| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash116d4d1edb43ea3783c92812f245f108 02c09fc6450c50f5d2f7f6162fed01cf2c4bf6b8 f661a4c5b81edb82ec095d2d50b655e19536630577352b6abbfc3962adf3454c
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F661A4C5B81EDB82EC095D2D50B655E19536630577352B6ABBFC3962ADF3454C"
Last-Modified: Sun, 23 Jun 2024 01:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5216
Expires: Mon, 24 Jun 2024 14:32:35 GMT
Date: Mon, 24 Jun 2024 13:05:39 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash31c219b3ac9b4615f1a78cd882995e6c 1bb1aedb59500ceabd4f44ae9b7317c544084afd 6e8de7454df9b981f3c2bd8746558f3eb5c48599c66fc0f5301169c0ed42c8fe
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6E8DE7454DF9B981F3C2BD8746558F3EB5C48599C66FC0F5301169C0ED42C8FE"
Last-Modified: Sat, 22 Jun 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10692
Expires: Mon, 24 Jun 2024 16:03:52 GMT
Date: Mon, 24 Jun 2024 13:05:40 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash5921b10ddbe0b24f0a8edead6ec181b2 6691a5ac00a00feed5de61cd277ca741b2c29862 3c107c0a5dd06bc96ff917c92843ab276923fd751ecd5e48eefafc661b914ae2
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "3C107C0A5DD06BC96FF917C92843AB276923FD751ECD5E48EEFAFC661B914AE2"
Last-Modified: Sat, 22 Jun 2024 04:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7581
Expires: Mon, 24 Jun 2024 15:12:01 GMT
Date: Mon, 24 Jun 2024 13:05:40 GMT
Connection: keep-alive
|
|
| zeriun.cc/assets/img/logo.png |  172.67.205.204 | 200 OK | 955 B |
URL GET HTTP/3zeriun.cc/assets/img/logo.png IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typePNG image data, 96 x 26, 8-bit colormap, non-interlaced Hash53c0bc61d0caa6e5b53f98f91a00a07f 6a5423543df64d38e017f824c614c3e1ddd2a1fb 814f1dcc6f468b5463dfd583953392ec02a254911f2ae17ee2b2b8018a9b1874
GET /assets/img/logo.png HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/png
content-length: 955
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:25:56 GMT
etag: W/"3bb-18707c7f181"
cf-cache-status: HIT
age: 951943
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MqquWsrOqxqTbdneRJWggG%2FeDS7C6XD9bJPd2XYn1P%2Bj7UQ1G3ji%2Fpm4OGDHWgZX001VRnxKWZx10A9XPzU4yj5%2F4b5WNcr6ZsLPLU0hWEe7WAszVD7G2N8yg4o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee475b0856c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha |  104.17.3.184 | 302 Found | 0 B |
URL GET HTTP/2challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha IP104.17.3.184:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /turnstile/v0/api.js?compat=recaptcha HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 24 Jun 2024 13:05:41 GMT
content-length: 0
access-control-allow-origin: *
cache-control: max-age=300, public
cross-origin-resource-policy: cross-origin
location: /turnstile/v0/b/c7e29c8c8b6e/api.js
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee478993569f-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zeriun.cc/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 | 172.67.205.204 | 200 OK | 77 kB |
URL GET HTTP/3zeriun.cc/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 77160, version 4.459 Hashaf7ae505a9eed503f8b8e6982036873e d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/assets/css/style.css?v=2.25.7
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: font/woff2
content-length: 77160
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:14:23 GMT
etag: W/"12d68-18707bd5c4a"
cf-cache-status: HIT
age: 928484
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tlYnBAfsvc6BGskyBP88AAPHo737ju76PUx9gMZU9i0k4PZW8ltgENZmTo5nJtYot%2BF9BpBAgViT0yOGfPwuTnbCjWOFWHz2y1n%2FI%2FZKo%2FJ9qzMFALerp9Mjq1k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee47dba756c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash1b7d3e43075eb91e9cdde219781a8f4b 6f90a080d6b52f741280893044147852df3615d6 9d8bd948e018815597fa8ee84422d57b0236b043e85b7e5f20af0c9c395cf341
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Jun 2024 13:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| zeriun.cc/uploads/thumbs/0FaLvnHv7Hsb.jpg | 172.67.205.204 | 200 OK | 7.1 kB |
URL GET HTTP/3zeriun.cc/uploads/thumbs/0FaLvnHv7Hsb.jpg IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x180, components 3 Hash87ddcdaf0fa7771592bcb102adeb96d1 33cf79d1d2b4efbb589420a35e1bf33f6b967941 47e1af746978cf7b9291a62a8c1ac0dd6d4c5d05b0dc811496ed08f9f825c446
GET /uploads/thumbs/0FaLvnHv7Hsb.jpg HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/jpeg
content-length: 7127
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Thu, 02 Feb 2023 18:07:16 GMT
etag: W/"1bd7-186134fb420"
cf-cache-status: HIT
age: 931838
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BjhaBmdsDQPlEXEpkmnpb2e9fzuzg1kNzacDSlfHkmcwHPC9ehkEz3S05wi66jeNa0Mpnqtat2p36CV1NBMgqy7Jb5h9ZyBaj%2FR3AD9lJwq0YGyIGiIlXnhNheI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee47fbed56c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| zeriun.cc/uploads/photos/1LL3sS5KTixw.jpg | 172.67.205.204 | 200 OK | 2.0 kB |
URL GET HTTP/3zeriun.cc/uploads/photos/1LL3sS5KTixw.jpg IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typeJPEG image data, baseline, precision 8, 89x50, components 3 Hash48f8d5d4975d7842959db6005e23a6c3 3f23a5dd9ae240c9319e450119dda9ee0e3fcb9c 01cc31bdd486bfcfc8938103117306d05755cca431cef85da7f2e7830f6109fd
