
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 8b27ebc28f66f62c4f7a3005a20f0a80
ac67a0c1fac7ebd4f3346cfc6825c3297d9b49c5
f87f035840231c19b0b9897014e96ba7ea0cc1f08a7b3b46db0bd68d30868c2f
GET /css.php?css=xenforo,form,public&style=9&dir=LTR&d=1675550595 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: text/css; charset=utf-8
content-length: 94639
expires: Sat, 11 Feb 2023 23:46:51 GMT
last-modified: Saturday, 04-Feb-2023 23:46:51 GMT
cache-control: max-age=604800
content-encoding: gzip
vary: Accept-Encoding
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 153d0de36959c722c00df71ba86daca2
305f56a3134879ebf0828e169e903e560540c070
0cf533a798d42d1e97fb6619a411afadf9a68c92302ba852869b0c0555a47987
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 23:46:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zelenka.guru/public/cd-top-arrow.svg
200 OK 555 B URL HTTP/2 zelenka.guru/public/cd-top-arrow.svg
IP
File type SVG Scalable Vector Graphics image\012- SVG XML document\012- XML 1.0 document text\012- SVG XML document\012- XML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash c2bab96d57583d68d57a99dc04f16482
17f5b39cdf2f8cd02d5f3ff422372dcefd1bea53
d94bbee4b8120bf8e4937e3e9c54de44bdb866291db81088601bde90085092da
Analyzer Verdict Alert fortinet Malware
GET /public/cd-top-arrow.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1675550595
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3; _ga_J7RS527GFK=GS1.1.1675554449.1.0.1675554449.0.0.0; _ga=GA1.1.1955571173.1675554449
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 555
last-modified: Mon, 23 May 2022 09:33:53 GMT
etag: "628b5501-22b"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: DP8zyon0uskAshbq1v+bSw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: kuDFhYu5njqdssl/7gNrliuYMlE=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 23:46:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 23:46:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 23:46:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zelenka.guru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 18:52:41 GMT
expires: Tue, 30 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 449650
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
200 OK 26 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 26240, version 1.0\012- data
Hash 4a90976686fcbd8296c7d7fccc04c273
bcb82e93ac7ad1fa2af6a37009a200f79f4cb4e5
59bd288e64c57e034672999e33ebda6eb5ad1575945eb563dbfb5b44f226e1e1
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zelenka.guru
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 26240
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 07:52:01 GMT
expires: Thu, 01 Feb 2024 07:52:01 GMT
cache-control: public, max-age=31536000
age: 316490
last-modified: Mon, 15 Aug 2022 18:14:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5452c58c07ce8d3cade93b323b271c35
581b1e438daeb32a12feaf50f2aab17dcf3e3171
b99ea2af71e697f45db51732f7d3e8d3e50258c9c96e50a772b8c4638577140a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 04 Feb 2023 23:46:51 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zelenka.guru/styles/font/fa/fa-regular-400.woff2?_v=5.15.3
200 OK 169 kB URL HTTP/2 zelenka.guru/styles/font/fa/fa-regular-400.woff2?_v=5.15.3
IP
File type Web Open Font Format (Version 2), TrueType, length 168768, version 331.-31261\012- data
Size 169 kB (168768 bytes)
Hash d8689b99dce7c881d3130f3c91cfefdf
fb005c93930c13b3a5f449bbc75ba5ee23f609fa
4de49631fe60b17010f7cda29a6236ca6ad6102ea204e5c31d2c1e79ee276938
Analyzer Verdict Alert fortinet Malware
GET /styles/font/fa/fa-regular-400.woff2?_v=5.15.3 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1675550595
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3; _ga_J7RS527GFK=GS1.1.1675554449.1.0.1675554449.0.0.0; _ga=GA1.1.1955571173.1675554449
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: font/woff2
content-length: 168768