GET /uploads/photos/1LL3sS5KTixw.jpg HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/jpeg
content-length: 2022
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Thu, 06 Jun 2024 06:01:09 GMT
etag: W/"7e6-18fec230614"
cf-cache-status: HIT
age: 511627
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QmnaO6G5rAEUKpjr9fC%2FUE2J6bUkDxp1ekAE%2Fwo%2FFCsHx7SArHq9MxhkZcfRd5vjjMbnU%2BCnWSv1MAYFF7C6nlt6jf32vlDCkT2lVPwbgqOzEXpJohjE2S097q4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee47fbee56c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash1b7d3e43075eb91e9cdde219781a8f4b 6f90a080d6b52f741280893044147852df3615d6 9d8bd948e018815597fa8ee84422d57b0236b043e85b7e5f20af0c9c395cf341
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Jun 2024 13:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| challenges.cloudflare.com/turnstile/v0/b/c7e29c8c8b6e/api.js | 104.17.3.184 | 200 OK | 25 kB |
URL GET HTTP/3challenges.cloudflare.com/turnstile/v0/b/c7e29c8c8b6e/api.js IP104.17.3.184:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerCloudflare, Inc. Subjectchallenges.cloudflare.com Fingerprint5F:E4:AA:8C:2E:24:D2:B1:69:9D:13:28:31:5C:65:FA:97:2A:E9:6E ValidityFri, 18 Aug 2023 00:00:00 GMT - Sat, 17 Aug 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (42645) Hashc9b9b8d1382f8ebb60c396dd27d06c30 c3600b6d612df83ba61677c657058a0c70eea92b fdf9b58fcf84b6c75c42ba56855fb02e0a990771aa1932c18a0fa73ef640000a
GET /turnstile/v0/b/c7e29c8c8b6e/api.js HTTP/1.1
Host: challenges.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zeriun.cc/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/javascript; charset=UTF-8
last-modified: Wed, 19 Jun 2024 17:35:52 GMT
cache-control: max-age=31536000
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee47e853b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| zeriun.cc/uploads/photos/mGZEdbhoQnn5.jpg | 172.67.205.204 | 200 OK | 1.9 kB |
URL GET HTTP/3zeriun.cc/uploads/photos/mGZEdbhoQnn5.jpg IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typeJPEG image data, baseline, precision 8, 89x50, components 3 Hash0b47448f7c5f6888daf9c55b5c2ca51c 1a6de0fb882b927c30183891de22c5b25c07c192 285c3ab289470995ecac0df56622f8c38798063a5bb77528c12cbc47004d0d8c
GET /uploads/photos/mGZEdbhoQnn5.jpg HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/jpeg
content-length: 1859
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Mon, 27 Mar 2023 13:43:00 GMT
etag: W/"743-187234ecebd"
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RpM3BIaetWlCM%2FwBUQ6w5jDC3HfQQAaVz8VI1N%2FQeb0by1WlJ%2FU9QIxHQgezqpr0JJ5UTtta1H6xlMPVoZ0kqG%2F%2B7mh%2BM81KgyQRTHMzYJQK4WLtSDIzhnaHitc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee48ac8e56c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hash1b7d3e43075eb91e9cdde219781a8f4b 6f90a080d6b52f741280893044147852df3615d6 9d8bd948e018815597fa8ee84422d57b0236b043e85b7e5f20af0c9c395cf341
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Jun 2024 13:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| inklinkor.com/tag.min.js | 172.67.211.29 | 200 OK | 0 B |
IP172.67.211.29:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectinklinkor.com Fingerprint7F:21:50:36:30:E5:54:C3:4F:43:58:95:A3:71:77:41:A8:A7:F0:93 ValiditySat, 15 Jun 2024 18:50:43 GMT - Fri, 13 Sep 2024 18:50:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
HEAD /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zeriun.cc/
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: ba3733555c4006288ac455e37fc21bc1
cache-control: max-age=86400
last-modified: Sun, 23 Jun 2024 23:37:26 GMT
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://zeriun.cc
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 25 Jun 2024 12:29:01 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 2200
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ch5BxgrN3t8wXV0jGtEqIbWeg2HVwEiFAqFKGJkrIPwlbx5hrpJ6C5PQuPc5vF7v4b65BP%2BCsfqvGw2erYhMjLY88c8vulIDayXw%2F3GAkgo1jg04OTA6nOkfgtiFV1bX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee496eabb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD | 172.67.205.204 | 200 OK | 6.1 kB |
URL User Request GET HTTP/2zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD IP172.67.205.204:443
CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (7778) Hasha3b44fb26321e936606ae7422e8ada47 00bffa7d077864974058c976d74e2495406978db 622be6d2f4aa6df067c7ad9c5cba59c487a5ca764c9e953a6f452658dcf0aa5e
GET /serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:40 GMT
content-type: text/html; charset=utf-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
set-cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV; Path=/; HttpOnly; Secure; SameSite=Lax
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3PGg71A1e2Dd6YbffR5DxozDlZU4VsGTZoLxU4yQZACNdl1ptzbzJQ4wnP07YUNeFbt1iz0iSEosE6fFbwj3yxVDx18gWFqrAn%2FGaDm3ogRhQX6z7YyKbX%2Fi0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee445d2d56a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 | 216.58.207.227 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 IP216.58.207.227:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint78:DC:A6:9E:E8:DF:26:D4:6F:A0:54:48:4B:48:74:34:3F:3D:F6:23 ValidityMon, 03 Jun 2024 07:32:58 GMT - Mon, 26 Aug 2024 07:32:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15744, version 1.0 Hash15d9f621c3bd1599f0169dcf0bd5e63e 7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52 f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Jun 2024 08:13:47 GMT
expires: Sat, 21 Jun 2025 08:13:47 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
age: 276714
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| o.pki.goog/wr2 | 142.250.74.131 | | 471 B |
IP142.250.74.131:0
Hashfe0e1cf3601917b1d3938ebdcbe313b7 825eea278fd2f33e1ec30c2115382ea122efd063 6e565034e0ac9361cf387a24d25a95b52b38af993d674699dffd9cc83b0f08e3
POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 24 Jun 2024 13:05:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| zeriun.cc/assets/css/style.css?v=2.25.7 | 172.67.205.204 | 200 OK | 39 kB |
URL GET HTTP/3zeriun.cc/assets/css/style.css?v=2.25.7 IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typegzip compressed data, from Unix Hashcaa397a5f8a9409a8559bbd81fe1180f 136a09b9110e8cf930e4b9510b05e90fd14da711 08d63d35af92aa8189fc678a08251046c987ab8b53e34dc6e0ca22e1ac20f5f8
GET /assets/css/style.css?v=2.25.7 HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: text/css; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 14 Feb 2024 16:29:45 GMT
etag: W/"31f5c-18da873eae1"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 946027
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ij3Q5ar%2BE5X36OF%2FFffuu3pUagMHGSEJv%2BZZ%2BTE%2B0krNWnb3kue6xHROyKkQ0WD%2FiLGQ85VE%2BH2nvat0gZdUUkSZd5LVPu7fxTjMz72r2CqTMrHrujtwQ%2Bl2Vc8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee475afc56c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| zeriun.cc/assets/js/pk.js?c=20245113 | 172.67.205.204 | 200 OK | 1.1 kB |
URL GET HTTP/3zeriun.cc/assets/js/pk.js?c=20245113 IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typeJavaScript source, ASCII text, with very long lines (985), with no line terminators Hash999815ffd3dea45df6b533a5e2129cde 6ef5d72560caf3facb83b8187d2c939551789c8a ba3feeff7c8d146d5e43e15df1993fc12ba9b5b3fd70a7ee463d1e3983edc374
GET /assets/js/pk.js?c=20245113 HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Mon, 24 Jun 2024 11:05:00 GMT
etag: W/"3d9-19049ebac70"
vary: Accept-Encoding
cf-cache-status: HIT
age: 4631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XtNjjmHJHVI8iIerNRYTVCyzTvMCidO644yuQVnBhtuyVWJ%2F8fZqAtdDdvrvGTQz2b20txjPgo6GuGvb4VfQpGDdYM%2Bfu%2BnUlHfOfkSX1U6Y1BDTNz3A0SurfGY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee47fbec56c4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| zeriun.cc/api/ping | 172.67.205.204 | 200 OK | 13 B |
IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
Hashf9198d723cba416707e9163bf9c95f40 8e370dc7e9d6ac3f0d5487206aa2c373f5aaa5b8 3dac47acb1d3459ecf35c9e8452b03e68e68bd14c85982a69324655e41352d1c
POST /api/ping HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
x-csrf-token: Ll00ja3t-xtV7ONMLfkP5S2quTnBkshk6FUE
Content-type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 107
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/json; charset=utf-8
content-length: 13
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
set-cookie: uid=aSlweXlZnbTpC6WEB7Dm5MRsh72CW5; Max-Age=31536000; Path=/; Expires=Tue, 24 Jun 2025 13:05:41 GMT; HttpOnly; Secure
sid=0Dy-M7xta8xV0qApeDYXwn0ltj98kn; Path=/; HttpOnly; Secure
etag: W/"d-jjcNx+nWrD8NVIcgaqLDc/Wqpbg"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jkPZQ80%2BjpcC6aalTQDe9Y1KWMSb8Gef2w4t%2F%2FbdhLYhclpH8UgG6b7HiJe9IeGPg4vNVj1472qM%2BbpfI7EXnzn4yoOCpAbjfjiVrxHwYP5wULbLbH0fsKsaalY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee4a1e0c56c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| www.blockadsnot.com/tyle/oImager.min.js |  185.76.9.14 | 200 OK | 12 kB |
URL GET HTTP/2www.blockadsnot.com/tyle/oImager.min.js IP185.76.9.14:443 ASN#60068 Datacamp Limited
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerLet's Encrypt Subject1158060716.rsc.cdn77.org Fingerprint10:08:2B:8D:3F:3E:D5:9D:80:D3:F4:CF:0A:39:67:D3:CD:2B:9C:C1 ValidityTue, 30 Apr 2024 06:35:33 GMT - Mon, 29 Jul 2024 06:35:32 GMT
File typegzip compressed data, from Unix Hash96882ddb5be9cb5d0bb57080a48d553c c5ca58138a5ad19d25e07ac2ed38f337c485df0c b4a865dc1ca9003e7884951f7745fecc615e5497724f1c02bf28392af8085574
GET /tyle/oImager.min.js HTTP/1.1
Host: www.blockadsnot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/x-javascript
popads-node: wb6
expires: Mon, 01 Jul 2024 11:06:40 GMT
access-control-allow-origin: https://zeriun.cc
link: <https://blockadsnot.com/>;rel=preconnect
cache-control: public, max-age=604800
x-77-nzt: EwgBuUwJDQFBDAG5TAoMAfcjFwAADAElE8I0AffCBAAA
x-77-nzt-ray: c0a4cc28697f78c9256f79661a3ce61a
x-accel-expires: @1719832000
x-accel-date: 1719228418
x-77-cache: HIT
x-77-age: 7141
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
x-cache: MISS
x-77-pop: stockholmSE
X-Firefox-Spdy: h2
|
|
| zeriun.cc/assets/img/icons/android-icon-192x192.png | 172.67.205.204 | 200 OK | 1.8 kB |
URL GET HTTP/3zeriun.cc/assets/img/icons/android-icon-192x192.png IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typePNG image data, 192 x 192, 4-bit colormap, non-interlaced Hash7f56e927c9b6c2d02c77649dbfdbe0ad 1f35098e18716f527f3866d3223201e42c566451 3e5a72f3eb6ee0f7e3382fcee5cfebf8a8ececaf2d925a6a9991beef1d236d55
GET /assets/img/icons/android-icon-192x192.png HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV; uid=aSlweXlZnbTpC6WEB7Dm5MRsh72CW5; sid=0Dy-M7xta8xV0qApeDYXwn0ltj98kn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/png