etag: "628b5501-29340"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
last-modified: Saturday, 04-Feb-2023 23:46:51 GMT
accept-ranges: bytes
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
zelenka.guru/styles/font/fa/fa-solid-900.woff2?_v=5.15.3
200 OK 137 kB URL HTTP/2 zelenka.guru/styles/font/fa/fa-solid-900.woff2?_v=5.15.3
IP
File type Web Open Font Format (Version 2), TrueType, length 136824, version 331.-31261\012- data
Size 137 kB (136824 bytes)
Hash 978b27ec5d8b81d2b15aa28aaaae1fcb
76625967fe113a088e0627605b9d1bbfb8a5e47c
943efdb4b38963df0653d778f233b55db3e19f44794e4ff944e33b8849dcdb3c
Analyzer Verdict Alert fortinet Malware
GET /styles/font/fa/fa-solid-900.woff2?_v=5.15.3 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://zelenka.guru/css.php?css=xenforo,form,public&style=9&dir=LTR&d=1675550595
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3; _ga_J7RS527GFK=GS1.1.1675554449.1.0.1675554449.0.0.0; _ga=GA1.1.1955571173.1675554449
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: font/woff2
content-length: 136824
etag: "628b5501-21678"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
last-modified: Saturday, 04-Feb-2023 23:46:51 GMT
accept-ranges: bytes
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
zelenka.guru/public/2017/zelenka.png
200 OK 9.6 kB URL HTTP/2 zelenka.guru/public/2017/zelenka.png
IP
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 152x152, components 3\012- data
Hash fadafbda2fab7c8a1feed8c6e00abcee
887f25e551c19dafeb8c0f00f30ab58fc2211346
e3742682cfdd81665035a5e97e6b43d5891e2379ab6c2b06dbd764e672965d4d
GET /public/2017/zelenka.png HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3; _ga_J7RS527GFK=GS1.1.1675554449.1.0.1675554449.0.0.0; _ga=GA1.1.1955571173.1675554449
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/png
content-length: 9579
last-modified: Fri, 19 Aug 2022 15:39:15 GMT
etag: "62ffaea3-256b"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
zelenka.guru/favicon.svg?4
200 OK 1.4 kB URL HTTP/2 zelenka.guru/favicon.svg?4
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (626)
Hash d22fbfe2ced1c6d4a8997bdb0c38d3b5
d57652506d9d076d17f556fe8ed29c2fa5a88ceb
f223ae0076c1bf119bc649fad179dfaf5a11aa91d3104957002678837c1a716a
Analyzer Verdict Alert fortinet Malware
GET /favicon.svg?4 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3; _ga_J7RS527GFK=GS1.1.1675554449.1.0.1675554449.0.0.0; _ga=GA1.1.1955571173.1675554449
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 1352
last-modified: Thu, 25 Aug 2022 11:38:05 GMT
etag: "63075f1d-548"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 744dd567a55130c5a86bd23d30e090ce
54544d5b7e41f1f99d17086a12d2b9453ae40be8
fc482854578301d7ebeccc9acbf852359c660806215a1e9f217b889d8fb5c42b
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 23:46:51 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Wed, 08 Feb 2023 21:34:11 GMT
ETag: "54544d5b7e41f1f99d17086a12d2b9453ae40be8"
Last-Modified: Sat, 04 Feb 2023 21:34:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2953
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794749c2b9240b02-OSL
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash f77d5a705f562e84eef7664717b80d7f
197471b9af44e8dfebe431a26bb6b82a79a9b894
d41feac924617b7c714a9640e5e84eab9c0139853ffb112afd41d32f4297d1f5
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 04 Feb 2023 23:46:51 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 08 Feb 2023 19:43:32 GMT
ETag: "197471b9af44e8dfebe431a26bb6b82a79a9b894"
Last-Modified: Sat, 04 Feb 2023 19:43:33 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2073
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 794749c2b87f0b61-OSL
counter.yadro.ru/hit?t52.6;rhttps%3A//zelenka.guru/account-confirmation/6559443/email%3Fc%3DsVKZ5bYT8pHRt_Af;s1280*1024*24;uhttps%3A//zelenka.guru/account-confirmation/6559443/email%3Fc%3DsVKZ5bYT8pHRt_Af;h%u0424%u043E%u0440%u0443%u043C%20%u0441%u043E%u0446%u0438%u0430%u043B%u044C%u043D%u043E%u0439%20%u0438%u043D%u0436%u0435%u043D%u0435%u0440%u0438%u0438%20%u2014%20Zelenka.guru%20%28Lolzteam%29;0.05337018299276275