content-length: 1798
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:25:57 GMT
etag: W/"706-18707c7f62d"
cf-cache-status: HIT
age: 935803
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7epNg93QvebIEdAf4M%2BV0oYCD6js4qdpW17kQ2sH6Y0fV4R8wt%2BT2XEUSKx%2B9R1Cg%2F0i3E%2BiRkF0%2Buv6mrXT%2Fwig6dF186oHJ1FxxB2iyXReSyRJ1Vhe6SzvYEA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee4bc84d56c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| zeriun.cc/assets/js/main.js?v=2.25.7 | 172.67.205.204 | 200 OK | 9.7 kB |
URL GET HTTP/3zeriun.cc/assets/js/main.js?v=2.25.7 IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typegzip compressed data, from Unix Hash34c28c957324b97bb5f70ccbe292e02f df688e013ed1aed67f23a107a919c870d7c3d18d ede3e741d19dc808153bdd7e76386f1812afa37ba80e25a80015d23c2a4c20e8
GET /assets/js/main.js?v=2.25.7 HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: application/javascript; charset=UTF-8
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Sat, 13 Apr 2024 08:11:04 GMT
etag: W/"8593-18ed68290cf"
vary: Accept-Encoding
content-encoding: gzip
cf-cache-status: HIT
age: 951943
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PYkH3dNHHRxyOgN93Axxm1QfPrsz4NrLnsPSKqKYbP8ZTaDWAQBF0mNEFtdNPAipFEjcTn6bJ9L8PJhgybyJ3eKNz5pCL7Viq6JDzf467RD9dSTUM7ero9CpNPI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 898cee476b0e56c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| beakexcursion.com/ef/27/b4/ef27b4397ebe128596f54115f897329f.js | 172.240.108.76 | 200 OK | 31 kB |
URL GET HTTP/1.1beakexcursion.com/ef/27/b4/ef27b4397ebe128596f54115f897329f.js IP172.240.108.76:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerLet's Encrypt Subjectbeakexcursion.com Fingerprint01:D9:8D:18:37:33:60:05:63:BB:57:85:7F:E3:4F:24:3F:13:9F:C9 ValiditySat, 27 Apr 2024 06:14:45 GMT - Fri, 26 Jul 2024 06:14:44 GMT
File typeJavaScript source, ASCII text, with very long lines (65536), with no line terminators Hash6ebcab42aa686fce7f7fd83d199ebfc4 2d0ac26154ca927355c51e3c1a164cb7e8bcfde7 6cab02d39cb51415de918c1c61d69cd7ce301ca446f6436dbb4feaf0a862928d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ef/27/b4/ef27b4397ebe128596f54115f897329f.js HTTP/1.1
Host: beakexcursion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 24 Jun 2024 13:05:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2002e7987fb1aaa3d2e272be82d7f923
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ocsp.r2m03.amazontrust.com/ | 108.156.16.76 | | 471 B |
URL ocsp.r2m03.amazontrust.com/ IP108.156.16.76:0
Hashba70131cf3f4f7224816c7a182c90b77 b287e0b4994339891f42d2725132c8bf0ffd32da ac2d09e2ce8dffd37b13b1b2fd04cfb4583106797d65c428cad1105511b9cf3f
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=7200
Date: Mon, 24 Jun 2024 13:05:42 GMT
Last-Modified: Mon, 24 Jun 2024 11:34:47 GMT
Server: ECAcc (ska/F7AF)
X-Cache: Miss from cloudfront
Via: 1.1 d8b0b3928e53502c6ce822abc3cc3d70.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HEL51-P1
X-Amz-Cf-Id: rWt-lu01jytYZyhRQaqLIN0cQagSe1dRwRF-M3ABCpXu3KdsyRWawA==
Age: 5455
|
|
| proftrafficcounter.com/stats |  3.123.175.216 | 200 OK | 40 B |
URL GET HTTP/2proftrafficcounter.com/stats IP3.123.175.216:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerAmazon Subjectproftrafficcounter.com FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6 ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash2555fe6ae41a211fee701a0a599cef0b c159415692517445e66efc1856a0939e867df035 391fcb711c805507411cf77badd6e489bdbd53921160bdc3d5d73d0130e4b210
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://zeriun.cc
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=bfb2420d-39fa-48dd-99ad-8088aa9e7580:1:1; expires=Thu, 22 Jun 2034 13:05:42 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
|
|
| 6.adsco.re/ | 104.17.167.186 | 200 OK | 0 B |
IP104.17.167.186:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://zeriun.cc
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee51182d5697-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashfe36e270c1ecfa3891cc7b505e7894b6 ce43401e7146eb139a1e3caf7db957e6b9531dc3 bd791e8f44b990a0091febc3cc3b24799eb26b87fe5aa381ad98ae4662f7f802
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BD791E8F44B990A0091FEBC3CC3B24799EB26B87FE5AA381AD98AE4662F7F802"
Last-Modified: Sun, 23 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10756
Expires: Mon, 24 Jun 2024 16:04:58 GMT
Date: Mon, 24 Jun 2024 13:05:42 GMT
Connection: keep-alive
|
|
| 6.adsco.re:2087/ | 104.17.167.186 | 200 OK | 0 B |
IP104.17.167.186:2087
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: https://zeriun.cc
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee512f3cb518-OSL
alt-svc: h3=":2087"; ma=86400
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashfe36e270c1ecfa3891cc7b505e7894b6 ce43401e7146eb139a1e3caf7db957e6b9531dc3 bd791e8f44b990a0091febc3cc3b24799eb26b87fe5aa381ad98ae4662f7f802
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BD791E8F44B990A0091FEBC3CC3B24799EB26B87FE5AA381AD98AE4662F7F802"
Last-Modified: Sun, 23 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10756
Expires: Mon, 24 Jun 2024 16:04:58 GMT
Date: Mon, 24 Jun 2024 13:05:42 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.77.32 | | 504 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashfe36e270c1ecfa3891cc7b505e7894b6 ce43401e7146eb139a1e3caf7db957e6b9531dc3 bd791e8f44b990a0091febc3cc3b24799eb26b87fe5aa381ad98ae4662f7f802
POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BD791E8F44B990A0091FEBC3CC3B24799EB26B87FE5AA381AD98AE4662F7F802"
Last-Modified: Sun, 23 Jun 2024 05:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10756
Expires: Mon, 24 Jun 2024 16:04:58 GMT
Date: Mon, 24 Jun 2024 13:05:42 GMT
Connection: keep-alive
|
|
| recordedthereby.com/sfp.js | 104.21.91.24 | 200 OK | 28 kB |
URL GET HTTP/2recordedthereby.com/sfp.js IP104.21.91.24:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services LLC Subjectrecordedthereby.com FingerprintA3:3F:9B:AE:CF:C6:1B:C3:8B:FC:65:01:2F:06:6A:22:60:3C:8E:AF ValidityWed, 08 May 2024 14:16:18 GMT - Tue, 06 Aug 2024 14:16:17 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators Hash7e3e44049654b6e244c1777e68ffb8e7 8f2a8298666d607afd92a0baa362ef4dc9ccd039 4acac8b8ff23671d365150818f3c39bbbfa08b1a1842d73de5933e0fea26454b
GET /sfp.js HTTP/1.1
Host: recordedthereby.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: a0f27683f71ed9b0de0c992b2c5a3c47
pragma: no-cache
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZtunWZHmN2AfUP3Pes%2Bq0OUPUb%2FWdYOGZwG%2B3SfPm%2F6Sy8N4rt%2B1Ah34w4yvJVFwcUi%2FdvcO2NdX%2Ba9Nd4a%2Bnz7o0Xz%2Fm%2FH3YtjTlSmkr4EFupQ8fDtPwGyitDgQ8%2BAHG16etXRo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee4e2b3bb509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 4.adsco.re/ | 162.252.214.5 | 200 OK | 62 B |
IP162.252.214.5:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Jun 2024 13:05:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://zeriun.cc
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| c.adsco.re/ | 104.17.166.186 | | 30 kB |
IP104.17.166.186:0
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (881) Hashc626ca77548642fbab246d944b6533a5 bbda9857a83048bd607d2bb916cd0f1e4bac5b88 f5d310d03e3a80feaf50f553297436d007ece35ffb191a1c3e46fb985835aad5
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 25 Jul 2024 13:05:41 GMT
etag: W/"xibKd1SGQvurJG2US2UzpQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 970138
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee4accfd56ba-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| 6.adsco.re/ | 104.17.166.186 | 200 OK | 0 B |
IP104.17.166.186:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: 6.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/plain;charset=UTF-8
content-length: 0
access-control-allow-origin: *
cache-control: private, max-age=10
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-max-age: 2592000
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee520dd856b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| c.adsco.re/ | 104.17.166.186 | | 30 kB |
IP104.17.166.186:0
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File typegzip compressed data, max speed, from Unix Hash3bd9c63d3308ef2fd1ef294bfb1c1117 24ce99fec792c08e68297688bbe89d9081335bfc 82106f7cd9265da33ea593a9cdb657ca816a4b164486f733459d61170f2cd8e1
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://c.adsco.re/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 25 Jul 2024 13:05:42 GMT
etag: W/"xibKd1SGQvurJG2US2UzpQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 970139
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee51edc056b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| e6.o.lencr.org/ | 23.36.76.226 | | 345 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash27472cacb49ef09b0a00d0657e646a5e 775f173037ab088b278894e547b669416fb53c96 48f1bd2904141ef4ac9545d509e39b60808698f05cd8aaf941fbfced36253f86
POST / HTTP/1.1
Host: e6.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "48F1BD2904141EF4AC9545D509E39B60808698F05CD8AAF941FBFCED36253F86"
Last-Modified: Fri, 21 Jun 2024 22:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7503
Expires: Mon, 24 Jun 2024 15:10:45 GMT
Date: Mon, 24 Jun 2024 13:05:42 GMT
Connection: keep-alive
|
|
| adsco.re/p | 162.252.214.5 | 200 OK | 874 B |
IP162.252.214.5:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File typeASCII text, with very long lines (1106), with no line terminators Hash2a551f6fbc3b258b7c6bbec15cefa3f5 caeb4500e2f638ed565134ee3e1deb8e0cfa135f 5b26922218e96292c3965c44ba053c864dde2c754546ef076d09f2ffd1fce97c
POST /p HTTP/1.1
Host: adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Length: 2176
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Jun 2024 13:05:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
AS-P-1: OK lon123
AS-P-2: OK
AS-P-3: OK
Access-Control-Max-Age: 2592000
Cache-Control: no-transform
Accept-CH: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
Access-Control-Allow-Origin: https://zeriun.cc
Access-Control-Allow-Credentials: true
Content-Encoding: gzip
|
|
| txfvxhgacvf0.n4.adsco.re/ | 38.132.109.115 | 200 OK | 0 B |
URL POST HTTP/2txfvxhgacvf0.n4.adsco.re/ IP38.132.109.115:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerLet's Encrypt Subject*.n4.adsco.re FingerprintBE:41:74:B3:75:84:DD:5D:5A:13:CD:54:89:18:04:8E:D3:FA:1F:A7 ValidityWed, 19 Jun 2024 09:12:38 GMT - Tue, 17 Sep 2024 09:12:37 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: txfvxhgacvf0.n4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 16 Jun 2023 08:37:42 GMT