200 OK 440 B URL HTTP/1.1 counter.yadro.ru/hit?t52.6;rhttps%3A//zelenka.guru/account-confirmation/6559443/email%3Fc%3DsVKZ5bYT8pHRt_Af;s1280*1024*24;uhttps%3A//zelenka.guru/account-confirmation/6559443/email%3Fc%3DsVKZ5bYT8pHRt_Af;h%u0424%u043E%u0440%u0443%u043C%20%u0441%u043E%u0446%u0438%u0430%u043B%u044C%u043D%u043E%u0439%20%u0438%u043D%u0436%u0435%u043D%u0435%u0440%u0438%u0438%20%u2014%20Zelenka.guru%20%28Lolzteam%29;0.05337018299276275
IP
ASN #39134 United Network LLC
File type GIF image data, version 87a, 88 x 31\012- data
Hash 9ebaab11720b3034f0627d32ab71b6e7
22c0e64d10385e5b0568d5ae5c436e1d64d66849
437277fbd00b4f2ec6a43dbae7e95196f46563fd72713271c574610d12f5fc84
GET /hit?t52.6;rhttps%3A//zelenka.guru/account-confirmation/6559443/email%3Fc%3DsVKZ5bYT8pHRt_Af;s1280*1024*24;uhttps%3A//zelenka.guru/account-confirmation/6559443/email%3Fc%3DsVKZ5bYT8pHRt_Af;h%u0424%u043E%u0440%u0443%u043C%20%u0441%u043E%u0446%u0438%u0430%u043B%u044C%u043D%u043E%u0439%20%u0438%u043D%u0436%u0435%u043D%u0435%u0440%u0438%u0438%20%u2014%20Zelenka.guru%20%28Lolzteam%29;0.05337018299276275 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Sat, 04 Feb 2023 23:46:51 GMT
Content-Type: image/gif
Content-Length: 440
Connection: keep-alive
Expires: Fri, 04 Feb 2022 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Sat, 04 Feb 2023 23:46:51 GMT
access-control-allow-origin: *
etag: "63c93a4b-12029"
expires: Sun, 05 Feb 2023 00:46:51 GMT
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
region1.google-analytics.com/g/collect?v=2&tid=G-J7RS527GFK>m=45je3210&_p=1038427871&cid=1955571173.1675554449&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675554449&sct=1&seg=0&dl=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&dr=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&dt=%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-J7RS527GFK>m=45je3210&_p=1038427871&cid=1955571173.1675554449&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675554449&sct=1&seg=0&dl=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&dr=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&dt=%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-J7RS527GFK>m=45je3210&_p=1038427871&cid=1955571173.1675554449&ul=en-us&sr=1280x1024&uaW=1&_s=1&sid=1675554449&sct=1&seg=0&dl=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&dr=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&dt=%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zelenka.guru
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://zelenka.guru
date: Sat, 04 Feb 2023 23:46:52 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 04 Feb 2023 23:46:52 GMT
access-control-allow-origin: *
etag: "63c93a4b-2b"
expires: Sun, 05 Feb 2023 00:46:52 GMT
accept-ranges: bytes
last-modified: Thu, 19 Jan 2023 15:40:43 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/85597711/1?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A833%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1011113482619%3Ahid%3A800936269%3Az%3A0%3Ai%3A20230204234729%3Aet%3A1675554450%3Ac%3A1%3Arn%3A422271439%3Arqn%3A1%3Au%3A1675554450250650018%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C315%2C0%2C1%2C0%2C%2C413%2C37%2C%2C%2C%2C786%3Aco%3A0%3Ans%3A1675554448661%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675554450%3At%3A%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20%28Lolzteam%29&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/85597711/1?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A833%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1011113482619%3Ahid%3A800936269%3Az%3A0%3Ai%3A20230204234729%3Aet%3A1675554450%3Ac%3A1%3Arn%3A422271439%3Arqn%3A1%3Au%3A1675554450250650018%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C315%2C0%2C1%2C0%2C%2C413%2C37%2C%2C%2C%2C786%3Aco%3A0%3Ans%3A1675554448661%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675554450%3At%3A%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20%28Lolzteam%29&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 6592c38a1419568876093f0b38b5a3b2