etag: "648c1f56-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| blockadsnot.com/iixflzofjdrntz?wMpnkEtc=BQMyAAAAAAAACZUAAk7-xiviGl9qyQG_DY8kIYY2KsEZql9bKK_ZPtygfKbW6JqCB3zHdLt61ByeJjXEDI8PZouHmpKyrEvukeKBDmc9DxB3ZUGlTS-UmoeuRyJIl5hlMOxK631_cG4bLByUz-cw0jOpdtqZuUmzUOXVEChot8mAIM36JFyoac0ELC5Si5LaaCm6HE2NC7fkuWWQbPGhSSkA1AuNGfTFcBp-0KGID2IZIO2FscuTsYnIUd-4QZFoVV0RKKtc51Wh3nh0YazdCSmYKop3bFjNuUSTRMwMLnEVCWcjIUmNYCq2RyV174lu1yTb1ctaMpAgXsyySVPysLQfSc9gnlWtQ2KZvn6glwr9uEL7Wc1jRLxtDS3hGBIBdVTW2n9cZOK9ZSy7EPcNBnYSl-dAqcadqKzKnwkDpTcPq-JGIFtW9SJY_zadWbatibUuFPAcR4LawCGA-zVDfrRIa2jFWRL0zdM9WOEx0ZCwX-3iZRizxba1eO-zLZSBZlw0MHDo_EThDs9kGboK5n6LuJBcmW6hrey7qcXlWgzTkxlXuWySYNc1DzAyy7PRdMg1AFSojyU8b2QlsZ2pcxoPo3RvCwTDTG0CLRNQ3b8kpZ1EzHk4H5-dFz6XQQdGi_Sbg_P5ulq5DeCsJrAGzz1y0U5e10W9PB3el9JmE-bLhlImi-tnlD4zUPqV6tAKmkGyqKP2DWM6nlNxKVblnx3P88pcHeatMxDnc1_zFd3yhy0cugFsA01Een3vQOcTOKya9nfXCMBkr8ornLMtNphIrkCLv5_YQEtcqQrj3MNNjqItCczLKvJ3fVTni6r1IdfUFji8FH-YF8kUziLxKnhHuXn_vGnum4n2WG-6IUNLqrNoFO0_UbKcDyUldOjhHU-bfYm2y-OuMYx5015ZCogCsT7tRzAV2uKButcVeAplVR2z4bD6l4LUbvw4W7kyRueYGSYLH2KDlfB3mkXYDPqiByuUNReomDpuPP6TkTY3i6VwUJxlLSK597Q9WCjOtTDx2_-GfgszaDeUa5lfPKSSn-fHqrC_KthkgnQ2kwmCGKkRND3Hdyvi7uvQCecAaq6fa_ox8GEYvxvE7Q&iMXamGgj=4&avNlYcjX=5091536&rAdxozsU=&QVsovKxO=5,0&qeIkKnCt=&DtGUAOcI=&s=1280,1024,1,1280,1024,0 | 208.95.112.254 | 200 OK | 44 B |
URL GET HTTP/2blockadsnot.com/iixflzofjdrntz?wMpnkEtc=BQMyAAAAAAAACZUAAk7-xiviGl9qyQG_DY8kIYY2KsEZql9bKK_ZPtygfKbW6JqCB3zHdLt61ByeJjXEDI8PZouHmpKyrEvukeKBDmc9DxB3ZUGlTS-UmoeuRyJIl5hlMOxK631_cG4bLByUz-cw0jOpdtqZuUmzUOXVEChot8mAIM36JFyoac0ELC5Si5LaaCm6HE2NC7fkuWWQbPGhSSkA1AuNGfTFcBp-0KGID2IZIO2FscuTsYnIUd-4QZFoVV0RKKtc51Wh3nh0YazdCSmYKop3bFjNuUSTRMwMLnEVCWcjIUmNYCq2RyV174lu1yTb1ctaMpAgXsyySVPysLQfSc9gnlWtQ2KZvn6glwr9uEL7Wc1jRLxtDS3hGBIBdVTW2n9cZOK9ZSy7EPcNBnYSl-dAqcadqKzKnwkDpTcPq-JGIFtW9SJY_zadWbatibUuFPAcR4LawCGA-zVDfrRIa2jFWRL0zdM9WOEx0ZCwX-3iZRizxba1eO-zLZSBZlw0MHDo_EThDs9kGboK5n6LuJBcmW6hrey7qcXlWgzTkxlXuWySYNc1DzAyy7PRdMg1AFSojyU8b2QlsZ2pcxoPo3RvCwTDTG0CLRNQ3b8kpZ1EzHk4H5-dFz6XQQdGi_Sbg_P5ulq5DeCsJrAGzz1y0U5e10W9PB3el9JmE-bLhlImi-tnlD4zUPqV6tAKmkGyqKP2DWM6nlNxKVblnx3P88pcHeatMxDnc1_zFd3yhy0cugFsA01Een3vQOcTOKya9nfXCMBkr8ornLMtNphIrkCLv5_YQEtcqQrj3MNNjqItCczLKvJ3fVTni6r1IdfUFji8FH-YF8kUziLxKnhHuXn_vGnum4n2WG-6IUNLqrNoFO0_UbKcDyUldOjhHU-bfYm2y-OuMYx5015ZCogCsT7tRzAV2uKButcVeAplVR2z4bD6l4LUbvw4W7kyRueYGSYLH2KDlfB3mkXYDPqiByuUNReomDpuPP6TkTY3i6VwUJxlLSK597Q9WCjOtTDx2_-GfgszaDeUa5lfPKSSn-fHqrC_KthkgnQ2kwmCGKkRND3Hdyvi7uvQCecAaq6fa_ox8GEYvxvE7Q&iMXamGgj=4&avNlYcjX=5091536&rAdxozsU=&QVsovKxO=5,0&qeIkKnCt=&DtGUAOcI=&s=1280,1024,1,1280,1024,0 IP208.95.112.254:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subjectblockadsnot.com Fingerprint96:00:00:44:50:47:F4:4D:23:DB:EE:86:80:A0:C4:5F:3A:EA:F5:03 ValidityMon, 14 Aug 2023 00:00:00 GMT - Fri, 13 Sep 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hashd5f0a25e4d3522d56d48ce7bc3e518fb 86794caff58f7fee6e684c2ba7195f970a8d6f4c 9d781128a8ece413b003d5612b8398bf9340ef7f5b751d12bd125ba523d3ceb5
GET /iixflzofjdrntz?wMpnkEtc=BQMyAAAAAAAACZUAAk7-xiviGl9qyQG_DY8kIYY2KsEZql9bKK_ZPtygfKbW6JqCB3zHdLt61ByeJjXEDI8PZouHmpKyrEvukeKBDmc9DxB3ZUGlTS-UmoeuRyJIl5hlMOxK631_cG4bLByUz-cw0jOpdtqZuUmzUOXVEChot8mAIM36JFyoac0ELC5Si5LaaCm6HE2NC7fkuWWQbPGhSSkA1AuNGfTFcBp-0KGID2IZIO2FscuTsYnIUd-4QZFoVV0RKKtc51Wh3nh0YazdCSmYKop3bFjNuUSTRMwMLnEVCWcjIUmNYCq2RyV174lu1yTb1ctaMpAgXsyySVPysLQfSc9gnlWtQ2KZvn6glwr9uEL7Wc1jRLxtDS3hGBIBdVTW2n9cZOK9ZSy7EPcNBnYSl-dAqcadqKzKnwkDpTcPq-JGIFtW9SJY_zadWbatibUuFPAcR4LawCGA-zVDfrRIa2jFWRL0zdM9WOEx0ZCwX-3iZRizxba1eO-zLZSBZlw0MHDo_EThDs9kGboK5n6LuJBcmW6hrey7qcXlWgzTkxlXuWySYNc1DzAyy7PRdMg1AFSojyU8b2QlsZ2pcxoPo3RvCwTDTG0CLRNQ3b8kpZ1EzHk4H5-dFz6XQQdGi_Sbg_P5ulq5DeCsJrAGzz1y0U5e10W9PB3el9JmE-bLhlImi-tnlD4zUPqV6tAKmkGyqKP2DWM6nlNxKVblnx3P88pcHeatMxDnc1_zFd3yhy0cugFsA01Een3vQOcTOKya9nfXCMBkr8ornLMtNphIrkCLv5_YQEtcqQrj3MNNjqItCczLKvJ3fVTni6r1IdfUFji8FH-YF8kUziLxKnhHuXn_vGnum4n2WG-6IUNLqrNoFO0_UbKcDyUldOjhHU-bfYm2y-OuMYx5015ZCogCsT7tRzAV2uKButcVeAplVR2z4bD6l4LUbvw4W7kyRueYGSYLH2KDlfB3mkXYDPqiByuUNReomDpuPP6TkTY3i6VwUJxlLSK597Q9WCjOtTDx2_-GfgszaDeUa5lfPKSSn-fHqrC_KthkgnQ2kwmCGKkRND3Hdyvi7uvQCecAaq6fa_ox8GEYvxvE7Q&iMXamGgj=4&avNlYcjX=5091536&rAdxozsU=&QVsovKxO=5,0&qeIkKnCt=&DtGUAOcI=&s=1280,1024,1,1280,1024,0 HTTP/1.1
Host: blockadsnot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
popads-node: wb3
access-control-allow-origin: *
asf: 9
popads-ec: ASB
content-type: text/javascript;charset=UTF-8
content-length: 44
date: Mon, 24 Jun 2024 13:05:43 GMT
X-Firefox-Spdy: h2
|
|
| unseenreport.com/pxf.gif?uuid=bfb2420d-39fa-48dd-99ad-8088aa9e7580&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=ef27b4397ebe128596f54115f897329f&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=13 | 192.243.61.227 | 200 OK | 1 B |
URL GET HTTP/1.1unseenreport.com/pxf.gif?uuid=bfb2420d-39fa-48dd-99ad-8088aa9e7580&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=ef27b4397ebe128596f54115f897329f&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=13 IP192.243.61.227:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerLet's Encrypt Subject*.unseenreport.com FingerprintF5:95:0F:2B:01:D6:36:49:AB:2E:61:76:F7:EC:A5:45:3D:F1:0E:59 ValidityTue, 21 May 2024 07:36:27 GMT - Mon, 19 Aug 2024 07:36:26 GMT
File typevery short file (no magic) Hash93b885adfe0da089cdf634904fd59f71 5ba93c9db0cff93f52b521d7420e43f6eda2784f 6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pxf.gif?uuid=bfb2420d-39fa-48dd-99ad-8088aa9e7580&eb=978028c5053b26833423c7a069ce3bd5&te=5db3a4e34790624df926db520a13f79f&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=e&res=14.2071&b_frame=0&pk=ef27b4397ebe128596f54115f897329f&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=13 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 24 Jun 2024 13:05:43 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: e0ed6188386ed7f5aad473a476b17d14
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| e5.o.lencr.org/ | 23.36.77.32 | | 345 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash98acb55cb0f4834484a73a0a777a66c8 800b4bbe4d03056cbdffd6ae95bc285111a49637 63d4923210333e36e29bb25d56532107ee7a6172cb52737199847345774ec192
POST / HTTP/1.1
Host: e5.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "63D4923210333E36E29BB25D56532107EE7A6172CB52737199847345774EC192"
Last-Modified: Fri, 21 Jun 2024 22:15:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9624
Expires: Mon, 24 Jun 2024 15:46:07 GMT
Date: Mon, 24 Jun 2024 13:05:43 GMT
Connection: keep-alive
|
|
| txfvxhgacvf0.l4.adsco.re/ |  185.200.118.51 | 200 OK | 0 B |
URL POST HTTP/2txfvxhgacvf0.l4.adsco.re/ IP185.200.118.51:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerLet's Encrypt Subject*.l4.adsco.re Fingerprint6A:0E:41:E3:DE:94:4F:DE:EA:FD:23:FA:26:1D:19:3A:24:53:08:53 ValiditySun, 19 May 2024 09:12:48 GMT - Sat, 17 Aug 2024 09:12:47 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: txfvxhgacvf0.l4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:43 GMT
content-type: text/html
content-length: 0
last-modified: Fri, 02 Jun 2023 14:03:32 GMT
etag: "6479f6b4-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| txfvxhgacvf0.s4.adsco.re/ |  185.200.116.51 | 200 OK | 0 B |
URL POST HTTP/2txfvxhgacvf0.s4.adsco.re/ IP185.200.116.51:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerLet's Encrypt Subject*.s4.adsco.re Fingerprint15:09:26:99:3D:07:A6:77:37:5A:1D:E3:7A:65:2D:B9:99:4F:BB:86 ValidityWed, 19 Jun 2024 09:12:43 GMT - Tue, 17 Sep 2024 09:12:42 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST / HTTP/1.1
Host: txfvxhgacvf0.s4.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 24 Jun 2024 13:05:44 GMT
content-type: text/html
content-length: 0
last-modified: Tue, 03 Oct 2023 13:29:59 GMT
etag: "651c1757-0"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
access-control-expose-headers: Content-Length,Content-Range
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| c.adsco.re/ | 104.17.166.186 | 200 OK | 78 kB |
IP104.17.166.186:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (881) Hashc626ca77548642fbab246d944b6533a5 bbda9857a83048bd607d2bb916cd0f1e4bac5b88 f5d310d03e3a80feaf50f553297436d007ece35ffb191a1c3e46fb985835aad5
GET / HTTP/1.1
Host: c.adsco.re
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:42 GMT
content-type: text/html
cache-control: public, max-age=2678400
accept-ch: Sec-CH-UA, Sec-CH-UA-Mobile, Sec-CH-UA-Full-Version, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Arch, Sec-CH-UA-Model, Device-Memory, Downlink, ECT, RTT, Width, Viewport-Width, DPR
permissions-policy: ch-ua=(self "https://adsco.re"),ch-ua-mobile=(self "https://adsco.re"),ch-ua-full-version=(self "https://adsco.re"),ch-ua-platform=(self "https://adsco.re"),ch-ua-platform-version=(self "https://adsco.re"),ch-ua-arch=(self "https://adsco.re"),ch-ua-model=(self "https://adsco.re"),ch-device-memory=(self "https://adsco.re"),ch-downlink=(self "https://adsco.re"),ch-ect=(self "https://adsco.re"),ch-rtt=(self "https://adsco.re"),ch-width=(self "https://adsco.re"),ch-viewport-width=(self "https://adsco.re"),ch-dpr=(self "https://adsco.re")
link: <//6.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//4.adsco.re/>;rel=prefetch;crossorigin;as=fetch,<//adsco.re/>;rel=preconnect
expires: Thu, 25 Jul 2024 13:05:42 GMT
etag: W/"xibKd1SGQvurJG2US2UzpQ=="
content-encoding: gzip
cf-cache-status: HIT
age: 970139
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee508bec56b7-OSL
alt-svc: h3=":443"; ma=86400
|
|
| zeriun.cc/uploads/thumbs/XKOx6vQ20mWl.jpg | 172.67.205.204 | 200 OK | 11 kB |
URL GET HTTP/3zeriun.cc/uploads/thumbs/XKOx6vQ20mWl.jpg IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 180x270, components 3 Hash93ac9111c86674b9f09e6e18a30273f8 eeb901f1a13b946ff1ad77196c261b4f69ab94f3 e2bdc9564d483085f74c57601bbd871a78cb1fa51468b9c39be25dbcd9200d9e
GET /uploads/thumbs/XKOx6vQ20mWl.jpg HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/jpeg
content-length: 10861
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Thu, 02 Feb 2023 18:07:07 GMT
etag: W/"2a6d-186134f90f8"
cf-cache-status: HIT
age: 929691
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LmoIwgwPQLRgzbiHe7Lh85mEqVvUfejVe8Y80Q8NcGaVzePPD3VuxR%2F9RS3Gdg9lsoyaUgjxpdSerDeVkq0fqooOaGdweG2IauHm39HzkPb4tWjelQIOU5YwlRI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee48ac8f56c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| zeriun.cc/assets/img/icons/favicon-16x16.png | 172.67.205.204 | 200 OK | 1.2 kB |
URL GET HTTP/3zeriun.cc/assets/img/icons/favicon-16x16.png IP172.67.205.204:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectzeriun.cc Fingerprint09:7C:5B:26:7E:5F:53:04:99:83:82:18:1F:FD:B9:55:B5:CE:D4:98 ValiditySun, 09 Jun 2024 19:28:14 GMT - Sat, 07 Sep 2024 19:28:13 GMT
File typePNG image data, 16 x 16, 8-bit colormap, non-interlaced Hash50ad93eef9a24193f3a102d62d72fbc8 e27c457a9629e872f3ee7d4ed0049eac177b5d7c 8c76f571c26b4ebf0aa635b45522d99d9e9f58cc5f0dd85061be8374329d7977