4c9392f87807b66e7fca74d89138f86b79892ad0
777b2fb33623216bcf00f010ebe653703b986ea5d37fbe6f7e6013c82679b5b0
GET /watch/85597711/1?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A833%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1011113482619%3Ahid%3A800936269%3Az%3A0%3Ai%3A20230204234729%3Aet%3A1675554450%3Ac%3A1%3Arn%3A422271439%3Arqn%3A1%3Au%3A1675554450250650018%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C315%2C0%2C1%2C0%2C%2C413%2C37%2C%2C%2C%2C786%3Aco%3A0%3Ans%3A1675554448661%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675554450%3At%3A%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20%28Lolzteam%29&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zelenka.guru
Referer: https://zelenka.guru/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Sat, 04 Feb 2023 23:46:52 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://zelenka.guru
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 23:46:52 GMT
last-modified: Sat, 04-Feb-2023 23:46:52 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10260
Expires: Sun, 05 Feb 2023 02:37:52 GMT
Date: Sat, 04 Feb 2023 23:46:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10260
Expires: Sun, 05 Feb 2023 02:37:52 GMT
Date: Sat, 04 Feb 2023 23:46:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10260
Expires: Sun, 05 Feb 2023 02:37:52 GMT
Date: Sat, 04 Feb 2023 23:46:52 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c14d3cf8ade0150a711f094be32ac474
11e7fb5487d364c5392e1594e09f5b49831043ea
2a98ce39894b7d9befdba3916467bc95962376d0b308103e0a1eea36c0bc2302
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2A98CE39894B7D9BEFDBA3916467BC95962376D0B308103E0A1EEA36C0BC2302"
Last-Modified: Fri, 03 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10260
Expires: Sun, 05 Feb 2023 02:37:52 GMT
Date: Sat, 04 Feb 2023 23:46:52 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1a4eed23b240d04a3cd6b085cfa93375
f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00
93e8371f80c12d3753842e36001dbb8d3dc2223b10a594639752cd816c492d4e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ad60ff0-69ec-4be2-9334-41be71ca4b7f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10905
x-amzn-requestid: 093778fc-231c-452f-a6fc-15f4eb41ade0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fmNJCEDzIAMFmxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d8c239-7f56d6e56392f373541db219;Sampled=0
x-amzn-remapped-date: Tue, 31 Jan 2023 07:24:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: jIvBQjGh9JzWQM0YpEYiqP5CcBrkwqLVjAYhMWJ1P1H0MRkm7kpnpg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:12:06 GMT
age: 5686
etag: "f29b9dc3f6bbd2ba76a5a4570ce044d5f240fd00"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626efb39-4b90-4979-bc7d-1a1ba9e7fc73.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626efb39-4b90-4979-bc7d-1a1ba9e7fc73.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eaca60722d35484e7cad5e6521465c75
470c81f1cab13436da9f94e97bb152fc9d01ad04
8c75170cdf9f6b97aef972568348aa4e6d67486ad1fdb7aa9d346e1cc8ae9df7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626efb39-4b90-4979-bc7d-1a1ba9e7fc73.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9290
x-amzn-requestid: 5ed93026-d87a-4c82-81ce-8faa9e8dba60
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fsnFtFVUoAMF6Bw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db5224-0e5fea32709d6f665f6b09db;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 06:03:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AD5rpaPGI6jezDtJBS7-XTUoJQetiG6yyo6VbDfBYzk9RwPNYN5h2Q==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:57:11 GMT