GET /assets/img/icons/favicon-16x16.png HTTP/1.1
Host: zeriun.cc
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD
Cookie: _csrf=JXMiwfp7VU_Q-NuRGOXqlodV; uid=aSlweXlZnbTpC6WEB7Dm5MRsh72CW5; sid=0Dy-M7xta8xV0qApeDYXwn0ltj98kn
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 24 Jun 2024 13:05:41 GMT
content-type: image/png
content-length: 1218
x-dns-prefetch-control: off
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=15552000; includeSubDomains
x-download-options: noopen
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 05:25:57 GMT
etag: W/"4c2-18707c7f51d"
cf-cache-status: HIT
age: 929694
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DpJta2CYuhareg92Vx0BZ5Y3tenCX3GbQNd8I79TQUzCFZGkou%2B51uUWWQNroz%2FfJRGopBiq3RbaiGn2rwzyBoy3O1ZweIUz7Y1R1lKlckg64MLN8mdzBFmjsN0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 898cee4bc84e56c4-OSL
alt-svc: h3=":443"; ma=86400
|
|
| fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap | 142.250.74.106 | 200 OK | 8.5 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap IP142.250.74.106:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint11:DC:71:A3:7E:E8:D6:5C:B1:E4:54:57:47:54:9F:3A:2F:2E:0E:A5 ValidityMon, 03 Jun 2024 07:33:23 GMT - Mon, 26 Aug 2024 07:33:22 GMT
File typeASCII text, with very long lines (8630), with no line terminators Hash8ffea396f91964270b0ca54b34561572 4b770feb78534027442e5618b66cf75f67a60521 51ff1c0cb45235ca4c12ce7b87d640d223983357f475e8d8d20c36cc6032ecfd
GET /css2?family=Noto+Color+Emoji&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 24 Jun 2024 13:05:41 GMT
date: Mon, 24 Jun 2024 13:05:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| fonts.googleapis.com/css2?family=Roboto:wght@400;500&display=swap | 142.250.74.106 | 200 OK | 4.7 kB |
URL GET HTTP/2fonts.googleapis.com/css2?family=Roboto:wght@400;500&display=swap IP142.250.74.106:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subjectupload.video.google.com Fingerprint11:DC:71:A3:7E:E8:D6:5C:B1:E4:54:57:47:54:9F:3A:2F:2E:0E:A5 ValidityMon, 03 Jun 2024 07:33:23 GMT - Mon, 26 Aug 2024 07:33:22 GMT
File typeASCII text, with very long lines (4786), with no line terminators Hash2b48c5974579d95fbac9441356a0f0a1 fc74b8d08c416ff32e8e3b7a74fa269fee4dfd9e 039357c344f207706b3f7e4509f6557f875da570d44eb8ad3eb6564a9c454aa0
GET /css2?family=Roboto:wght@400;500&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 24 Jun 2024 13:05:41 GMT
date: Mon, 24 Jun 2024 13:05:41 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| 4.adsco.re:2087/ | 162.252.214.5 | 200 OK | 45 B |
IP162.252.214.5:2087
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerSectigo Limited Subject*.adsco.re Fingerprint40:64:05:9C:99:0A:1E:9F:A7:49:61:8E:86:4C:4B:06:9C:73:83:73 ValiditySat, 23 Sep 2023 00:00:00 GMT - Sun, 29 Sep 2024 23:59:59 GMT
File typeASCII text, with no line terminators Hash5b41cb22f84f645a103acc7bfbf084ff bac3967b26d5ec4a0d09a580714e8219796816bd 709f0a0dfab9f9e074f4a4a348dcb09150838284d21e75cfb9e5ceaeeb2054bc
GET / HTTP/1.1
Host: 4.adsco.re:2087
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 24 Jun 2024 13:05:42 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Methods: GET, HEAD, OPTIONS
Access-Control-Allow-Headers: Content-Type
Access-Control-Allow-Origin: https://zeriun.cc
Access-Control-Max-Age: 2592000
Cache-Control: private, max-age=5
Content-Encoding: gzip
|
|
| fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 | 216.58.207.227 | 200 OK | 12 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 IP216.58.207.227:443
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerGoogle Trust Services Subject*.gstatic.com Fingerprint78:DC:A6:9E:E8:DF:26:D4:6F:A0:54:48:4B:48:74:34:3F:3D:F6:23 ValidityMon, 03 Jun 2024 07:32:58 GMT - Mon, 26 Aug 2024 07:32:57 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11872, version 1.0 Hash87ace20058325aa069320aa4af875dff b743548770c46d905ae1ba06310bc001c587fe8e 3c23eb02de6b34e30f18cfb7167abd81a2cedfd1da60dfcb71989517ab3fb431
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://zeriun.cc
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11872
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 21 Jun 2024 08:02:14 GMT
expires: Sat, 21 Jun 2025 08:02:14 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 11 May 2022 19:25:01 GMT
content-type: font/woff2
age: 277407
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| visitpipe.com/pixel/purst?dl=0&th=0&sc=0&rs=1450&rd=1450&fd=889&bv=24.5.8230&tmpl=70 | 192.243.59.13 | 200 OK | 0 B |
URL GET HTTP/1.1visitpipe.com/pixel/purst?dl=0&th=0&sc=0&rs=1450&rd=1450&fd=889&bv=24.5.8230&tmpl=70 IP192.243.59.13:443 ASN#39572 DataWeb Global Group B.V.
Requested byhttps://zeriun.cc/serial/burmistrz-kingstown-2021/s02e10/little-green-ant?id=Yixkq-7Z3uvD CertificateIssuerLet's Encrypt Subjectvisitpipe.com Fingerprint73:0C:E2:26:C8:DF:E1:6B:23:3B:C3:ED:05:B1:01:C9:C7:20:60:ED ValiditySun, 02 Jun 2024 08:57:06 GMT - Sat, 31 Aug 2024 08:57:05 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /pixel/purst?dl=0&th=0&sc=0&rs=1450&rd=1450&fd=889&bv=24.5.8230&tmpl=70 HTTP/1.1
Host: visitpipe.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://zeriun.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Mon, 24 Jun 2024 13:05:42 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
|
|