etag: "470c81f1cab13436da9f94e97bb152fc9d01ad04"
content-type: image/jpeg
age: 2981
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01d9feca-e9dc-4ee4-9694-bcc983e3a7c1.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01d9feca-e9dc-4ee4-9694-bcc983e3a7c1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0d632f8be93820b9746f76146fe3ff0e
7e5e9b16819af678ba84ddb6f45c073e659e2f4e
26ad66cf5e4fe4de99ad31b5c4f0fa3d05c085be04610de8ad80989528c100bf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F01d9feca-e9dc-4ee4-9694-bcc983e3a7c1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6434
x-amzn-requestid: ccf74c35-c654-4a9a-8121-ab27fc4cd862
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WWYFbJoAMFgSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f5-10dedb6a287acd2b10cdfdb4;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 3bv0yNuzTWh742AZFesuU0caKmg0nMFc3P0bLYkhGd-TAeg5R9W_vQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:10:24 GMT
age: 5788
etag: "7e5e9b16819af678ba84ddb6f45c073e659e2f4e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
200 OK 3.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d7a466d89c75ff3459b7328591db52cf
c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb
e73243be3d01d12a224c4e9826c4f52610cf7722eee69f62755278d7550705f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe8a9d301-2b38-4046-91c2-941ed351597a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3474
x-amzn-requestid: 5846c080-9f25-4590-863c-8af2126cdbe1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f1WXEEbnoAMFRdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ded0f9-1bd490125feadc14366e7ca0;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 21:41:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: d8aQmkW-aqLFpb79RynlJG2vY1GTDbjLNY0Qukgg_WIjdI6cmbVKFw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 22:10:58 GMT
etag: "c3f29f9c2fbdc1fa2aef7a9e79ca796b28394afb"
content-type: image/jpeg
age: 5754
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fef803fc0-c789-4c2b-8cb2-33bef88abc9c.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fef803fc0-c789-4c2b-8cb2-33bef88abc9c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bbb38d805862a1b3081eebf256e0dae0
4a5cb01390d897be8721cd4551c74d0452aff640
02443891d0533f37fe38b16febafc86fa64c457dc1827b97ec535d623486d549
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fef803fc0-c789-4c2b-8cb2-33bef88abc9c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8691
x-amzn-requestid: 51bb839e-c32c-4be9-9f38-7f8044160e70
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVsLgFPqIAMFfww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d22716-3794126b47a79aed27e1aac4;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:09:10 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 9du1ien5j1WSLplBzT5AAV-xIPKNgg4-8tdjux_iEGXNGaCcj29Xog==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 03:37:50 GMT
age: 72542
etag: "4a5cb01390d897be8721cd4551c74d0452aff640"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 251f1a5d671fb797fb98e9a71754c341
335425603d9eec146a3c03422dbca91134272e53
74932f07561287e33302aabcf9c639e9df7ae0fbc4bf71f5467310aabafea208
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fed9dd21c-6496-4f6e-b306-570e4802aba4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6202
x-amzn-requestid: 01b85fcd-69a0-49da-8640-32a3ef19378a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi3bUFEJoAMFapg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76c48-14817e717361e09170714e9d;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 07:05:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1_1mEN4j5cciWEiimz4PRjx3PNGnrSRib9oEJAdYLrrtyjqnz_zvcQ==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 04 Feb 2023 13:05:46 GMT
age: 38466
etag: "335425603d9eec146a3c03422dbca91134272e53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/xenforo/xenforo.js?_v=71f23857
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/xenforo/xenforo.js?_v=71f23857
IP
Analyzer Verdict Alert fortinet Malware
GET /js/lolzteam/xenforo/xenforo.js?_v=71f23857 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
etag: W/"63dd2afa-7529f"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
last-modified: Saturday, 04-Feb-2023 14:16:42 GMT
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/FroalaEditor/fix.js?_v=71f23857
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/FroalaEditor/fix.js?_v=71f23857
IP
GET /js/lolzteam/FroalaEditor/fix.js?_v=71f23857 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
etag: W/"63dc2f73-4e93"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
last-modified: Saturday, 04-Feb-2023 14:16:42 GMT
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/mmenu-light.js?_v=71f23857
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/mmenu-light.js?_v=71f23857
IP
Analyzer Verdict Alert fortinet Malware
GET /js/lolzteam/mmenu-light.js?_v=71f23857 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
etag: W/"636e337e-984"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
last-modified: Saturday, 04-Feb-2023 14:16:42 GMT
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/im/mustache.min.js
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/im/mustache.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /js/lolzteam/im/mustache.min.js HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
etag: W/"636e337e-26e1"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
last-modified: Tuesday, 31-Jan-2023 23:40:58 GMT
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/lolzteam/FroalaEditor/utility.js?_v=71f23857
200 OK 0 B URL HTTP/2 zelenka.guru/js/lolzteam/FroalaEditor/utility.js?_v=71f23857
IP
Analyzer Verdict Alert fortinet Malware
GET /js/lolzteam/FroalaEditor/utility.js?_v=71f23857 HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: application/javascript
vary: Accept-Encoding, Accept-Encoding
etag: W/"63d05260-c17"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
last-modified: Saturday, 04-Feb-2023 14:16:42 GMT
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/users.svg
200 OK 0 B URL HTTP/2 zelenka.guru/styles/mm/users.svg
IP
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/users.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: W/"6315c321-70b"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
zelenka.guru/js/jquery/jquery-2.1.4.min.js
200 OK 0 B URL HTTP/2 zelenka.guru/js/jquery/jquery-2.1.4.min.js
IP
Analyzer Verdict Alert fortinet Malware
GET /js/jquery/jquery-2.1.4.min.js HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: application/javascript
last-modified: Tue, 03 Jan 2023 19:17:12 GMT
vary: Accept-Encoding, Accept-Encoding
etag: W/"63b47f38-1499c"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
mc.yandex.ru/watch/85597711?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A833%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1011113482619%3Ahid%3A800936269%3Az%3A0%3Ai%3A20230204234729%3Aet%3A1675554450%3Ac%3A1%3Arn%3A422271439%3Arqn%3A1%3Au%3A1675554450250650018%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C315%2C0%2C1%2C0%2C%2C413%2C37%2C%2C%2C%2C786%3Aco%3A0%3Ans%3A1675554448661%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675554450%3At%3A%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/85597711?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A833%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1011113482619%3Ahid%3A800936269%3Az%3A0%3Ai%3A20230204234729%3Aet%3A1675554450%3Ac%3A1%3Arn%3A422271439%3Arqn%3A1%3Au%3A1675554450250650018%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C315%2C0%2C1%2C0%2C%2C413%2C37%2C%2C%2C%2C786%3Aco%3A0%3Ans%3A1675554448661%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675554450%3At%3A%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
GET /watch/85597711?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A833%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1011113482619%3Ahid%3A800936269%3Az%3A0%3Ai%3A20230204234729%3Aet%3A1675554450%3Ac%3A1%3Arn%3A422271439%3Arqn%3A1%3Au%3A1675554450250650018%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C315%2C0%2C1%2C0%2C%2C413%2C37%2C%2C%2C%2C786%3Aco%3A0%3Ans%3A1675554448661%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675554450%3At%3A%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20(Lolzteam)&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zelenka.guru
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/85597711/1?wmode=7&page-url=https%3A%2F%2Fzelenka.guru%2Faccount-confirmation%2F6559443%2Femail%3Fc%3DsVKZ5bYT8pHRt_Af&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A833%3Afu%3A1%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A1011113482619%3Ahid%3A800936269%3Az%3A0%3Ai%3A20230204234729%3Aet%3A1675554450%3Ac%3A1%3Arn%3A422271439%3Arqn%3A1%3Au%3A1675554450250650018%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C315%2C0%2C1%2C0%2C%2C413%2C37%2C%2C%2C%2C786%3Aco%3A0%3Ans%3A1675554448661%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1675554450%3At%3A%D0%A4%D0%BE%D1%80%D1%83%D0%BC%20%D1%81%D0%BE%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D0%BE%D0%B9%20%D0%B8%D0%BD%D0%B6%D0%B5%D0%BD%D0%B5%D1%80%D0%B8%D0%B8%20%E2%80%94%20Zelenka.guru%20%28Lolzteam%29&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sat, 04 Feb 2023 23:46:52 GMT
access-control-allow-origin: https://zelenka.guru
set-cookie: yabs-sid=2637729051675554412; Path=/; SameSite=None; Secure
i=1XOug8ZQ4kd1HJOEaF6HJESqPKhVTpd90D0CjCNbyBrfl/7Fv66Q4n/Xb4HKzNUAOQnw3UAhTrF+hERG/0lMQYThMgI=; Expires=Tue, 01-Feb-2033 23:46:48 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1156176501675554412; Expires=Sun, 04-Feb-2024 23:46:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=1156176501675554412; Expires=Sun, 04-Feb-2024 23:46:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707090412.yc.1675554412#1707090412.yrts.1675554412#1707090412.yrtsi.1675554412; Expires=Sun, 04-Feb-2024 23:46:52 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 04-Feb-2023 23:46:52 GMT
last-modified: Sat, 04-Feb-2023 23:46:52 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/profile.svg
200 OK 0 B URL HTTP/2 zelenka.guru/styles/mm/profile.svg
IP
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/profile.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
vary: Accept-Encoding
last-modified: Mon, 05 Sep 2022 09:36:33 GMT
etag: W/"6315c321-b7c"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,600;1,400;1,600&display=swap
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css2?family=Open+Sans:ital,wght@0,400;0,600;1,400;1,600&display=swap
IP
GET /css2?family=Open+Sans:ital,wght@0,400;0,600;1,400;1,600&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 04 Feb 2023 23:46:51 GMT
date: Sat, 04 Feb 2023 23:46:51 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zelenka.guru/styles/mm/home.svg
200 OK 0 B URL HTTP/2 zelenka.guru/styles/mm/home.svg
IP
Analyzer Verdict Alert fortinet Malware
GET /styles/mm/home.svg HTTP/1.1
Host: zelenka.guru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://zelenka.guru/account-confirmation/6559443/email?c=sVKZ5bYT8pHRt_Af
Cookie: sfwefwe=7d0c17287f652c7263c275df0e332489; xf_session=87100c46b7c5daa0b3f10288430a6cd3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 04 Feb 2023 23:46:51 GMT
content-type: image/svg+xml
content-length: 749
last-modified: Mon, 05 Sep 2022 09:36:32 GMT
etag: "6315c320-2ed"
expires: Tue, 07 Feb 2023 23:46:51 GMT
cache-control: max-age=259200
access-control-allow-origin: https://lzt.market
access-control-allow-methods: GET,HEAD,OPTIONS,POST,PUT
access-control-allow-headers: x-ajax-referer
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
accept-ranges: bytes
X-Firefox-Spdy: h2
151.80.169.29
216.58.207.227
88.212.201.198
104.18.21.226
23.36.77.32